Hero big eye processing of the TGA File format buffer overflow vulnerability, the EIP can be controlled-the vulnerability warning-the black bar safety net

Brief description: Software description: http://baike.baidu.com/view/222352.html Download: http://www.onlinedown.net/soft/2704.htm http://dl.pconline.com.cn/html2/1/114/id=1879&pn=0.html In the processing of the TGA File format when there is a buffer overflow vulnerability, the eip can be...

Malx Media Player handle malformed m3u file stack overflow local arbitrary code execution-vulnerability warning-the black bar safety net

Malx Media Player 3.2.2 handle malformed m3u file will occur when the stack overflows, which can allow an attacker to successfully control EIP, and execute arbitrary code. （Win7 SP1 with MacType for ROP） Malx Media Player is using MAXPATH as initialization parameters on the stack variable, but th...

Python - socket.recvfrom_into() Remote Buffer Overflow

Python - socket.recvfrominto Remote Buffer Overflow !/usr/bin/env python ''' Exploit Title: python socket.recvfrominto remote buffer overflow Date: 21/02/2014 Exploit Author: @sha0coder Vendor Homepage: python.org Version: python2.7 and python3 Tested on: linux 32bit + python2.7 CVE : CVE-2014-19...

Microsoft IE "ReleaseInterface()"远程代码执行漏洞

BUGTRAQ ID: 45639 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 IE在实现上存在远程代码执行漏洞，远程攻击者可利用此漏洞在受影响的应用程序中运行任意代码或造成拒绝服务。 漏洞存在于mshtml.dll模块中的ReleaseInterface函数，可导致修改EIP控制程序执行流程。 Microsoft Internet Explorer 8.0.7600.16385 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow

Source: http://code.google.com/p/skylined/issues/detail?id=23 SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS ,dSSSSSSSSSSSS SSSS ,dSSY' SSSS SSSS SSSS SSSS SSSSb, SSSS ,dSSSSSSSSSSSS SSSSSSSSSSSSb, SSSS SSSS ,dSSY' SSSS SSSS SSSS SSS...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

/ Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode where is convienientbasicly anywhe...

Mediacoder 0.7.3.4605 - Local Buffer Overflow

Mediacoder 0.7.3.4605 - Local Buffer Overflow / Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We positio...

MediaCoder v0.7.3.4605 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== MediaCoder v0.7.3.4605 Local Buffer Overflow Exploit ==================================================== / Download: http://www.mediacoderhq.com/download.htm Compilation:...

Wireshark 1.2.5 LWRES getaddrbyname stack BOF

No description provided by source. !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi [email protected] on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar....

Wireshark 1.2.5 LWRES getaddrbyname stack BOF

Exploit for unknown platform in category dos / poc ============================================= Wireshark 1.2.5 LWRES getaddrbyname stack BOF ============================================= !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over E...

Wireshark 1.2.5 - LWRES getaddrbyname Stack Buffer Overflow (PoC)

Wireshark 1.2.5 - LWRES getaddrbyname Stack Buffer Overflow PoC !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz...

Wireshark 1.2.5 - 'LWRES getaddrbyname' Stack Buffer Overflow (PoC)

!/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow PoC with control over EIP on Debian 5.0.3 by babi on 29 Jan 2010 get it at http://www.wireshark.org/download/src/all-versions/wireshark-1.2.5.tar.gz import socket, sys try: host = sys.argv1 except: print "usage: ...

WinFTP 2.4.0 Buffer Overflow

!/usr/bin/perl WinFTP 2.3.0 post-auth remote exploit. www.wftpserver.com root@halcyon:/Exploits/WinFTP perl winftp-remote.pl Usage: winftp-remote.pl Target: 1 - Win2k Target: 2 - WinXP sp2/3 DoS only root@halcyon:/Exploits/WinFTP perl winftp-remote.pl 10.0.0.5 user1 pass1 1 = Connected. = Sending...

WinFTP 2.3.0 (LIST) Remote Buffer Overflow Exploit (post-auth)

Exploit for unknown platform in category remote exploits ============================================================== WinFTP 2.3.0 LIST Remote Buffer Overflow Exploit post-auth ============================================================== !/usr/bin/perl WinFTP 2.3.0 post-auth remote exploit...

notepad++ 4.1 ruby file processing Buffer Overflow Exploit (win32)

Exploit for unknown platform in category local exploits ================================================================== notepad++ 4.1 ruby file processing Buffer Overflow Exploit win32 ================================================================== / notepad++v4.1: win32 ruby file processin...

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow

VUPlayer 2.44 - .m3u UNC Name Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

MS Internet Explorer (VML) Remote Buffer Overflow Exploit (XP SP1)

No description provided by source. !/usr/bin/perl Microsoft Internet Explorer VML Remote Buffer Overflow Windows XP SP0-SP1 + Windows 2000 SP4 Author: Trirat Puttaraksa Kira trir00t at gmail.com http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is modified from...

ERNW Security Advisory 01/2006

ERNW Security Advisory 01-2006 Buffer Overflow in Algorithmic Researchs PrivateWire Online Registration Facility Author: Michael Thumann mthumannaternw.de Homepage: http://www.ernw.de 1. Summary: The Online Registration Facility of Algorithmic Research PrivateWire VPN Software doesn't do proper...

ERNW Security Advisory 01/2005

ERNW Security Advisory 01-2005 Buffer Overflow in PMSoftware's Simple Web Server Author: Michael Thumann mthumannaternw.de 1. Summary: Simple Web Server doesn't do proper bounds checking handling normal GET requests. Sending an overlong page or script name, it causes an buffer overflow and an...

Mplayer Buffer Overflow

Favorite Linux Media Player Buffer Overflow Product: Mplayer Developers: http://www.mplayerhq.hu OS: Port to All NIX and Win32 Remote Exploitable: YES Developers has been contacted, problem was fixed, recomended update your mplayer version. In the source tree there is a file called asfstreaming.c...