PHP 5.2.3 - snmpget() object id Local Buffer Overflow (EDI)

PHP 5.2.3 - snmpget object id Local Buffer Overflow EDI http://milw0rm.com/exploits/4204 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001...

PHP mSQL (msql_connect) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== PHP mSQL msqlconnect Local Buffer Overflow Exploit ===================================================== / if!functionexists'msqlconnect' die'mSQL extension is not available'; $ret =...

PHP mSQL (msql_connect) Local Buffer Overflow Exploit

No description provided by source. ?php / Inphex 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache /...

PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow

?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote //right! so here it is an exploit using e...

PHP 5.2.3 'Tidy' Extension - Local Buffer Overflow

?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...

PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== PHP 5.2.3 Tidy extension Local Buffer Overflow Exploit ====================================================== ?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow...

MoviePlay 4.76 - .lst Local Buffer Overflow

MoviePlay 4.76 - .lst Local Buffer Overflow !/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez...

MoviePlay 4.76 - '.lst' Local Buffer Overflow

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (2)

ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...

Mutt 1.4.2 - Mutt_Gecos_Name Function Local Buffer Overflow

source: https://www.securityfocus.com/bid/24192/info Mutt is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before using it in a memory copy operation. An attacker can exploit this issue to execute arbitrary code with the with the...

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (PoC)

!/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file. This is the reason i have provided...

eastwind-overflow.txt

2007/05/05 -------------------------------------------------------------------------------------- East Wind Software advdaudio.ocx v. 1.5.1.1 'OpenDVD' method Local Buffer Overflow url: http://www.ewcad.com/ price: $249 author: shinnai mail: shinnaiatautisticidotorg site:...

East Wind Software (advdaudio.ocx 1.5.1.1) Local BoF Exploit

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/05/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------- bEast Wind Software...

East Wind Software - 'advdaudio.ocx 1.5.1.1' Local Buffer Overflow

2007/05/05 -------------------------------------------------------------------------------------- East Wind Software advdaudio.ocx v. 1.5.1.1 'OpenDVD' method Local Buffer Overflow url: http://www.ewcad.com/ price: $249 author: shinnai mail: shinnaiatautisticidotorg site:...

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp...

Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...

PHP 5.2.1 with PECL phpDOC local buffer overflow

?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC" die"you need the phpDOC extension loaded."; $scode=...

FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation

FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation // ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin you 31337!!! ; // thanks to sacrine and all the other netric guys!!! you rule : include include include include define LEN 1264...

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow

PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow milw0rm.com 2007-03-25...

PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit ======================================================== 0day.today 2018-03-14...