Avaya WinPDM UniteHostRouter 3.8.2 Buffer Overflow

Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result = 1; return result; signed int cdecl sub403160patchedconst char...

Gitorious - Arbitrary Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Gitorious Arbitra...

Avaya WinPDM UniteHostRouter <= 3.8.2 Pre-Auth Command Execute

Exploit for windows platform in category remote exploits Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = v2 || v4 = v3 + 1, v5 = strpbrkv3 + 1, ":/? \n\r", v5 v2 result = 0; else v6 = v5 - v4; memcpya2, v4, v6; // vulnerable memcpy BYTE a2 + v6 = 0; result = 1;...

HP OpenView Network Node Manager - 'ov.dll' _OVBuildPath Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HEAD', :uri =...

Koyo DirectLogic PLC Password Brute Force Utility

This module attempts to authenticate to a locked Koyo DirectLogic PLC. The PLC uses a restrictive passcode, which can be A0000000 through A9999999. The "A" prefix can also be changed by the administrator to any other character, which can be set through the PREFIX option of this module. This modul...

Schneider Modicon Quantum Password Recovery

The Schneider Modicon Quantum series of Ethernet cards store usernames and passwords for the system in files that may be retrieved via backdoor access. This module is based on the original 'modiconpass.rb' Basecamp module from DigitalBond. Module Options msf use...

Allen-Bradley/Rockwell Automation EtherNet/IP CIP Commands

The EtherNet/IP CIP protocol allows a number of unauthenticated commands to a PLC which implements the protocol. This module implements the CPU STOP command, as well as the ability to crash the Ethernet card in an affected device. This module is based on the original 'ethernetip-multi.rb' Basecam...

Gitorious Arbitrary Command Execution

This module exploits an arbitrary command execution vulnerability in gitorious. Unvalidated input is passed to the shell allowing command execution. Module Options msf use exploit/multi/http/gitorious/graph msf undefinedgraph show actions ...actions... msf undefinedgraph set ACTION msf...

appRain CMF Arbitrary PHP File Upload Vulnerability

This module exploits a vulnerability found in appRain's Content Management Framework CMF, version 0.1.5 or less. By abusing the uploadify.php file, a malicious user can upload a file to the uploads/ directory without any authentication, which results in arbitrary code execution. Module Options ms...

Windows x64 LoadLibrary Path

Load an arbitrary x64 library path This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 285 include Msf::Payload::Windows include Msf::Payload::Single def initializeinfo =...

BS.Player 2.57 Buffer Overflow Exploit (Unicode SEH)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BS.Player 2.57...

HP Easy Printer Care - XMLCacheMgr Class ActiveX Control Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP Easy Printer...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Mozilla Firefox 3.6.16 (OSX) - mChannel Use-After-Free (Metasploit) (2)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::FF,...

XAMPP WebDAV PHP Upload

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

FreeBSD telnetd Remote Root

!/usr/bin/env python Checks/exploits CVE-2011-4862 remote root in encryption supporting telnetd in multiple FreeBSD versions. Author: Knull of http://leethack.info References: Metasploit module, http://www.metasploit.com/modules/exploit/freebsd/telnet/telnetencryptkeyid FreeBSD advisory,...

Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

FreeBSD Telnet Service Encryption Key ID Buffer Overflow

Exploit for bsd platform in category remote exploits $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

phpMyAdmin 3.3.x3.4.x - Local File Inclusion via XML External Entity Injection (Metasploit)

phpMyAdmin 3.3.x3.4.x - Local File Inclusion via XML External Entity Injection Metasploit Exploit Title: poc-phpmyadmin-local-file-inclusion-via-xxe-injection Date: 12-01-2012 Author: Marco Batista Blog Link:...

Linux BSD-derived Telnet Service Encryption Key ID - Remote Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Linux...