MPlayer Lite r33064 – ‘.m3u’ Local Overflow (SEH)
#!/usr/bin/perl
local
local 相关类别内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Mediacoder 2011 RC3 – ‘.m3u’ Local Buffer Overflow
# Exploit Title: Mediacoder 2011 RC3 0-days Exploit
CORE MultiMedia Suite 2011 CORE Player 2.4 – ‘.m3u’ Local Buffer Overflow
# Exploit: CORE Multimedia Suite 2011 CORE Player 2.4 Unicode SEH Buffer Overflow Exploit (.m3u)
POP Peeper 3.7 – Local Overflow (SEH)
#!/usr/bin/ruby
Microsoft Source Code Analyzer for SQL Injection 1.3 – Improper Permissions
Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions
ABBS Electronic Flash Cards 2.1 – ‘.fcd’ Local Buffer Overflow
# Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit
ABBS Audio Media Player 3.0 – ‘.lst’ Local Buffer Overflow (SEH)
# Exploit Title: ABBS Audio Media Player Buffer Overflow Exploit (SEH)
ABBS Audio Media Player – ‘.m3u’ / ‘.LST’ Local Buffer Overflow
# Exploit: ABBS Audio Media Player Buffer Overflow Exploit (M3U/LST)
CoolZip 2.0 – zip Buffer Overflow
#!/usr/bin/perl
FreeBSD 6.4 – Netgraph Privilege Escalation
/* * FreeBSD
Movavi VideoSuite 8.0 MediaPlayer – ‘.m3u’ Local Buffer Overflow
#!/usr/bin/perl
.NET Runtime Optimization Service – Local Privilege Escalation
# Exploit Title: .NET Runtime Optimization Service Privilege Escalation
Magic Music Editor – Local Buffer Overflow
#!/usr/bin/perl
Elecard AVC_HD/MPEG Player 5.7 – Local Buffer Overflow
#!/usr/bin/env python
AutoPlay 1.33 (autoplay.ini) – Local Buffer Overflow (SEH)
#!/usr/bin/python
Oracle 10/11g – ‘exp.exe?file’ Local Buffer Overflow
#!/usr/bin/python
CuteZip 2.1 – Local Buffer Overflow
#!/usr/bin/perl
MoviePlay 4.82 – ‘.lst’ Local Buffer Overflow
#!/usr/bin/env python
xRadio 0.95b – ‘.xrl’ Local Buffer Overflow (SEH)
GotGeek Labs
DESlock+ < 4.1.10 - 'vdlptokn.sys' Local Kernel Ring0 SYSTEM
pModuleBase = &pModuleInfo->Module[0];
AoA Mp4 Converter 4.1.0 – ActiveX Stack Overflow
# Exploit Title: AoA Mp4 converter v4.1.0 Activex
AoA DVD Creator 2.5 – ActiveX Stack Overflow
# Exploit Title: AoA DVD Creator V2.5 Activex
FreeBSD 5.4-RELEASE ftpd 6.00LS – ‘sendfile’ Memory Leak
lockfd = open("exploit.lck", O_CREAT|O_RDWR, 0777);
AOL Desktop 9.6 – ‘.rtx’ Local Buffer Overflow
#!/usr/bin/python
CodeBlocks 8.02 – ‘cbp’ Local Buffer Overflow
#!/usr/bin/python
OpenVAS Manager – Command Injection
Source: http://securityreason.com/securityalert/8048
AOL 9.5 – ‘.rtx’ Local Buffer Overflow
#!/usr/bin/python
A-PDF All to MP3 Converter 2.0.0 – ‘.wav’ Local Buffer Overflow (SEH)
# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow
WM Downloader 3.1.2.2 2010.04.15 – ‘.m3u’ File Buffer Overflow (DEP Bypass)
#!/usr/bin/env python
Microsoft Internet Explorer – MHTML Protocol Handler Cross-Site Scripting
Hacking with mhtml protocol handler
Virtuosa Phoenix Edition 5.2 – ASX Buffer Overflow (SEH)
#!/usr/bin/python
Microsoft Fax – Cover Page Editor 5.2.3790.3959 Double-Free Memory Corruption
Source: http://aluigi.org/adv/fxscover_1-adv.txt
A-PDF All to MP3 Converter 2.0.0 – ‘.wav’ Local Buffer Overflow
# Exploit Title: A-PDF All to MP3 Converter v.2.0.0 stack based buffer overflow
Linux Kernel 2.6.32 (Ubuntu 10.04) – ‘/proc’ Handling SUID Privilege Escalation
Source: http://www.halfdog.net/Security/2011/SuidBinariesAndProcInterface/
Microsoft Win32k – Keyboard Layout (MS10-073)
// My koala is staring at you CºgºD
Nokia MultiMedia Player 1.0 – Local Overflow (SEH Unicode)
# Exploit Title: Nokia Multimedia player SEH Unicode
DriveCrypt 5.3 – Local Kernel Ring0 SYSTEM
pModuleBase = &pModuleInfo->Module[0];
Linux Kernel (Solaris 10 / < 5.10 138888-01) - Local Privilege Escalation
#define _STRUCTURED_PROC 1