windows

Oracle GlassFish Server – REST Cross-Site Request Forgery

Details

Samsung NET-i ware 1.37 – Multiple Vulnerabilities

#######################################################################

Oracle GlassFish Server 3.1.1 (build 12) – Multiple Cross-Site Scripting Vulnerabilities

Details

xRadio 0.95b – Local Buffer Overflow (Metasploit)

##

TFTP Server 1.4 – ST WRQ Buffer Overflow (Metasploit)

##

VideoLAN VLC Media Player 2.0.1 – ‘.mp4’ Crash (PoC)

###########################################################################################################

Microsoft Windows – ‘afd.sys’ Local Kernel (PoC) (MS11-046)

MS11-046 Was a Zero day found in the wild , reported to MS by

GSM SIM Editor 5.15 – Local Buffer Overflow (Metasploit)

##

CyberLink Power2Go – name Attribute (p2g) Stack Buffer Overflow (Metasploit)

##

IrfanView FlashPix PlugIn – Decompression Heap Overflow

#####################################################################################

Quest InTrust – Annotation Objects Uninitialized Pointer (Metasploit)

###

IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 – ActiveX RunAndUploadFile() Method Overflow (Metasploit)

##

Mini-stream RM-MP3 Converter 3.1.2.2 – Local Buffer Overflow

# Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer

Distinct TFTP 3.10 – Writable Directory Traversal Execution (Metasploit)

##

Play [EX] 2.1 – ‘.M3U’/’.PLS’/’.LST’ Playlist File Denial of Service

#!/usr/bin/perl

Distinct TFTP Server 3.01 – Directory Traversal

# Exploit Title: Distinct TFTP Server get ../../../../../../../../../../../../../boot.ini

AnvSoft Any Video Converter 4.3.6 – Multiple Buffer Overflows

Title:

BulletProof FTP Client 2010 – Buffer Overflow (PoC)

Title:

LANDesk Lenovo ThinkManagement Console – Remote Command Execution (Metasploit)

##

Csound – ‘.hetro’ File Handling Stack Buffer Overflow (Metasploit)

##

TRENDnet SecurView Internet Camera – UltraMJCam OpenFileDlg Buffer Overflow (Metasploit)

##

Quest vWorkspace 7.5 Connection Broker Client – ActiveX Control ‘pnllmcli.dll 7.5.304.547’ SaveMiniLaunchFile() Method Remote File Creation / Overwrite

Quest Toad for Oracle Explain Plan Display ActiveX Control – ‘QExplain2.dll 6.6.1.1115’ Remote File Creation / Overwrite

Xion Audio Player 1.0.127 – ‘.aiff’ Denial of Service

#!/usr/bin/python

NetOp Remote Control Client 9.5 – Remote Buffer Overflow (Metasploit)

##

Sysax 5.57 – Directory Traversal

#!/usr/bin/python

BlazeVideo HDTV Player 6.6 Professional – Local Overflow (SEH + ASLR + DEP Bypass)

#!/usr/bin/python -w

FoxPlayer 2.6.0 – Denial of Service

Denial of Service in FoxPlayer version 2.6.0

MailMax 4.6 – POP3 ‘USER’ Remote Buffer Overflow

#!/usr/bin/python

Bitsmith PS Knowbase 3.2.3 – Local Buffer Overflow

Title:

Apple Safari 5.1.5 For Windows – ‘window.open()’ URI Spoofing

source: https://www.securityfocus.com/bid/52746/info

Quest InTrust 10.4.x – Annotation Objects ActiveX Control ‘AnnotateX.dll’ Uninitialized Pointer Remote Code Execution

Quest InTrust 10.4.x Annotation Objects ActiveX Control

Quest InTrust 10.4.x – ReportTree / SimpleTree Classes

Quest InTrust 10.4.x ReportTree and SimpleTree Classes

KnFTPd 1.0.0 – ‘FEAT’ Denial of Service (PoC)

#!/usr/bin/perl

UltraVNC 1.0.2 Client – ‘vncviewer.exe’ Remote Buffer Overflow (Metasploit)

##

RealPlayer – ‘.mp4’ file handling memory Corruption

###########################################################################################################

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) – FTP USER Command Buffer Overflow (Metasploit)

##

mmPlayer 2.2 – ‘.ppl’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

mmPlayer 2.2 – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

Spotify 0.8.2.610 – search func Memory Exhaustion

#!/usr/local/bin/perl

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) 1.1.0.6 – Remote Buffer Overflow

#!/usr/bin/python

Microsoft Internet Explorer – Object Memory Use-After-Free (MS10-002) (Metasploit)

##

Cisco Linksys WVC200 Wireless-G PTZ Internet Video Camera PlayerPT – ActiveX Control PlayerPT.ocx sprintf Buffer Overflow (PoC)

Google Talk – ‘gtalk://’ Deprecated URI Handler Injection

Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability

Oreans WinLicense 2.1.8.0 – XML File Handling Memory Corruption

#!/usr/bin/perl

Oreans Themida 2.1.8.0 – ‘.TMD’ File Handling Buffer Overflow

Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability

Dell Webcam CrazyTalk – ActiveX BackImage (Metasploit)

##

Adobe Photoshop 12.1 – ‘.tiff’ Parsing Use-After-Free

#####################################################################################

Tiny Server 1.1.9 – HEAD Denial of Service

#!/usr/bin/python

PeerFTP Server 4.01 – Remote Crash (PoC)

#!/usr/bin/python