windows

Microsoft Windows – Manage Memory Payload Injection (Metasploit)

##

Aloaha PDF Crypter (3.5.0.1164) – ActiveX Arbitrary File Overwrite

-----BEGIN PGP SIGNED MESSAGE-----

Aloaha Credential Provider Monitor 5.0.226 – Local Privilege Escalation

Aloaha Credential Provider Monitor 5.0.226 Local Privilege Escalation Vulnerability

Nvidia Display Driver Service (Nsvr) – Local Buffer Overflow

NVidia Display Driver Service (Nsvr) Exploit - Christmas 2012

freeSSHd 1.2.6 – Authentication Bypass (Metasploit)

require 'msf/core'

Serva 2.0.0 – HTTP Server GET Remote Denial of Service

#!/usr/bin/python

Serva 2.0.0 – DNS Server QueryName Remote Denial of Service

#!/usr/bin/python

Microsoft Lync 2010 4.0.7577.0 – User-Agent Header Handling Arbitrary Command Execution

source: https://www.securityfocus.com/bid/57300/info

Nero MediaHome 4.5.8.0 – Denial of Service

Advisory ID: HTB23130

Honeywell Tema Remote Installer – ActiveX Remote Code Execution (Metasploit)

##

Microsoft Internet Explorer – Option Element Use-After-Free (MS11-081) (Metasploit)

##

Microsoft Internet Explorer 8 – Fixed Col Span ID (Full ASLR + DEP Bypass) (MS12-037)

Samsung Kies – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/57249/info

Inmatrix Ltd. Zoom Player 8.5 – ‘.jpeg’File Memory Corruption / Arbitrary Code Execution

# Exploit Title: Inmatrix Ltd. Zoom Player Crafted JPEG File Memory Corruption and Arbitrary Code Execution Exploit.

IBM Cognos – ‘tm1admsd.exe’ Remote Overflow (Metasploit)

##

Foxit Reader 5.4.4.1128 Firefox Plugin – ‘npFoxitReaderPlugin.dll’ Stack Buffer Overflow (PoC)

FoxPlayer 2.9.0 – Denial of Service

#!/usr/bin/python

Enterasys NetSight – ‘nssyslogd.exe’ Remote Buffer Overflow (Metasploit)

##

Simple Web Server 2.3-rc1 – Directory Traversal

# Exploit Title: Simple Webserver 2.3-rc1 Directory Traversal

Microsoft Internet Explorer – CButton Object Use-After-Free (Metasploit)

##

BlazeDVD 6.1 – ‘.PLF’ File (ASLR + DEP Bypass) (Metasploit)

##

Aktiv Player 2.80 – Crash (PoC)

# !/usr/bin/python

Microsoft Internet Explorer – CDwnBindInfo Object Use-After-Free (Metasploit)

##

IBM Lotus iNotes dwa85W – ActiveX Buffer Overflow (Metasploit)

##

IBM Lotus QuickR qp2 – ActiveX Buffer Overflow (Metasploit)

##

RealPlayer – ‘.RealMedia’ File Handling Buffer Overflow (Metasploit)

##

IBM Lotus Notes Client URL Handler – Command Injection (Metasploit)

##

Microsoft SQL Server – Database Link Crawling Command Execution (Metasploit)

##

FireFly Mediaserver 1.0.0.1359 – Null Pointer Dereference

Advisory ID: HTB23129

Sony PC Companion 2.1 – ‘Admin_RemoveDirectory()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overload SEH

Sony PC Companion 2.1 – ‘CheckCompatibility()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (CheckCompatibility()) Stack-based Unicode Buffer Overload

Sony PC Companion 2.1 – ‘Load()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overload SEH

Sony PC Companion 2.1 – ‘DownloadURLToFile()’ Unicode Stack Buffer Overflow

Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Unicode Buffer Overload SEH

InduSoft Web Studio – ‘ISSymbol.ocx InternationalSeparator()’ Heap Overflow (Metasploit)

##

DIMIN Viewer 5.4.0 – GIF Decode Crash (PoC)

PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23496.tar.gz

Crystal Reports CrystalPrintControl – ActiveX ServerResourceVersion Property Overflow (Metasploit)

##

Adobe Flash Player 11.5.502.135 – Crash (PoC)

Title : Adobe Flash Player 11,5,502,135 memory corruption

Axway Secure Transport 5.1 SP2 – Directory Traversal

Secure Transport Path Traversal Vulnerability

Novell File Reporter (NFR) Agent – XML Parsing Remote Code Execution

# wwww.abysssec.com

Microsoft Internet Explorer 6 < 10 - Mouse Tracking

Summary: Unprivileged attackers can track your system-wide mouse

HP Data Protector – DtbClsLogin Buffer Overflow (Metasploit)

##

IrfanView 4.33 – ‘IMXCF.dll’ Plugin Code Execution

>From the simple.xcf file, 0x004ABABC will overwrite eip.

FreeVimager 4.1.0 – Crash (PoC)

#!/usr/bin/perl

DIMIN Viewer 5.4.0 – Crash (PoC)

#!/usr/bin/perl

TVMOBiLi 2.1.0.3557 – Denial of Service

Advisory ID: HTB23120

SumatraPDF 2.1.1/MuPDF 1.0 – Integer Overflow

Sumatra 2.1.1/MuPDF 1.0 Integer Overflow

Freefloat FTP Server – ‘USER’ Remote Buffer Overflow

#Exploit title: FreeFloat FTP Server Remote Command Execution USER Command Buffer Overflow

Freefloat FTP Server – Arbitrary File Upload (Metasploit)

##

Maxthon3 – about:history XCS Trusted Zone Code Execution (Metasploit)

##

IBM System Director Agent – DLL Injection (Metasploit)

##