local

Word List Builder 1.0 – Local Buffer Overflow (Metasploit)

##

Adobe Reader 5.1 – XFDF Buffer Overflow (SEH)

# Exploit Title: Adobe Reader 5.1 XFDF Buffer Overflow Vulnerability (SEH)

PHP 5.3.6 – Local Buffer Overflow (ROP)

Microsoft Office 2010 – ‘.RTF’ Header Stack Overflow

# Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability

Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion

# Exploit Title: Adobe Reader X Atom Type Confusion Vulnerability Exploit

Valve Steam Client Application 1559/1559 – Local Privilege Escalation

Valve Steam Client Application v1559/1559 Local Privilege Escalation

Microsoft Visio – ‘VISIODWG.dll .DXF’ File Handling (MS10-028) (Metasploit)

##

FreeAmp 2.0.7 – ‘.pls’ Local Buffer Overflow

#!/usr/bin/python

FreeAmp 2.0.7 – ‘.fat’ Local Buffer Overflow

# Exploit Title: FreeAmp 2.0.7 .fat Buffer Overflow

MPlayer – ‘.SAMI’ Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core'

Microsoft Windows XP – ‘tskill’ Local Privilege Escalation

@echo off

Linux Kernel 2.6.28/3.0 (DEC Alpha Linux) – Local Privilege Escalation

close(fd);

The KMPlayer 3.0.0.1440 (Windows 7) – ‘.mp3’ Local Buffer Overflow (ASLR Bypass)

#!/usr/bin/python

The KMPlayer 3.0.0.1440 (Windows XP SP3) – ‘.mp3’ File Buffer Overflow (DEP Bypass)

#!/usr/bin/python

OpenDrive 1.3.141 – Local Password Disclosure

Title: OpenDrive 83F9 02 /CMP ECX,2

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Without EggHunter) (Metasploit)

---

PHP 5.3.5 – ‘socket_connect()’ Local Buffer Overflow

VisiWave – ‘.VWR’ File Parsing Trusted Pointer (Metasploit)

##

Magix Musik Maker 16 – ‘.mmm’ Local Stack Buffer Overflow (Metasploit)

##

SpongeBob SquarePants Typing – Local Buffer Overflow (SEH)

# SEH overwrite exploit for SpongeBob SquarePants Typing

Sonique 1.96 – ‘.m3u’ Local Buffer Overflow

#Application: Sonique BOF EIP Overwrite

CoolPlayer Portable 2.19.2 – Local Buffer Overflow

#CoolPlayer+ Portable Buffer Overflow

A-PDF Wav to MP3 Converter 1.2.0 – DEP Bypass

# Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass

A-PDF All to MP3 Converter 2.0.0 – DEP Bypass

# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass

Chasys Media Player 2.0 – Local Buffer Overflow (SEH)

# Exploit Title: Chasys Media Player Buffer Overflow Exploit(SEH)

BlueVoda Website Builder 11 – ‘.bvp’ Local Stack Buffer Overflow

source: https://www.securityfocus.com/bid/47753/info

MJM Core Player 2011 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

MJM QuickPlayer 1.00 Beta 60a / QuickPlayer 2010 – ‘.s3m’ Local Stack Buffer Overflow (Metasploit)

##

OProfile 0.9.6 – ‘opcontrol’ Utility ‘set_event()’ Local Privilege Escalation

source: https://www.securityfocus.com/bid/47652/info

Subtitle Processor 7.7.1 – ‘.m3u’ File Buffer Overflow (SEH Unicode) (Metasploit)

##

NetOp Remote Control 8.0/9.1/9.2/9.5 – Local Buffer Overflow

# Exploit Title: NetOp Remote Control Buffer Overflow

Subtitle Processor 7.7.1 – Local Buffer Overflow (SEH Unicode)

#!/usr/bin/python

eZip Wizard 3.0 – Local Stack Buffer Overflow (Metasploit)

##

Gesytec ElonFmt ActiveX 1.1.14 – ‘ElonFmt.ocx’ pid Item Buffer Overflow (SEH)

Wireshark 1.4.4 – ‘packet-dect.c’ Local Stack Buffer Overflow (Metasploit) (1)

##

Wireshark 1.4.1 < 1.4.4 - Local Overflow (SEH)

#!/usr/bin/env python

SimplyPlay 66 – ‘.pls’ Local Buffer Overflow

#!/usr/bin/perl

NEdit 5.5 – Format String

# Exploit Title: Format string vulnerability in Nedit

PlaylistMaker 1.5 – ‘.txt’ Local Buffer Overflow

#!/usr/bin/python

Wordtrainer 3.0 – ‘.ord’ Local Buffer Overflow

#!/usr/bin/python

Microsoft HTML Help 6.1 – Local Stack Overflow

Source: http://aluigi.org/adv/chm_1-adv.txt

VeryTools VideoSpirit Pro 1.70 – ‘.visprj’ Local Buffer Overflow (Metasploit)

##

tmux 1.3/1.4 – ‘-S’ Option Incorrect SetGID Privilege Escalation

---------------------------------------

MikeyZip 1.1 – ‘.zip’ Local Buffer Overflow

#!/usr/bin/perl

AOL Desktop 9.6 – RTX Buffer Overflow (Metasploit)

##

MPlayer (r33064 Lite) – Local Buffer Overflow (ROP)

#!/usr/bin/perl

Word List Builder – Local Buffer Overflow (SEH)

# Exploit Title: Word List Builder Buffer Overflow Exploit(SEH)

HT Editor 2.0.18 – File Opening Stack Overflow

# Exploit Title: HT Editor File openning Stack Overflow (0day)

IDEAL Administration 2011 11.4 – Local Buffer Overflow (SEH)

#!/usr/bin/env python

Apple Mac OSX 10.6.x – HFS Subsystem Information Disclosure

// source: https://www.securityfocus.com/bid/46982/info