RealNetworks Realplayer QCP Parsing Heap Overflow

This module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute...

Microsoft MPEG Layer-3 Audio - Stack Overflow (MS10-026) (Metasploit)

$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeFloat FTP Server REST Buffer Overflow

require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln. 'KaHPeSeSe' Metasploit Module , 'License' = MSFLICENSE, 'Version...

FreeFloat FTP Server REST Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln...

Freefloat FTP Server - MKD Remote Buffer Overflow (Metasploit)

Freefloat FTP Server - MKD Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'Freefloat FTP Server MKD Command Stack Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in the MKD command in the Freefloat FTP server. , 'Author' = 'C4SS!0...

VNC Server (Reflective Injection), Windows Reverse HTTP Stager (wininet)

Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 444 include Msf::Payload::Stager...

CVE-2011-2757

creationtimestamp| type| source ---|---|--- 2011-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17442 2011-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17437 2018-05-29 15:50:33+00:00| seen|...

Wireshark packet-dect.c Stack Buffer Overflow

This module exploits a stack buffer overflow in Wireshark use exploit/windows/misc/wireshark/packetdect msf undefinedpacketdect show actions ...actions... msf undefinedpacketdect set ACTION msf undefinedpacketdect show options ...show and set options... msf undefinedpacketdect run This module...

ManageEngine Applications Manager Authenticated Code Execution

This module logs into the Manage Engine Applications Manager to upload a payload to the file system and a batch script that executes the payload. Module Options msf use exploit/windows/http/manageengine/appsmngr msf undefinedappsmngr show actions ...actions... msf undefinedappsmngr set ACTION msf...

Foxit PDF Reader 4.2 Javascript File Write

This module exploits an unsafe Javascript API implemented in Foxit PDF Reader version 4.2. The createDataObject Javascript API function allows for writing arbitrary files to the file system. This issue was fixed in version 4.3.1.0218. Note: This exploit uses the All Users directory currently, whi...

Microsoft IIS FTP Server Encoded Response Overflow Trigger

This module triggers a heap overflow when processing a specially crafted FTP request containing Telnet IAC 0xff bytes. When constructing the response, the Microsoft IIS FTP Service overflows the heap buffer with 0xff bytes. This issue can be triggered pre-auth and may in fact be exploitable for...

FreeNAS exec_raw.php Arbitrary Command Execution

This module exploits an arbitrary command execution flaw in FreeNAS 0.7.2 use exploit/multi/http/freenas/execraw msf undefinedexecraw show actions ...actions... msf undefinedexecraw set ACTION msf undefinedexecraw show options ...show and set options... msf undefinedexecraw run This module requir...

DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.1.8.10. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/scada/realwin/scpcinitialize msf...

FTPShell 5.1 Stack Buffer Overflow

This module exploits a stack buffer overflow in FTPShell 5.1. The overflow gets triggered when the ftp client tries to process an overly long response to a PWD command. This will overwrite the saved EIP and structured exception handler. Module Options msf use exploit/windows/ftp/ftpshell51/pwdrep...

Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module

Exploit for windows platform in category remote exploits ================================================================== Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module ================================================================== Digital Music Pad Version 8.2.3.3.4 SEH...

Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...

Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

Exploit for windows platform in category remote exploits ========================================================= Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module ========================================================= Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Modu...

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit)

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code Metasploit Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CVE : - class Metasploit3 'Race River...

WebDAV Application DLL Hijacker

This module presents a directory of file extensions that can lead to code execution when opened from the share. The default EXTENSIONS option must be configured to specify a vulnerable application type. Module Options msf use exploit/windows/browser/webdav/dllhijacker msf undefineddllhijacker sho...

A-PDF WAV to MP3 v1.0.0 Buffer Overflow

This module exploits a buffer overflow in A-PDF WAV to MP3 v1.0.0. When the application is used to import a specially crafted m3u file, a buffer overflow occurs allowing arbitrary code execution. Module Options msf use exploit/windows/fileformat/a/pdfwavtomp3 msf undefinedpdfwavtomp3 show actions...