macrovision-overwrite.txt

MC has already made a Metasploit module for this, and Symantec has released BloodHound signatures for general isusweb abuse. Code is inline and attached. ---------------- Macrovision Installshield isusweb.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 599 buf = buf +...

IBM Domino Web Access Upload Module inotes6.dll BoF Exploit

Exploit for unknown platform in category remote exploits =========================================================== IBM Domino Web Access Upload Module inotes6.dll BoF Exploit =========================================================== IBM Domino Web Access Upload Module inotes6.dll SEH Overwrit...

IBM Domino Web Access 7.0 Upload Module - inotes6.dll Remote Buffer Overflow

IBM Domino Web Access 7.0 Upload Module - inotes6.dll Remote Buffer Overflow IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 3119 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...

IBM Domino Web Access 7.0 Upload Module - 'inotes6.dll' Remote Buffer Overflow

IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 3119 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Persits Software XUpload Control AddFolder() Buffer Overflow Exploit

No description provided by source. !-- written by e.b. Persits Software XUpload Control AddFolder Buffer Overflow Exploit Tested on Windows XP SP2fully patched English, IE6 and IE7 Thanks to h.d.m. and the Metasploit crew -- html head titlePersits Software XUpload Control AddFolder BoF...

Persits Software XUpload Control AddFolder() Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Persits Software XUpload Control AddFolder Buffer Overflow Exploit ==================================================================== Persits Software XUpload Control...

runcms-sqlids.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public EXPLOIT: December 25, 2007 / / Written by:...

runcms-sql.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

Debian DSA-1432-1 : link-grammar - buffer overflow

Alin Rad Pop discovered that link-grammar, Carnegie Mellon University's link grammar parser for English, performed insufficient validation within its tokenizer, which could allow a malicious input file to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Softbiz Freelancers Script v.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash &nb...

VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit

No description provided by source. / VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows XP PRO SP2 Chinese Windows XP PRO SP2 English...

JVN#63304072 MouseoverDictionary vulnerable to arbitrary script execution

MouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script on the user's web browser as it does not handle the sidebar HTML page properly. Impact An attacker could execute an arbitrary...

Racer v0.5.3 beta 5 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================== Racer v0.5.3 beta 5 Remote Buffer Overflow Exploit ================================================== !/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

commute-xss.txt

Aria-Security Tilte: community Cross-site Scripting XSS proof Of Concept : local/path/require/smallhead.php?retun=Xss-script...

Taltech Tal Bar Code - ActiveX Control Buffer Overflow

Taltech Tal Bar Code - ActiveX Control Buffer Overflow Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit - By Umesh Wanve targetFile = "C:\Program Files\TAL Bar Code ActiveX Demo\TALBarCd.OCX" prototype = "Sub SaveBarCode ByVal FileName As String " memberName = "SaveBarCode" progid =...

Microsoft Windows - DNS RPC Remote Buffer Overflow (2)

Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 server Spanish supported by default -...

Microsoft Windows - DNS RPC Remote Buffer Overflow (2)

Microsoft Windows - DNS RPC Remote Buffer Overflow 2 Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and...