windows

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Without EggHunter) (Metasploit)

---

Magneto ICMP ActiveX 4.0.0.20 – ICMPSendEchoRequest Remote Code Execute

Magneto ICMP ActiveX v4.0.0.20 ICMPSendEchoRequest Remote Code Execute

VisiWave – ‘.VWR’ File Parsing Trusted Pointer (Metasploit)

##

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Metasploit)

##

SpongeBob SquarePants Typing – Local Buffer Overflow (SEH)

# SEH overwrite exploit for SpongeBob SquarePants Typing

Microsoft Windows Vista/2008 – ‘nsiproxy.sys’ Local Kernel Denial of Service

#!/usr/bin/python

Cisco Unified Operations Manager – Multiple Vulnerabilities

Sense of Security - Security Advisory - SOS-11-006

Sonique 1.96 – ‘.m3u’ Local Buffer Overflow

#Application: Sonique BOF EIP Overwrite

AVS Ringtone Maker 1.6.1 – ‘.au’ File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47851/info

7-Technologies IGSS 9.00.00 b11063 – ‘IGSSdataServer.exe’ Remote Stack Overflow (Metasploit)

##

CoolPlayer Portable 2.19.2 – Local Buffer Overflow

#CoolPlayer+ Portable Buffer Overflow

Steam Software – Denial of Service

# Exploit Title: Steam Cloud Denial of Service 0day

Winamp 5.61 – ‘in_midi’ Component heap Overflow (crash only)

# Exploit Title: Winamp 'in_midi' component heap overflow

Adobe Audition 3.0 build 7283 – Session File Handling Buffer Overflow (PoC)

#!/usr/bin/perl

A-PDF Wav to MP3 Converter 1.2.0 – DEP Bypass

# Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass

Oracle GlassFish Server – Administration Console Authentication Bypass

Oracle GlassFish Server Administration Console Authentication Bypass

A-PDF All to MP3 Converter 2.0.0 – DEP Bypass

# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass

SlimPDF Reader – Denial of Service (PoC)

Slimpdf Reader from investintech,

Symantec Backup Exec System Recovery 8.5 – Kernel Pointers Dereferences

#include

Chasys Media Player 2.0 – Local Buffer Overflow (SEH)

# Exploit Title: Chasys Media Player Buffer Overflow Exploit(SEH)

SPlayer 3.7 – Content-Type Buffer Overflow (Metasploit)

##

ICONICS WebHMI – ActiveX Buffer Overflow (Metasploit)

##

serva32 1.2.00 rc1 – Multiple Vulnerabilities

# ------------------------------------------------------------------------

BlueVoda Website Builder 11 – ‘.bvp’ Local Stack Buffer Overflow

source: https://www.securityfocus.com/bid/47753/info

SPlayer 3.7 (build 2055) – Remote Buffer Overflow

#!/usr/bin/python

ICONICS WebHMI – ActiveX Stack Overflow

( , ) (,

OpenMyZip 0.1 – ‘.zip’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47678/info

MJM Core Player 2011 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

Microsoft Excel – Axis Properties Record Parsing Buffer Overflow (PoC) (MS11-02)

"""

Subtitle Processor 7.7.1 – ‘.m3u’ File Buffer Overflow (SEH Unicode) (Metasploit)

##

NetOp Remote Control 8.0/9.1/9.2/9.5 – Local Buffer Overflow

# Exploit Title: NetOp Remote Control Buffer Overflow

EMC HomeBase Server – Directory Traversal Remote Code Execution (Metasploit)

##

Subtitle Processor 7.7.1 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

eXPert PDF 7.0.880.0 – ‘.pj’ Heap Buffer Overflow

source: https://www.securityfocus.com/bid/47571/info

AT-TFTP Server 1.8 – ‘Read’ Request Remote Denial of Service

source: https://www.securityfocus.com/bid/47561/info

eZip Wizard 3.0 – Local Stack Buffer Overflow (Metasploit)

##

Gesytec ElonFmt ActiveX 1.1.14 – ‘ElonFmt.ocx’ pid Item Buffer Overflow (SEH)

Yahoo! CD Player – ActiveX Control ‘open()’ Method Stack Buffer Overflow

source: https://www.securityfocus.com/bid/51011/info

Wireshark 1.4.4 – ‘packet-dect.c’ Remote Stack Buffer Overflow (Metasploit) (2)

##

IBM Tivoli Directory Server SASL – Bind Request Remote Code Execution

Source: http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=26&Itemid=26

Adobe Flash Player < 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)

Source: http://www.abysssec.com/blog/2011/04/exploiting-adobe-flash-player-on-windows-7/

Wireshark 1.4.4 – ‘packet-dect.c’ Local Stack Buffer Overflow (Metasploit) (1)

##

Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)

#!/usr/bin/env python

Adobe Flash Player 10.2.153.1 – SWF Memory Corruption (Metasploit)

##

EC Software Help & Manual 5.5.1 Build 1296 – ‘ijl15.dll’ DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/47349/info

SimplyPlay 66 – ‘.pls’ Local Buffer Overflow

#!/usr/bin/perl

PlaylistMaker 1.5 – ‘.txt’ Local Buffer Overflow

#!/usr/bin/python

Winamp 5.6.1 – ‘.m3u8’ Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47333/info

Microsoft Excel – Remote Buffer Overflow

source: https://www.securityfocus.com/bid/47245/info