449 matches found
A-PDF All to MP3 Converter 1.1.0 Universal Local SEH Exploit
No description provided by source. !/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next...
Mozilla Thunderbird DLL Hijacking Exploit (dwmapi.dll)
No description provided by source. / Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from TheLeader Vulnerable...
MP3Info 0.8.5a - SEH Buffer Overflow Exploit
No description provided by source. Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy aymansagy at gmail.com Vendor Homepage: http://ibiblio.org/mp3info/ Software Link:...
Castripper 2.50.70 - (.pls) stack buffer overflow DEP bypass exploit
No description provided by source. !/usr/bin/python Castripper 2.50.70 .pls stack buffer overflow w/ DEP bypass exploit Author: mrme - https://net-ninja.net - mrme AT corelan.be Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security...
FaceBook PhotoUploader <= 5.0.14.0 - Remote Buffer Overflow Exploit
No description provided by source. html head object id=target classid=clsid:5C6698D9-7BE4-4122-8EC5-291D84DBD4A0/object /head body script var shellcode = unescape%u0D0D%u0D0D%u9090%u9090+ //Windows Execute Command calc %ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b+...
Ultr@VNC <= 1.0.1 client Log::ReallyPrint Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = RFB 003.006\n VNC Header...
WinSoftMagic Photo Editor PNG File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39354/info WinSoftMagic Photo Editor is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successful...
A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow (seh)
No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the...
Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)
No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...
Iconics GENESIS32 9.21.201.01 - Integer overflow
No description provided by source. $Id: iconicsgenbroker.rb 13197 2011-07-17 15:01:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Windows XP PRO SP3 - Full ROP calc shellcode
No description provided by source. / Shellcode: Windows XP PRO SP3 - Full ROP calc shellcode Author: b33f http://www.fuzzysecurity.com/ Notes: This is probably not the most efficient way but I gave the dll's a run for their money ; Greets: Donato, Jahmel OS-DLL's used: Base | Top | Size | Version...
PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit
No description provided by source. ?php errorreporting0; PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Tested on WIN XP HEB SP3, Apache, PHP 6.0 Dev Buffer Overflow Bug discovered by Pr0T3cT10n, [email protected] Exploited by TheLeader, Debug SP. Thanks: HDM...
Windows Internet Communication Settings DLL Hijacking Exploit (schannel.dll)
No description provided by source. / Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .isp / include windows.h int alpdaemo...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow Exploit
No description provided by source. / Date : May 28th 2007. UltraISO = 8.6.2.2011 local buffer-over flow by n00b You might need to change the jmp esp% adress to your version. Tested on win xp service pack 2 eng executes calc.Don't forget you need to have the bin and cue file in the same Directory...
GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability
No description provided by source. Exploit Title: GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability Date: 2010/11/04 Author: moigai e-mail: [email protected] Software Link: http://www.vector.co.jp/download/file/win95/art/fh296344.html Version: 1.83a Win32 Release Tested on: Windows XP...
Destiny Media Player 1.61 - (lst File) Local Buffer Overflow Exploit (2)
No description provided by source. !/user/bin/perl Destiny Media Player 1.61 Local BoF Code Exploit Coded by : sCORPINo Snoop Security Researching Committe originally discovered by: Encrypt3d.M!nd windows/exec - 142 bytes http://www.metasploit.com Encoder: x86/fnstenvmov EXITFUNC=thread, CMD=calc...
openSUSE Security Update : libreoffice (openSUSE-SU-2012:0433-1)
updated to libreoffice-3.4.5.4 SUSE 3.4.5-rc2 - calc - pie charts colors messed in XLS import fdo40320 - correctly import data point formats in data series fdo40320 - components - crash when parsing XML signatures fdo39657 - broken getDataArray fdo46165, fdo38441, i117010 - don't paint a frame...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
MP3Info 0.8.5a - Local Buffer Overflow SEH Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Teste...
Steinberg MyMp3PRO 5.0 DEP Bypass With ROP
!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 DEP Bypass with ROP Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 R...
Mitsubishi MC-WorkX 8.02 - ActiveX Control IcoLaunch File Execution
Mitsubishi MC-WorkX 8.02 - ActiveX Control IcoLaunch File Execution Mitsubishi MC-WorkX Suite Insecure ActiveX Control IcoLaunch This proof of concept will launch an arbritrary executable when the Login Client button is clicked. An attacker could use this to have the victim launch malicious code...