blake

EIP-2026-118247 EXPLOITDB html WORKING POC

Aladdin Knowledge Systems Ltd. PrivAgent - ActiveX Control Overflow

View Code

EIP-2026-118236 EXPLOITDB python WORKING POC

Ada Image Server 0.6.7 - 'imgsrv.exe' Remote Buffer Overflow

View Code

EIP-2026-118142 EXPLOITDB ruby WORKING POC

WM Downloader 3.0.0.9 - Local Buffer Overflow (Metasploit)

View Code

EIP-2026-118109 EXPLOITDB ruby WORKING POC

Winamp 5.572 - 'whatsnew.txt' (SEH) (Metasploit)

View Code

EIP-2026-117782 EXPLOITDB ruby WORKING POC

PlayMeNow 7.3/7.4 - Local Buffer Overflow (Metasploit)

View Code

CVE-2013-6128 EXPLOITDB html WORKING POC

WellinTech KingView < 6.52 - Arbitrary File Write via KChartXY ActiveX SaveToFile Method

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict SaveToFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the single pathname argument, as demonstrated by a directory traversal attack.

View Code

CVE-2013-6127 EXPLOITDB html WORKING POC

WellinTech KingView < 6.53 - Arbitrary File Write via SUPERGRIDLib.SuperGrid ReplaceDBFile Method

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the two pathname arguments, as demonstrated by a directory traversal attack.

View Code

CVE-2009-1325 EXPLOITDB python WORKING POC

Mini-stream Ripper 3.0.1.1 - Stack-based Buffer Overflow via Long URI in Playlist File

Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.

View Code

EIP-2026-117657 EXPLOITDB python WORKING POC

MY MP3 Player 3.0 - '.m3u' DEP Bypass

View Code

EIP-2026-117776 EXPLOITDB perl WORKING POC

Playlistmaker 1.51 - '.m3u' Local Buffer Overflow (SEH)

View Code

CVE-2009-3221 EXPLOITDB python WORKING POC

Audio Lib Player - Stack-based Buffer Overflow via Long URL in .m3u Playlist File

Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file.

View Code

EIP-2026-117309 EXPLOITDB ruby WORKING POC

IDEAL Migration 4.5.1 - Local Buffer Overflow (Metasploit)

View Code

CVE-2007-3068 EXPLOITDB python WORKING POC

DVD X Player 4.1 Professional - Stack-Based Buffer Overflow via PLF Playlist Filename

Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.

View Code

EIP-2026-116998 EXPLOITDB ruby WORKING POC

CoolPlayer+ Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass)

View Code

EIP-2026-116996 EXPLOITDB python WORKING POC

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (2)

View Code

EIP-2026-116995 EXPLOITDB python WORKING POC

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (1)

View Code

CVE-2008-3408 EXPLOITDB python WORKING POC

CoolPlayer 2.18 - Stack-Based Buffer Overflow via Crafted m3u File

Stack-based buffer overflow in CoolPlayer 2.18, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a crafted m3u file.

View Code

EIP-2026-116899 EXPLOITDB ruby WORKING POC

BlazeDVD 6.0 - Local Buffer Overflow (Metasploit)

View Code

EIP-2026-116857 EXPLOITDB python WORKING POC

AVCon - DEP Bypass

View Code

EIP-2026-116269 EXPLOITDB html WORKING POC

SolarWinds Server and Application Monitor - ActiveX 'Pepco32c' Buffer Overflow

View Code

EIP-2026-116639 EXPLOITDB text WORKING POC

YPOPS! 0.9.7.3 - Buffer Overflow (SEH)

View Code

CVE-2010-2440 EXPLOITDB python WORKING POC

Subtitle Translation Wizard 3.0 - Stack-based Buffer Overflow via Crafted SRT File

Stack-based buffer overflow in st-wizard.exe in Subtitle Translation Wizard 3.0 allows user-assisted remote attackers to execute arbitrary code via a crafted SRT file with a long line after a time range. NOTE: some of these details are obtained from third party information.

View Code

EIP-2026-114851 EXPLOITDB html WORKING POC

ActiveX UserManager 2.03 - Buffer Overflow

View Code

EIP-2026-112596 EXPLOITDB text WORKING POC

tenfourzero.net Shutter 0.1.4 - 'admin.html' Multiple SQL Injections

View Code

EIP-2026-112856 EXPLOITDB text WORKING POC

Uebimiau Webmail 3.2.0-2.0 - Local File Inclusion

View Code