PlayMeNow v7.3 and 7.4 Buffer Overflow (meta)

Exploit for unknown platform in category local exploits ============================================= PlayMeNow v7.3 and 7.4 Buffer Overflow meta ============================================= Tested on: Windows XP SP3 - English This file is part of the Metasploit Framework and may be subject to...

Microsoft HTML Help Compiler (hhc.exe) - Buffer Overflow (PoC)

Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments. It is possible to gain control of...

PlayMeNow 7.37.4 - Local Buffer Overflow (Metasploit)

PlayMeNow 7.37.4 - Local Buffer Overflow Metasploit Tested on: Windows XP SP3 - English CVE : Code : This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

Microsoft HTML Help Compiler (hhc.exe) - Buffer Overflow (PoC)

Microsoft HTML Help Compiler hhc.exe - Buffer Overflow PoC Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied...

NetTransport Download Manager 2.90.510 Overflow

!/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe root@BT4VM: ./netxfer.py 192.168.1.8 31491 import socket,sys...

NetTransport Download Manager 2.90.510 - Remote Overflow (SEH)

!/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe root@BT4VM: ./netxfer.py 192.168.1.8 31491 import socket,sys...

NetTransport Download Manager version:2.90.510 0day

Exploit for unknown platform in category remote exploits =================================================== NetTransport Download Manager version:2.90.510 0day =================================================== Title: NetTransport Download Manager version:2.90.510 0day CVE-ID: OSVDB-ID: Author:...

Rhinosoft Serv-U Session Cookie Buffer Overflow

$Id: servusessioncookie.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication SEH Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ This should bypass the following snort rule referenced...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

!/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally discovered by prodigy exec calc.exe...

DJ Studio Pro 5.1.6.5.2 SEH Exploit

No description provided by source. !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow...

DJ Studio Pro 5.1.6.5.2 SEH Exploit

Exploit for unknown platform in category local exploits =================================== DJ Studio Pro 5.1.6.5.2 SEH Exploit =================================== Title: DJ Studio Pro 5.1.6.5.2 SEH Exploit CVE-ID: OSVDB-ID: Author: Sebastien Duquette Published: 2009-12-30 Verified: yes view sour...

BigAnt Server 2.52 - Remote Overflow (SEH)

!/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent! Connect to remote host on port 4444...

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

$Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

Media Jukebox 8.0.400 - Local Buffer Overflow SEH Metasploit $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Media Jukebox 8.0.400 (seh) Buffer Overflow Exploit (meta)

Exploit for unknown platform in category local exploits ========================================================== Media Jukebox 8.0.400 seh Buffer Overflow Exploit meta ========================================================== Title: Media Jukebox 8.0.400 seh Buffer Overflow Exploit meta CVE-ID...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

Exploit for unknown platform in category local exploits ================================================================= CastRipper 2.50.70 .pls Stack buffer Overflow Exploit WinXP SP3 ================================================================= Title: CastRipper 2.50.70 .pls Stack buffer...

CastRipper 2.50.70 (.pls) Stack buffer Overflow Exploit WinXP SP3

No description provided by source. !/usr/bin/perl CastRipper 2.50.70 .plsStack buffer Overflow Exploit WinXP SP3 Exploite By : d3b4g my webpage www.d3b4g.info From tiny islands of maldivies Tested on Windows XP SP3 24.12.2009 I used Adress from SHELL32.dll.You can change it to your desired...

PlayMeNow Malformed (M3U) Universal XP Seh BoF

No description provided by source. Author: ThE g0bL!N Tested on: xp sp2,sp3 Grrets: His0k4 Alone : my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38". "\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf"...