windows

Indusoft Thin Client 7.1 – ActiveX Buffer Overflow

HP LoadRunner – ‘magentproc.exe’ Remote Overflow (Metasploit)

##

SIEMENS Solid Edge ST4 SEListCtrlX – ActiveX Remote Code Execution (Metasploit)

##

Micorosft Internet Explorer – SetMouseCapture Use-After-Free (Metasploit)

##

freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (Metasploit)

##

KMPlayer 3.7.0.109 – ‘.wav’ Crash (PoC)

# Exploit Title: KMPlayer 3.7.0.109 Integer division by zero DoS.

Microsoft Windows Theme File Handling – Arbitrary Code Execution (MS13-071) (Metasploit)

##

Microsoft Internet Explorer – CCaret Use-After-Free (MS13-069) (Metasploit)

##

ShareKM – Remote Denial of Service

source: https://www.securityfocus.com/bid/62586/info

SolarWinds Server and Application Monitor – ActiveX ‘Pepco32c’ Buffer Overflow

Share KM 1.0.19 – Remote Denial of Service

Advisory Information :

McKesson – ActiveX File/Environmental Variable Enumeration

McKesson Rad Station ActiveX File/Variable Enumeration

TeraCopy 2.3 – ‘default.mo’ Language File Integer Overflow

#!J:\Perl\bin\perl.exe

HP ProCurve Manager SNAC – UpdateCertificatesServlet Arbitrary File Upload (Metasploit)

##

HP ProCurve Manager – SNAC UpdateDomainControllerServlet Arbitrary File Upload (Metasploit)

##

Agnitum Outpost Internet Security – Local Privilege Escalation (Metasploit)

##

Oracle Java – ‘ShortComponentRaster.verify()’ Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

PCMan FTP Server 2.07 – ‘STOR’ Remote Stack Overflow (Metasploit)

##

Mitsubishi MC-WorkX 8.02 – ActiveX Control ‘IcoLaunch’ File Execution

Mitsubishi MC-WorkX Suite Insecure ActiveX Control (IcoLaunch)

Microsoft SharePoint 2013 (Cloud) – Persistent Exception Handling (MS13-067)

Title:

Target Longlife Media Player 2.0.2.0 – ‘.wav’ Crash (PoC)

# Exploit Title : Target Longlife Media Player Version 2.0.2.0 - (.wav) - Crash POC

HP SiteScope (Windows) – Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer – CAnchorElement Use-After-Free (MS13-055) (Metasploit)

##

eM Client e-mail client 5.0.18025.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (SEH) (Metasploit)

##

Watchguard Server Center – Local Privilege Escalation

// source: https://www.securityfocus.com/bid/62261/info

IKE and AuthIP IPsec Keyring Modules Service (IKEEXT) – Missing DLL (Metasploit)

##

KingView 6.53 – ‘KChartXY’ ActiveX File Creation / Overwrite

KingView 6.53 – ‘SuperGrid’ Insecure ActiveX Control

KingView Insecure ActiveX Control Proof of Concept - SuperGrid.ocx

HP LoadRunner – lrFileIOService ActiveX WriteFileString Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer – CFlatMarkupPointer Use-After-Free (MS13-059) (Metasploit)

##

GOMPlayer 2.2.53.5169 – ‘.wav’ Crash (PoC)

# Exploit Title: GOMPlayer Version 2.2.53.5169 (.wav) - Crash POC

jetAudio 8.0.16.2000 Plus VX – ‘.wav’ Crash (PoC)

# Exploit Title: jetAudio Version 8.0.16.2000 Plus VX - (.wav) - Crash POC

PotPlayer 1.5.39036 – ‘.wav’ Crash (PoC)

# Exploit Title: PotPlayer Version 1.5.39036 - Beta (.wav) - Crash POC

Oracle Java lookUpByteBI – Heap Buffer Overflow

# Exploit Title: Oracle Java lookupByteBI function heap buffer overflow

GreenBrowser 6.4.0515 – Heap Overflow

# Exploit Title: Green Browser 6.4.0515 Heap Overflow

Oracle Java – ByteComponentRaster.verify() Memory Corruption

-----BEGIN PGP SIGNED MESSAGE-----

Mozilla Firefox – XMLSerializer Use-After-Free (Metasploit)

##

HP LoadRunner – lrFileIOService ActiveX Remote Code Execution (Metasploit)

##

Aloaha PDF Suite – Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/62036/info

Oracle Endeca Server – Remote Command Execution (Metasploit)

##

Winamp 5.63 – ‘winamp.ini’ Local Overflow

# Exploit Title: winampevilskin.py

dreamMail e-mail client 4.6.9.2 – Persistent Cross-Site Scripting

#!/usr/bin/python

DeWeS 0.4.2 – Directory Traversal

Advisory ID: HTB23167

Adobe ColdFusion 9 – Administrative Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE-----

Oracle Java – ‘BytePackedRaster.verify()’ Signed Integer Overflow

-----BEGIN PGP SIGNED MESSAGE-----

freeFTPd 1.0.10 – ‘PASS’ Remote Buffer Overflow (SEH)

#!/usr/bin/perl

Cogent DataHub – HTTP Server Buffer Overflow (Metasploit)

##

PCMan FTP Server 2.07 – ‘STOR’ Remote Buffer Overflow

#!/usr/bin/python

VideoLAN VLC Media Player 2.0.8 – ‘.m3u’ Local Crash (PoC)

# Exploit Title: VLC Player 2.0.8