This Metasploit module exploits a command injection vulnerability in PeaZip. All versions prior to 2.6.2 are suspected vulnerable. Testing was conducted with version 2.6.1 on Windows. In order for the command to be executed, an attacker must convince someone to open a specially crafted zip file with PeaZip, and access the specially file via double-clicking it. By doing so, an attacker can execute arbitrary commands as the victim user.
707e4841498bdac3329fa0f7e22bc3d0c9b9a42bba87d345bc291f263c5a5231Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) overlong DSC Comment Buffer Overflow Exploit
fa7d623818aa870797cedbdfe793f36edde2119163f962043b50da8da39732e1Adobe Illustrator CS4 version 14.0.0 encapsulated postscript (.eps) overlong DSC comment buffer overflow exploit.
2dbc0e700b5a622ea3f8e6e9580fd2b2dab0e7bf9d96f236cb3d6ceaa60cf7a8Google Apps googleapps.url.mailto:// URI handler cross-browser remote command execution exploit.
0c678e6cf7fc660120636d96067744edfdfd49cbd4c321b556f33790b0924c47Multiple EMC products remote buffer overflow exploit that takes advantage of keyhelp.ocx version 1.2.312.
861211011ec04b8ec31d45c7a4403ea58f6c226627dbdec4741e684a617b6b6fOracle Document Capture BlackIce DEVMODE Active-X related remote stack-based buffer overflow exploit.
f87679f2b3d8baad72aa6db816a0125c42a2918130b43bccf764d8def1f3dd78HP LoadRunner version 9.5 Persits.XUpload.2 control (XUpload.ocx) MakeHttpRequest() remote file creation proof of concept exploit.
768a53821af4fde79d580a63870f6f429503fd30279cee4a32400f9427e0122aOracle Document Capture BlackIce DEVMODE Active-X related remote command execution exploit.
bf83d52218e9fa39a7b0bd3571b7981a25bac0078fd1ce84ec57dc0d16ffc7a2Adobe Photoshop Elements 8.0 Active File Monitor Service suffers from a bad security descriptor local elevation of privileges vulnerability.
f86b1fd7b15d1b7e7a42902dfb35784ffde8f8a5ebc4700dd28f5494a936881b
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed