902 matches found
CoolPlayer - m3u File Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = \xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1...
Apple Mac OS X 10.3.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...
Winamp 5.572 - Local BoF Exploit (EIP & SEH DEP Bypass)
No description provided by source. !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to: Corelan Security Team...
Mini-stream Ripper 3.0.1.1 (.smi) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/python Tested on: win XPsp3 webpage: d3b4g.info EAX 00E1C880 EDX 00000001 EBX 41414141------------------------------------------------ ESP 000D198C EBP 00E1C880 controle over registers ESI 41414141------------------------------------------------ EDI...
Elecard MPEG Player 5.7 - Local Buffer Overflow PoC (SEH)
No description provided by source. !/usr/bin/python Elecard MPEG Player 5.7 Local Buffer Overflow PoC SEH Vendor: Elecard Group Product web page: http://www.elecard.com Affected version: 5.7.100629 Summary: Elecard MPEG Player is a high-quality full-featured multimedia player supporting the newes...
Nethack 3 Local Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting ...
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
No description provided by source. Exploit Title : Mini-stream RM-MP3 Converter? V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email :...
Sun Solaris 10 Traceroute Multiple Local Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive data supplied through command line arguments...
Exploit Easy RM to MP3 2.7.3.700 (.m3u , .pls , .smi , .wpl , .wax , .wvx , .ram)
No description provided by source. Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 CVE : N...
CoolPlayer 2.19 - (Skin File) Local Buffer Overflow Exploit (py)
No description provided by source. CoolPlayer Skin Buffer Overflow maybe all versions are affected : By:Encrypt3d.M!nd Orginal Exploit: by r0ut3r http://www.milw0rm.com/exploits/7536 i've test it on my boxwinxp sp3 and didn't work so i've re-wrote the exploit and this is workin tested: Windows xp...
Apache <= 1.3.31 mod_include Local Buffer Overflow Exploit
No description provided by source. / local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char gettagpool p, FI...
CrystalPlayer 1.98 - (.mls) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon...
Destiny Media Player 1.61 - (lst File) Local Buffer Overflow Exploit
No description provided by source. Destiny Media Player 1.61 lst File Local Buffer overflow Exploit By:Encrypt3d.M!nd i was so stupid when i wrote the poc coz i didn't realize somethings :p well this is workin exploit tested on windows xp sp3 don't double click the file,import it from the program...
PHP <= 4.4.3 / 5.1.4 (sscanf) Local Buffer Overflow Exploit
No description provided by source. ? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
MP3Info 0.8.5a - Local Buffer Overflow SEH Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Teste...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
I saw the notice for this CVE today but there was no known published expoits so I figured I'd put together this quick POC. Note, all app modules for the tested version were compiled with safeSEH so my use of an OS module may require adjustment of the offsets. There also appears to be several bad...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
!/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link: http://ftp.sunet.se/pub/multimedia/graphics/ImageMagick/binaries/ Versio...
Ophcrack 3.6 Local Buffer Overflow
Ophcrack version 3.6 local stack based buffer overflow exploit. Works on Windows 8 64-bit. !/usr/bin/python Title: Ophcrack 3.6 Local Stack Based Buffer Overflow Version: 3.6 Tested on: Windows XP SP2 en, Windows 8 64-bit Vendor: http://ophcrack.sourceforge.net/ Software Link:...
VideoSpirit Pro 1.90 - Local Buffer Overflow (SEH)
!/usr/bin/ruby Vendor: http://www.verytools.com/ Software link: http://www.verytools.com/videospirit/download.html print ''' VideoSpirit Pro Seh Buffer Overflow Version: Pro 1.90 Date found: 11.11.2013 Exploit Author: metacom Tested on: Win7-Win8-WinXp-Sp3-EN ''' sleep3...