windows

Microsoft Winows 7 – Keyboard Layout Blue Screen of Death (MS10-073)

//Crash:

VMware – Update Manager Directory Traversal

# Exploit Title:VMware Update Manager Directory Traversal

Viscom Software Movie Player Pro SDK ActiveX 6.8 – Stack Buffer Overflow (Metasploit)

##

Wireshark – console.lua pre-loading (Metasploit)

##

GoAhead Web Server 2.5 – ‘goform/formTest’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50729/info

Jetty Web Server – Directory Traversal

source: https://www.securityfocus.com/bid/50723/info

Thunder Kankan Player 4.8.3.840 – Stack Overflow / Denial of Service

#!/usr/bin/env python

Viscom Image Viewer CP Pro 8.0/Gold 6.0 – ActiveX Control (Metasploit)

##

Attachmate Reflection FTP Client – Heap Overflow

#####################################################################################

Mini-stream RM-MP3 Converter 3.1.2.1 – ‘.pls’ Local Stack Buffer Overflow (Metasploit)

##

optima apiftp server 1.5.2.13 – Multiple Vulnerabilities

#######################################################################

Aviosoft Digital TV Player Professional 1.0 – Local Stack Buffer Overflow (Metasploit)

##

Kool Media Converter 2.6.0 – ‘.ogg’ File Buffer Overflow

source: https://www.securityfocus.com/bid/50651/info

Kool Media Converter 2.6.0 – Denial of Service

#!/usr/bin/env python

Soda PDF Professional 1.2.155 – ‘.pdf’ / ‘.WWF’ File Handling Denial of Service

#!/usr/bin/perl

AbsoluteFTP 1.9.6 < 2.2.10 - 'LIST' Remote Buffer Overflow (Metasploit)

# Exploit Title: AbsoluteFTP 1.9.6 - 2.2.10 Remote Buffer Overflow (LIST)

Aviosoft Digital TV Player Professional 1.x – Local Stack Buffer Overflow

# Exploit Title: Aviosoft Digital TV Player Professional 1.x Stack Buffer Overflow

Microsoft Windows – TCP/IP Stack Reference Counter Integer Overflow (MS11-083)

// source: https://www.securityfocus.com/bid/50517/info

XAMPP 1.7.7 – ‘PHP_SELF’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50564/info

Oracle – xdb.xdb_pitrig_pkg.PITRIG_DROPMETADATA procedure

# Exploit Title: New exploit to Oracle CVE-2007-4517 vulnerability

Oracle Hyperion Strategic Finance 12.x – Tidestone Formula One WorkBook OLE Control TTF16.ocx Remote Heap Overflow

KnFTP 1.0 – Remote Buffer Overflow (DEP Bypass) (Metasploit)

#module for metasploit framework, for more information

Microsoft Excel 2007 – ‘.xlb’ Local Buffer Overflow (MS11-021) (Metasploit)

##

Mini-stream Ripper 3.0.1.1 – Local Buffer Overflow (Metasploit) (3)

##

Microsoft Excel 2003 11.8335.8333 – Use-After-Free

#######################################################################

HP Data Protector Media Operations 6.20 – Directory Traversal

#######################################################################

Microsoft Excel 2007 SP2 – Buffer Overwrite (MS11-021)

Abysssec Research

Oracle Hyperion Financial Management TList6 – ActiveX Control Remote Code Execution

Oracle Hyperion Financial Management TList6 ActiveX

NJStar Communicator 3.00 – MiniSMTP Server Remote (Metasploit)

##

Oracle DataDirect ODBC Drivers – HOST Attribute ‘arsqls24.dll’ Stack Buffer Overflow (PoC)

BroadWin Webaccess SCADA/HMI Client – Remote Code Execution

BroadWin WebAccess SCADA/HMI Remote Code Execution Vulnerability [0day]

Opera Web Browser 11.52 – Escape Sequence Stack Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/50421/info

GFI Faxmaker Fax Viewer 10.0 (build 237) – Denial of Service (PoC)

#!/usr/bin/python

XAMPP 1.7.4 – Cross-Site Scripting

source: https://www.securityfocus.com/bid/50381/info

GTA SA-MP – ‘server.cfg’ Local Buffer Overflow (Metasploit)

##

BlueZone Desktop – Multiple Malformed Files Local Denial of Service Vulnerabilities

# Exploit Title: BlueZone Desktop Malformed .zmd file Local Denial of Service

Oracle AutoVue 20.0.1 – ‘AutoVueX.ocx’ ActiveX Control ‘ExportEdaBom()’ Insecure Method

source: https://www.securityfocus.com/bid/50332/info

SAP Management Console – OSExecute Payload Execution (Metasploit)

##

BlueZone – ‘.zft’ File Local Denial of Service

#!/usr/bin/perl -w

zFTPServer – ‘cwd/stat’ Remote Denial of Service

#!/usr/bin/python

Cytel Studio 9.0 – ‘.CY3’ Local Stack Buffer Overflow (Metasploit)

##

Microsoft Win32k – Null Pointer De-reference (PoC) (MS11-077)

# Exploit Title: MS11-077 Win32k Null Pointer De-reference Vulnerability POC

Google Chrome – Killing Thread (PoC)

## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ##

Cyclope Internet Filtering Proxy 4.0 – ‘CEPMServer.exe’ Denial of Service (PoC)

#!/usr/bin/python

Oracle AutoVue 20.0.1 AutoVueX – ActiveX Control SaveViewStateToFile

Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Remote

Opera 11.51 – Use-After-Free Crash (PoC)

# Exploit Title: Opera Use After Free - Crash PoC

Cyclope Internet Filtering Proxy 4.0 – Persistent Cross-Site Scripting

#!/usr/bin/python

UnrealIRCd 3.2.8.1 – Local Configuration Stack Overflow

# Exploit Title: UnrealIRCd local configuration stack overflow

Opera 11.52 – Stack Overflow

## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ##

Oracle DataDirect – Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Buffer Overflows (PoC)

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers