windows

FreeAmp 2.0.7 – ‘.pls’ Local Buffer Overflow

#!/usr/bin/python

LeadTools Imaging LEADSmtp – ActiveX Control ‘SaveMessage()’ Insecure Method

source: https://www.securityfocus.com/bid/48408/info

Lotus Notes 8.0.x < 8.5.2 FP2 - Autonomy Keyview ('.lzh' Attachment) (Metasploit)

##

FreeAmp 2.0.7 – ‘.fat’ Local Buffer Overflow

# Exploit Title: FreeAmp 2.0.7 .fat Buffer Overflow

IBM Web Application Firewall – Bypass

Trustwave's SpiderLabs Security Advisory TWSL2011-006:

Easewe FTP OCX ActiveX Control 4.5.0.9 – ‘EaseWeFtp.ocx’ Multiple Insecure Method Vulnerabilities

source: https://www.securityfocus.com/bid/48393/info

RealWin SCADA Server – DATAC Login Buffer Overflow (Metasploit)

##

Sielco Sistemi Winlog – Remote Buffer Overflow (Metasploit)

##

FactoryLink – ‘vrn.exe’ Opcode 9 Buffer Overflow (Metasploit)

##

Black Ice Cover Page – ActiveX Control Arbitrary File Download (Metasploit)

##

XnView 1.98 – Denial of Service (PoC)

# done by BraniX

Mozilla Firefox – ‘nsTreeRange’ Dangling Pointer (2)

Advisory :

DATAC RealWin SCADA Server 2 – On_FC_CONNECT_FCS_a_FILE Buffer Overflow (Metasploit)

##

Black Ice Fax Voice SDK 12.6 – Remote Code Execution

Black Ice Cover Page SDK – Insecure Method ‘DownloadImageFileURL()’ (Metasploit)

Blackice Cover Page SDK insecure method DownloadImageFileURL() exploit

Wireshark 1.4.5 – ‘bytes_repr_len()’ Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/48389/info

Sunway ForceControl 6.1 – Multiple Heap Buffer Overflow Vulnerabilities

source: https://www.securityfocus.com/bid/48328/info

Microsoft Internet Explorer – MSHTML!CObjectElement Use-After-Free (MS11-050) (Metasploit)

##

Adobe Reader/Acrobat 10.0.1 – Denial of Service

Title: [Adobe Reader/Acrobat Memory Corruption Denial of Service]

MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core'

Microsoft HyperV – Persistent Denial of Service (MS11-047)

Core Security Technologies - Corelabs Advisory

Microsoft Office XP – Remote code Execution

#####################################################################################

Microsoft Windows Media Player with K-Lite Codec Pack – Denial of Service (PoC)

Greetings,

Opera Web Browser 11.11 – Remote Crash

Microsoft Windows XP – ‘tskill’ Local Privilege Escalation

@echo off

IBM Tivoli Endpoint Manager – POST Query Buffer Overflow (Metasploit)

##

Trend Micro Data Loss Prevention Virtual Appliance 5.5 – Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5

UUSEE ActiveX < 6.11.0412.1 - Buffer Overflow

Exploit Title：UUSEE ActiveX

The KMPlayer 3.0.0.1440 (Windows 7) – ‘.mp3’ Local Buffer Overflow (ASLR Bypass)

#!/usr/bin/python

Tele Data Contact Management Server – Directory Traversal

------------------------------------------------------------------------

Simple Web Server 1.2 – Directory Traversal

------------------------------------------------------------------------

7-Technologies IGSS 9 – IGSSdataServer .Rms Rename Buffer Overflow (Metasploit)

##

ActFax Server FTP – (Authenticated) Remote Buffer Overflow

#!/usr/bin/python

VideoLAN VLC Media Player 1.1.9 – XSPF Playlist Local File Integer Overflow

TITLE

IBM Tivoli Endpoint 4.1.1 – Remote SYSTEM

#!/usr/bin/python

Cisco AnyConnect VPN Client – ActiveX URL Property Download and Execute (Metasploit)

##

The KMPlayer 3.0.0.1440 (Windows XP SP3) – ‘.mp3’ File Buffer Overflow (DEP Bypass)

#!/usr/bin/python

1ClickUnzip 3.00 – ‘.zip’ Heap Overflow

#!/usr/bin/perl

OpenDrive 1.3.141 – Local Password Disclosure

Title: OpenDrive 83F9 02 /CMP ECX,2

Xitami Web Server 2.5b4 – Remote Buffer Overflow (Egghunter)

# Exploit Title: Xitami Web Server 2.5 Remote Buffer Overflow (Egghunter)

WebSVN 2.3.2 – Unproper Metacharacters Escaping ‘exec()’ Remote Command Injection

WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote

Xitami Web Server 2.5b4 – Remote Buffer Overflow

#!/usr/bin/perl

Golden FTP Server 4.70 – PASS Stack Buffer Overflow (Metasploit)

#

EasyFTP Server 1.7.0.2 – (Authenticated) Buffer Overflow (2)

#!/usr/bin/python

Microsoft Windows Live Messenger 14 – ‘dwmapi.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/48055/info

7-Technologies IGSS 9 – Data Server/Collector Packet Handling (Metasploit)

##

HP Data Protector Client 6.11 – ‘EXEC_SETUP’ Remote Code Execution

# Exploit Title: HP Data Protector Cliet EXEC_SETUP Remote Code Execution Vulnerability PoC (ZDI-11-056)

NetVault: SmartDisk 1.2 – ‘libnvbasics.dll’ Remote Denial of Service

source: https://www.securityfocus.com/bid/48029/info

HP Data Protector Client 6.11 – ‘EXEC_CMD’ Remote Code Execution

# Exploit Title: HP Data Protector Client EXEC_CMD Remote Code Execution Vulnerability PoC (ZDI-11-055)

Poison Ivy 2.3.2 – Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/48039/info