360 matches found
SAP Player 0.9 (.pla) Universal Local Buffer Overflow Exploit (SEH)
Exploit for unknown platform in category local exploits =================================================================== SAP Player 0.9 .pla Universal Local Buffer Overflow Exploit SEH =================================================================== !/usr/bin/python SAP player 0.9 .pla...
SAP Player 0.9 - '.pla' Universal Local Buffer Overflow (SEH)
!/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ; windows/shell/reversetcp - 617 bytes stage 1 http://www.metasploit.co...
HTMLDOC 1.8.27 Buffer Overflow
/ HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: http://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Kohli http://www.pank4j.com pankaj@zion:/test/htmldoc$ cat...
FTPShell Client 4.1 RC2 Remote Buffer Overflow Exploit (univ)
Exploit for windows platform in category remote exploits ============================================================= FTPShell Client 4.1 RC2 Remote Buffer Overflow Exploit univ ============================================================= !/usr/bin/python | || | / \ | | | | | | | | | - from...
HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow
HTMLDOC 1.8.27 - .html File Handling Stack Buffer Overflow / HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Koh...
HTMLDOC 1.8.27 - '.html' File Handling Stack Buffer Overflow
/ HTMLDOC 'html' File Handling Remote Stack Buffer Overflow Exploit Linux Reference: https://www.securityfocus.com/bid/35727 Tested on HTMLDOC 1.8.27 on Debian 5.0 +ASLR Credit: ANTHRAX666 for finding the vulnerability Coded by Pankaj Kohli http://www.pank4j.com pankaj@zion:/test/htmldoc$ cat...
Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit (win2k sp4)
No description provided by source. !/usr/bin/perl IIS 5.0 FTP Server / Remote SYSTEM exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection Modded by muts, additional egghunter added for secondary larger payload Might take a...
Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit (win2k sp4)
Exploit for windows platform in category remote exploits ====================================================================== Microsoft IIS 5.0 FTP Server Remote Stack Overflow Exploit win2k sp4 ====================================================================== !/usr/bin/perl IIS 5.0 FTP...
Linux/x86 Port Binding Shellcode (xor-encoded) 152 bytes
No description provided by source. / Author: Rick Email: [email protected] OS: Linux/x86 Description: Port Bind 4444 xor-encoded -------------------------------------------------------------------- section .text global start start: ;socket PFINET, SOCKSTREAM, 0 push byte 0x66 pop eax push byte...
linux/x86 Port Binding Shellcode (xor-encoded) 152 bytes
Exploit for linux/x86 platform in category shellcode ======================================================== Linux/x86 Port Binding Shellcode xor-encoded 152 bytes ======================================================== / Author: Rick OS: Linux/x86 Description: Port Bind 4444 xor-encoded...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
No description provided by source. / linux/x86-64 bindshellport 4444 xi4oyu at 80sec.com http://www.80sec.com BITS 64 xor eax,eax xor ebx,ebx xor edx,edx ;socket mov al,0x1 mov esi,eax inc al mov edi,eax mov dl,0x6 mov al,0x29 syscall xchg ebx,eax ;store the server sock ;bind xor rax,rax push rax...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
linux/x86-64 bindshell port:4444 shellcode 132 bytes. Shellcode exploit for linx86-64 platform / linux/x86-64 bindshellport 4444 xi4oyu at 80sec.com http://www.80sec.com BITS 64 xor eax,eax xor ebx,ebx xor edx,edx ;socket mov al,0x1 mov esi,eax inc al mov edi,eax mov dl,0x6 mov al,0x29 syscall xc...
linux/x86-64 bindshell port:4444 shellcode 132 bytes
Exploit for linux/x86-64 platform in category shellcode ==================================================== linux/x86-64 bindshell port:4444 shellcode 132 bytes ==================================================== / linux/x86-64 bindshellport 4444 BITS 64 xor eax,eax xor ebx,ebx xor edx,edx...
Adobe Reader 'getAnnots()' Javascript函数远程代码执行漏洞
BUGTRAQ ID: 34736 Adobe Reader是一款PDF文件解析程序。 Adobe Reader处理Javascript存在问题，远程攻击者可以利用漏洞以运行用户权限执行任意代码。 构建包含超长名的注解，在使用'getAnnots' Javascript函数解析时可触发缓冲区溢出，导致以运行Adobe Reader应用程序的安全上下文执行任意代码。 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 9.1 目前没有解决方案提供： http://www.adobe.com/ // //Exploit made by Arr1va...
Adobe Reader getAnnots Exploit
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...
Adobe Reader Spell Exploit
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode = unescape...
Solaris 9 (sparc) : 120954-12
AM 7.0: Sun Java System Access Manager 2005Q4. Date this patch was last updated by Sun : Nov/03/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Ubuntu USN-708-1 (hplip)
The remote host is missing an update to hplip announced via advisory USN-708-1. OpenVAS Vulnerability Test $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7081.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-708-1 hplip Authors: Thomas Reinke...
CVE-2008-4444
CVE-2008-4444 — Cisco SIP phones RTP header parsing DoS/risk of code execution Affected hardware/software: Cisco Unified IP Phone models 7960G and 7940G with firmware P0S3-08-9-00 and possibly earlier versions up to 8.10. Vulnerability: Improper parsing of certain RTP headers can be exploited by ...
Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability
Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...