Apple QuickTime Player 7.7.2 - Crash (PoC)

!/usr/bin/perl Title : Apple QuickTime Player 7.7.2 Division By Zero Version : 7.7.21680.56 Date : 2012-10-23 Vendor : http://www.apple.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- Don't forget that exploitable bugs will be...

Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes

Raspberry Pi Linux/ARM - execve"/bin/sh", 0, 0 vars 30 bytes. Shellcode exploit for arm platform / Title: Linux/ARM - execve"/bin/sh", 0, 0 vars - 30 bytes Date: 2012-09-08 Tested on: ARM1176JZF-S v6l Author: midnitesnake 00008054 : 8054: e28f6001 add r6, pc, 1 8058: e12fff16 bx r6 805c: 4678 mov...

linux/x86 execve(/bin/dash) 42 bytes

/ linux/x86 execve/bin/dash 42 bytes Author : X-h4ck email protected, email protected www.pirate.al , www.flashcrew.in Greetz : mywisdom - Danzel - Wulns - IllyrianWarrior- Ace - M4yh3m - Saldeath ev1lut1on - Lekosta - Pretorian - bi0 - Slimshaddy - d3trimentaL CR - Hack-Down - H3ll - d4ntesA -...

QQPlayer MOV File Processing Buffer Overflow Vulnerability

This host is installed with QQPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbqqplayermovfilebofvuln.nasl 5366 2017-02-20 13:55:38Z cfi $ QQPlayer MOV File Processing Buffer Overflow Vulnerability Authors: Rachana Shetty Copyright: Copyright c 2012 Greenbon...

QQPlayer MOV File Processing Buffer Overflow Vulnerability

QQPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-5006

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file...

Stack overflow

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file...

CVE-2011-5006

Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file...

QQPLAYER PICT PnSize Buffer Overflow WIN7 DEP_ASLR BYPASS

No description provided by source. Exploit Title: QQPLAYER PICT PnSize Buffer Overflow WIN7 DEPASLR BYPASS Date: 2011,11,21 Author: hellok Software Link: http://dldir.qq.com/invc/qqplayer/QQPlayerSetup32845.exe Version: 32845lastest Tested on: WIN7 require 'msf/core' class Metasploit3...

QQPLAYER PICT PnSize Buffer Overflow WIN7 DEP_ASLR BYPASS

Exploit for windows platform in category local exploits Exploit Title: QQPLAYER PICT PnSize Buffer Overflow WIN7 DEPASLR BYPASS Date: 2011,11,21 Author: hellok Software Link: http://dldir.qq.com/invc/qqplayer/QQPlayerSetup32845.exe Version: 32845lastest Tested on: WIN7 require 'msf/core' class...

Apple QuickTime PICT PnSize Buffer Overflow

$Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple QuickTime PICT PnSize Buffer Overflow

This module exploits a vulnerability in Apple QuickTime Player 7.60.92.0. When opening a .mov file containing a specially crafted PnSize value, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/apple/quicktimepnsize msf undefinedquicktimepnsize...

Mandriva Update for blender MDVSA-2011:114 (blender)

Check for the Version of blender OpenVAS Vulnerability Test Mandriva Update for blender MDVSA-2011:114 blender Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Linux Security Advisory : blender (MDVSA-2011:114)

Multiple vulnerabilities have been identified and fixed in blender : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...

OpenBSD/x86 sys_execve ('/bin/sh -c "reboot"') - 178 bytes (encoded)

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Linux/SuperH (sh4) - execve("/bin/sh", 0, 0) Shellcode (19 bytes)

Linux/SuperH sh4 - execve"/bin/sh", 0, 0 Shellcode 19 bytes. Shellcode exploit for SuperHSH4 platform / | Title: Linux/SuperH - sh4 execve"/bin/sh", 0, 0 - 19 bytes | Date: 2011-06-22 | Tested on: Debian-sh4 2.6.32-5-sh7751r | Author: Florian Gaultier - agix - twitter: @Agixid | |...

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter...

bds/x86-bindshell on port 2525 shellcode - 167 bytes

bds/x86-bindshell on port 2525 shellcode - 167 bytes. Shellcode exploit for bsd platform / ================================================== bds/x86-bindshell on port 2525 shellcode 167 bytes ================================================== / / -------------- bds/x86-bindshell on port 2525 167...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

Apple Mac OSX EvoCam Web Server Snow Leopard - ROP Remote Overflow !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

linux/ARM - setuid(0) & execve("/bin/sh","/bin/sh",0) - 38 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/ARM - setuid0 & execve"/bin/sh","/bin/sh",0 - 38 bytes ================================================================ / Title: Linux/ARM - setuid0 &...