local

Microsoft Windows – Task Scheduler ‘.XML’ Local Privilege Escalation (MS10-092) (Metasploit)

##

libdbus – ‘DBUS_SYSTEM_BUS_ADDRESS’ Local Privilege Escalation

#include

ZipItFast PRO 3.0 – Local Heap Overflow

#!/usr/bin/perl

Python – Untrusted Search Path/Code Execution

# Exploit Title: Python untrusted search path/code execution vulnerability

python-wrapper – Untrusted Search Path/Code Execution

# python-wrapper untrusted search path/code execution vulnerability

Emesene 2.12.5 – Password Disclosure

# Exploit Title: Emesene Password Disclosure

IrfanView JPEG2000 4.3.2.0 – jp2 Stack Buffer Overflow (Metasploit)

##

Apple QuickTime – TeXML Stack Buffer Overflow (Metasploit)

##

Apple QuickTime – QuickTime.util.QTByteObject Initialization Security Checks Bypass

In order to test the POC code for the reported Issue 22, manually add

URL Hunter – Local Buffer Overflow (DEP Bypass)

Exploit Title: URL Hunter buffer overflow DEP Bypass

Sysax 5.62 – Admin Interface Local Buffer Overflow

#!/usr/bin/python

Lattice Semiconductor PAC-Designer 6.21 – Symbol Value Buffer Overflow (Metasploit)

##

TFM MMPlayer – ‘.m3u’ / ‘.ppl’ Local Buffer Overflow (Metasploit)

##

Adobe Illustrator CS5.5 – Memory Corruption

##########################################################################

ESRI ArcGIS 10.0.x / ArcMap 9 – Arbitrary Code Execution

=====

Microsoft Office – ClickOnce Unsafe Object Package Handling (MS12-005) (Metasploit)

##

Lattice Semiconductor PAC-Designer 6.21 – ‘.PAC’ Local Overflow

#!/usr/bin/python -w

Sysax 5.60 – Create SSL Certificate Buffer Overflow

#Title: Sysax Security Settings Configure -> Create Certificate ->

Browsers Browsers – Navigation Download Trick

Another moderately interesting tidbit, I guess...

MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (Metasploit)

##

ispVM System – ‘.XCF’ File Handling Overflow (Metasploit)

##

OpenOffice – OLE Importer DocumentSummaryInformation Stream Handling Overflow (Metasploit)

##

Apache Mod_Auth_OpenID – Session Stealing

https://github.com/paranoid/mod_auth_openid/blob/master/CVE-2012-2760.markdown

Novell Client 4.91 SP4 – Local Privilege Escalation

# Novell Client 4.91 SP3/4 Privilege escalation exploit

Foxit Reader 3.0 – Open Execute Action Stack Buffer Overflow (Metasploit)

##

SkinCrafter ActiveX Control 3.0 – Local Buffer Overflow

# Software : SkinCrafter from NMSoft Technologies

AnvSoft Any Video Converter 4.3.6 – Unicode Buffer Overflow

# Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow.

Adobe Photoshop CS5.1 – U3D.8BI Collada Asset Elements Stack Overflow

'.

PHP 5.4.3 (Windows x86 Polish) – Code Execution

// Exploit Title: PHP 5.4 (5.4.3) Code Execution 0day (Win32)

AnvSoft Any Video Converter 4.3.6 – Local Stack Overflow

#!/usr/bin/python

Symantec pcAnywhere – Insecure File Permissions Privilege Escalation

=======

SAMSUNG NET-i Viewer 1.37 – Overwrite (SEH)

CPE17 Autorun Killer 1.7.1 – Local Stack Buffer Overflow (Metasploit)

#

Parallels PLESK 9.x – Insecure Permissions

# Exploit Title: PLESK 9.x insecure directory permission ( admin password

mount.cifs – ‘chdir()’ Arbitrary Root File Identification

########## Blueliv Advisory 2012-004 ##########

Shadow Stream Recorder 3.0.1.7 – Local Buffer Overflow (Metasploit)

##

xRadio 0.95b – Local Buffer Overflow (Metasploit)

##

Microsoft Office 2008 SP0 (Mac) – RTF pFragments

#RTF Pfragments exploit for MAC office 2008

GSM SIM Editor 5.15 – Local Buffer Overflow (Metasploit)

##

CyberLink Power2Go – name Attribute (p2g) Stack Buffer Overflow (Metasploit)

##

WICD 1.7.1 – Local Privilege Escalation

#!/usr/bin/python

Mini-stream RM-MP3 Converter 3.1.2.2 – Local Buffer Overflow

# Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer

Csound – ‘.hetro’ File Handling Stack Buffer Overflow (Metasploit)

##

BlazeVideo HDTV Player 6.6 Professional – Local Overflow (SEH + ASLR + DEP Bypass)

#!/usr/bin/python -w

Bitsmith PS Knowbase 3.2.3 – Local Buffer Overflow

Title:

mmPlayer 2.2 – ‘.ppl’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

mmPlayer 2.2 – ‘.m3u’ Local Buffer Overflow (SEH)

#!/usr/bin/perl

RM Downloader 3.1.3.3.2010.06.26 – ‘.m3u’ Local Buffer Overflow (Metasploit)

##

LightDM 1.0.6 – Arbitrary File Deletion

source: https://www.securityfocus.com/bid/52452/info

Macro Toolworks 7.5 – Local Buffer Overflow

source: https://www.securityfocus.com/bid/52351/info