PT-2016-7990

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the...

PT-2016-7991

Name of the Vulnerable Software and Affected Versions iSelect version 1.4.0-2+b1 Description A local buffer overflow occurs when an oversized value is supplied to the -k/--key parameter. This allows local attackers to overflow a 1024-byte stack buffer using a malicious argument containing a NOP...

Spetnik TCPing Local Buffer Overflow Vulnerability

Spetnik TCPing is a suite of applications that can ping servers through special ports using the TCP/IP protocol. Spetnik TCPing suffers from a local buffer overflow vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the application or crash the...

NTP Local Buffer Overflow Vulnerability

NTP is a network protocol that synchronizes the clocks of two computers by exchanging packets. An NTP program running a custom refclock driver fails to check for a negative value of the 'datalen' parameter, allowing a local attacker to exploit the vulnerability for denial of service attacks...

Blat 2.7.6 SMTP NNTP Mailer - Local Buffer Overflow

Blat 2.7.6 SMTP NNTP Mailer - Local Buffer Overflow ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-BLAT-MAILER-BUFFER-OVERFLOW.txt Vendor: ================================ www.blat.net http://sourceforge.net/projects/blat/...

ZTE PC UI USB Modem Software - Local Buffer Overflow

!/usr/bin/python -w Title : ZTE PC UI USB MODEM SOFTWARE Buffer Overflow Date : 17/09/2015 Author : R-73eN Tested on : Windows Xp sp3 on software Eagle Speed PCWEAGLEALBp671A1V1.0.0B02 Since all the PC UI based software shares the same source code they are all vulnerable.Confirmed By ZTE The...

PFTP Server 8.0f Lite - textfield Local Buffer Overflow (SEH) (PoC)

Exploit Title: PFTP Server 8.0f lite SEH bypass technique tested on Win7x64 Date: 8-29-2015 Software Link: http://www.heise.de/download/the-personal-ftp-server-78679a5e8458e9faa7c5564617bdd4c4-1440883445-267104.html Exploit Author: Robbie Corley Contact: [email protected] Website: CVE:...

Jildi FTP Client Local Buffer Overflow Vulnerability

Jildi FTP Client is a set of FTP client programs that run on Windows systems. A local buffer overflow vulnerability exists in Jildi FTP Client that could be exploited by an attacker to crash the application or execute arbitrary code...

Mini-stream Ripper 2.7.7.100 - Local Buffer Overflow

Mini-stream Ripper 2.7.7.100 - Local Buffer Overflow !/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: Mini-sream Ripper v2.7.7.100 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

e2fsprogs Local Buffer Overflow Vulnerability

e2fsprogs Ext2 Filesystem Utilities is a set of disk utilities for the EXT2 filesystem. A local buffer overflow vulnerability exists in e2fsprogs, which can be exploited by an attacker to execute arbitrary code in an affected application...

IBM i Access for Windows Local Buffer Overflow Vulnerability

IBM i Access on Windows is a client solution provided by IBM for accessing and using desktop resources on a variety of different Windows operating systems. A local buffer overflow vulnerability exists in IBM i Access for Windows due to the program failing to perform sufficient boundary checks on...

Ntpdc 4.2.6p3 - Local Buffer Overflow Exploit

Ntpdc version 4.2.6p3 suffers from a local buffer overflow vulnerability. Source: https://hatriot.github.io/blog/2015/01/06/ntpdc-exploit/ from os import system, environ from struct import pack import sys ntpdc 4.2.6p3 bof @dronesec tested on x86 Ubuntu 12.04.5 LTS IMAGEBASE = 0x80000000...

AOL-9.5-(rtx)-Local-Buffer-Overflow

Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41" "\x4d\x49\x4c\x59\x3d\x22\x53\x41\x4e\x53\x53\x45\x52\x49\x46\x22"...

VFU 4.10-1.1 - Local Buffer Overflow

VFU 4.10-1.1 - Local Buffer Overflow Exploit Author: Juan Sacco - http://www.exploitpack.com Tested on: GNU/Linux - Debian Wheezy Description: VFU v4.10-1.1 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied...

dbPowerAmp 2.010.0 - Local Buffer Overflow

dbPowerAmp 2.010.0 - Local Buffer Overflow dbPowerAmp Buffer Overflow Vendor: Illustrate Product: dbPowerAmp Version: = 2.0/10.0 Website: http://www.dbpoweramp.com BID: 11266 CVE: CVE-2004-1569 OSVDB: 10380 11126 11127 SECUNIA: 12684 PACKETSTORM: 34531 Description: Often called the Swiss Army kni...

ProFTPD 1.3.0/1.3.0 a (mod_ctrls support) Local Buffer Overflow Exploit vulnerabilities and attack code analysis-vulnerability warning-the black bar safety net

Exploit code URL: ! 1, Operating environment: 1, The ProFTPD 1.3.0/1.3.0 a 2, the compiled ProFTPD,--enable-ctrls option must be open ./ configure --enable-ctrls 3, the local user need to have through the Unix Socket permission to connect 2, The Run parameters: revenge@darklight$ ./...

AudioPLUS 2.00.215 (.lst & .m3u File) Local buffer Overflow (seh)

No description provided by source. !/usr/bin/perl by hack4love [email protected] AudioPLUS 2.00.215 .m3u / .lst File Local buffer Overflow seh Greetz to all my friends form egypt easy :d Tested on: Windows XP Pro SP2 EN my $bof=\x41 x 4116; my $nsh=\xEB\x06\x90\x90; my $seh=\xb8\x15\xd1\x72; ...

mmPlayer 2.2 (.ppl) Local Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= RjRjh.ppl; my $junk= \x41 x 4090; my $nextseh=...

Adobe Acrobat Reader - JBIG2 Local Buffer Overflow PoC (2) (0day)

No description provided by source. !/usr/bin/perl ksOSe 02/22/2009 http://vrt-sourcefire.blogspot.com/2009/02/have-nice-weekend-pdf-love.html my $size = \x40\x00; my $factor = ABCD; my $data = A x 8314; print pdf; sub pdf %PDF-1.5\n . %\xec\xf5\xf2\xe1\xe4\xef\xe3\xf5\xed\xe5\xee\xf4\n . 3 0 \n...

ISDNRep 4.56 Command Line Argument Local Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/8100/info isdnrep has been reported prone to a local command line argument buffer overflow vulnerability. The issue presents itself due do a lack of sufficient bounds checking performed on user-supplied data that is copie...