windows

Aladdin Knowledge System Ltd – ‘ChooseFilePath’ Remote Buffer Overflow (Metasploit)

##

Axigen Mail Server – ‘Filename’ Directory Traversal

source: https://www.securityfocus.com/bid/56343/info

Freefloat FTP Server – ‘PUT’ Remote Buffer Overflow

#!/usr/bin/python

Microsoft Excel 2010 – Crash (PoC) (1)

Title : Microsoft Office Excel 2010 memory corruption

HP Operations Agent – Opcode ‘coda.exe’ 0x34 Buffer Overflow (Metasploit)

##

HP Operations Agent – Opcode ‘coda.exe’ 0x8c Buffer Overflow (Metasploit)

##

Microsoft Publisher 2010 – Crash (PoC)

Title : Microsoft Office Publisher 2010 memory corruption

Microsoft Windows Help Program – ‘WinHlp32.exe’ Crash (PoC)

#!/usr/bin/perl

hMAilServer 5.3.3 – IMAP Remote Crash (PoC)

# Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC

Aladdin Knowledge System Ltd – ‘PrivAgent.ocx’ ChooseFilePath Buffer Overflow

Microsoft Paint 5.1 – ‘.bmp’ Denial of Service

source: https://www.securityfocus.com/bid/56311/info

KMPlayer 3.0.0.1440 – ‘.avi’ File Local Denial of Service

source: https://www.securityfocus.com/bid/56322/info

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 – Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----

Microsoft Office Picture Manager 2010 – Crash (PoC)

Title : Microsoft Office Picture Manager 2010 memory corruption

Microsoft Word 2010 – Crash (PoC)

Title : Microsoft Office Word 2010 Stack Overflow

Apple QuickTime Player 7.7.2 – Crash (PoC)

#!/usr/bin/perl

Turbo FTP Server 1.30.823 – PORT Overflow (Metasploit)

##

Adobe Reader 10.1.4 – Crash (PoC)

#!/usr/bin/perl

RealPlayer 15.0.6.14.3gp – Crash (PoC)

#!/usr/bin/perl

Microsoft Internet Explorer 9 – Cross-Site Scripting Filter Bypass

#################################################

ManageEngine Security Manager Plus 5.5 build 5505 – Remote SYSTEM SQL Injection (Metasploit)

##

Broadcom WIDCOMM Bluetooth – ‘btkrnl.sys’ Driver Privilege Escalation

source: https://www.securityfocus.com/bid/56124/info

OTRS 3.1 – Persistent Cross-Site Scripting

#!/usr/bin/python

Samsung Kies 2.3.2.12054_20 – Multiple Vulnerabilities

Advisory ID: HTB23099

EZHomeTech EzServer 7.0 – Remote Heap Corruption

[Title]:

Microsoft Windows – Escalate Service Permissions Privilege Escalation (Metasploit)

##

QQPlayer 3.7.892 – m2p ‘quartz.dll’ Heap Pointer Overwrite (PoC)

# Exploit Title: QQPlayer 3.7.892 m2p quartz.dll heap pointer overwrite PoC

Huawei Technologies Internet Mobile – Unicode (SEH)

#!/usr/bin/perl

Microsoft Windows Media Player 10 – ‘.avi’ Integer Division By Zero Crash (PoC)

#!/usr/bin/perl

Microsoft Excel – Denial of Service

source: https://www.securityfocus.com/bid/56309/info

FileBound 6.2 – Local Privilege Escalation

Sense of Security - Security Advisory - SOS-12-010

KeyHelp – ActiveX LaunchTriPane Remote Code Execution (Metasploit)

##

VideoLAN VLC Media Player 2.0.3 – ‘.png’ ReadAV Crash (PoC)

#!/usr/bin/perl

PHP 5.3.4 Win Com Module – Com_sink

# Exploit Title: PHP 5.3.4 Win Com Module Com_sink Local Exploit

Avaya IP Office Customer Call Reporter – ‘ImageUpload.ashx’ Remote Command Execution (Metasploit)

##

Microsoft Windows – Escalate UAC Protection Bypass (Metasploit)

##

Microsoft Windows – ‘AfdJoinLeaf’ Local Privilege Escalation (MS11-080) (Metasploit)

##

Microsoft Windows – Escalate UAC Execute RunAs (Metasploit)

##

HP Application Lifecycle Management – ‘XGO.ocx’ ActiveX ‘SetShapeNodeType()’ Remote Code Execution (Metasploit)

##

NTR – ActiveX Control ‘Check()’ Method Buffer Overflow (Metasploit)

##

Microsoft Internet Explorer – execCommand Use-After-Free (MS12-063) (Metasploit)

##

NTR – ActiveX Control ‘StopModule()’ Remote Code Execution (Metasploit)

##

Avaya WinPMD UniteHostRouter – Remote Buffer Overflow (Metasploit)

##

InduSoft Web Studio – Arbitrary File Upload / Remote Code Execution (Metasploit)

##

PLIB 1.8.5 – ‘ssg/ssgParser.cxx’ Local Buffer Overflow

# Exploit Title: Plib + flightgear 3dconvert exploit

Gom Player 2.1.44.5123 – ‘UNICODE’ Null Pointer Dereference

# Exploit Title: gom player 2.1.44.5123 (Unicode) NULL pointer dereference =

FL Studio 10 Producer Edition – Buffer Overflow (SEH) (PoC)

# Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

Arctic Torrent 1.2.3 – Memory Corruption (Denial of Service)

#!/usr/bin/perl

FastStone Image Viewer 4.6 – ReadAVonIP Crash (PoC)

#!/usr/bin/perl

HCView – WriteAV Crash (PoC)

#!/usr/bin/perl