7998 matches found
PHP 4.4.6 - ibase_connect() Local Buffer Overflow
PHP 4.4.6 - ibaseconnect Local Buffer Overflow milw0rm.com 2007-03-15...
PHP <= 4.4.6 ibase_connect() Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ========================================================== PHP 0day.today 2018-04-08...
PHP <= 4.4.6 ibase_connect() Local Buffer Overflow Exploit
No description provided by source. ?php // PHP = 4.4.6 ibaseconnect & ibasepconnect local buffer overflow // poc exploit // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org if !extensionloaded"interbase" die"only works with interbase extension "; $scode=...
PHP 4.4.6 - 'ibase_connect()' Local Buffer Overflow
milw0rm.com 2007-03-15...
WarFTP 1.65 (USER) Remote Buffer Overflow Exploit (win2k SP4)
Exploit for unknown platform in category remote exploits ============================================================= WarFTP 1.65 USER Remote Buffer Overflow Exploit win2k SP4 ============================================================= !/usr/bin/python Remote exploit for WarFTP 1.65. Tested on...
WarFTP 1.65 (Windows 2000 SP4) - USER Remote Buffer Overflow (Python)
WarFTP 1.65 Windows 2000 SP4 - USER Remote Buffer Overflow Python !/usr/bin/python Remote exploit for WarFTP 1.65. Tested on Windows 2000 server SP4 inside VMware. A trivially exploitable stack overflow is present in WarFTP which can be triggered by sending a long username 480 bytes along with th...
WarFTP 1.65 (Windows 2000 SP4) - 'USER' Remote Buffer Overflow
!/usr/bin/python Remote exploit for WarFTP 1.65. Tested on Windows 2000 server SP4 inside VMware. A trivially exploitable stack overflow is present in WarFTP which can be triggered by sending a long username 480 bytes along with the USER ftp command. Maybe other commands like PASS might also be...
MS06-040 Microsoft Server Service NetpwPathCanonicalize Overflow
This module exploits a stack buffer overflow in the NetApi32 CanonicalizePathName function using the NetpwPathCanonicalize RPC call in the Server Service. It is likely that other RPC calls could be used to exploit this service. This exploit will result in a denial of service on Windows XP SP2 or...
So it is to bypass the NTFS permissions limit-vulnerability warning-the black bar safety net
This machine is loaded with Windows 2 0 0 0, because the working relationship will be important information to put in the C:\studio, theC drive to NTFS formatand set the following permissions: Lostarthat's me full control The Everyone read-only After one day, and found where the file being...
MS05-047: Plug and Play Remote Code Execution and Local Privilege Elevation (905749) (uncredentialed check)
The remote host contains a version of the Plug and Play service that contains a vulnerability in the way it handles user-supplied data. An authenticated attacker may exploit this flaw by sending a malformed RPC request to the remote service and execute code with SYSTEM privileges. Note that...
D-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow
D-Link TFTP 1.0 - Transporting Mode Remote Buffer Overflow source: https://www.securityfocus.com/bid/22923/info D-Link TFTP is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before storing it in a finite-sized buffer. A remote...
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption
!/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket : http://oss.coresecurity.com/projects/impacket.html - PyCrypto :...
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A Memory Corruption !/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket :...
CVE-2007-1374
This entry documents a Cross-site scripting (XSS) vulnerability in Snitz Forums 2000, version 3.4.06, specifically in the pop_profile.asp component where an attacker can inject arbitrary script or HTML via the MSN parameter. The vulnerability is described consistently across CVE and NVD sources, ...
MS03-007 Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow
This exploits a buffer overflow in NTDLL.dll on Windows 2000 through the SEARCH WebDAV method in IIS. This particular module only works against Windows 2000. It should have a reasonable chance of success against SP0 to SP3. This module requires Metasploit: https://metasploit.com/download Current...
winamp512-overflow.txt
!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
php_446_mssql_connect_bof.txt
original url: http://retrogod.altervista.org/php446mssqlconnectbof.html...
Winamp 5.12 - .pls Remote Buffer Overflow (Perl) (2)
Winamp 5.12 - .pls Remote Buffer Overflow Perl 2 !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...