983 matches found
Yahoo! Widget < 4.0.5 GetComponentVersion() Remote Overflow Exploit
No description provided by source. html !-- +++++++++++++++++++++++ +Last Modified by lhoang8500++ +++++++++++++++++++++++ -- html object classid="CLSID:7EC7B6C5-25BD-4586-A641-D2ACBB6629DD" id="target"/OBJECT SCRIPT language="javascript" var heapSprayToAddress = 0x05050505;...
[Full-disclosure] CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability
CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability BACKGROUND: =========== BlueSkychat is a professional voice and video chat software widely used by large chat websites in china. DESCRIPTION: ============ Code Audit Labs Code Audit for BlueSkyCat ActiveX Control and discovered ...
Yahoo! Widget < 4.0.5 - 'GetComponentVersion()' Remote Overflow
var heapSprayToAddress = 0x05050505; var payLoadCode =...
Borland Interbase <= 2007 SP1 Create-Request Remote Overflow Exploit
No description provided by source. / http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include stdio.h include stdlib.h include string.h include winsock2.h include...
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
Sub jojo buff = String999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA" getEDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee" buff1 = String999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb" egg = buff + getEDX + buff1 + scode Chroma.Color = egg End S...
Yahoo! Widget < 4.0.5 GetComponentVersion() Remote Overflow Exploit
Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Widget var heapSprayToAddress = 0x05050505; var payLoadCode =...
Borland Interbase 2007 SP1 - Create-Request Remote Overflow
Borland Interbase 2007 SP1 - Create-Request Remote Overflow / http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma...
Borland Interbase <= 2007 SP1 Create-Request Remote Overflow Exploit
Exploit for unknown platform in category remote exploits ==================================================================== Borland Interbase include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back define JMP "\x90\x90\xEB\xF7" // 0xFFFFFFF...
Borland Interbase 2007 SP1 - Create-Request Remote Overflow
/ http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064882.html Groetjes aan mijn sletjes: Doopie, Sjaakhans, PS en Sleepwalker :P All your base are belong to FD2K2! / include include include include include pragma commentlib,"ws232" define IBPORT "3050" // 0xFF - 0x8, jmp 8 bytes back...
IPSwitch IMail Server 2006 9.10 SUBSCRIBE Remote Overflow Exploit
No description provided by source. !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN complet...
CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow
The remote version of CA Message Queuing Service contains a stack overflow that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. vendor advisory: Affected...
IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow
!/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN completed FLAGS \Answered \Flagged \Delet...
Microsoft .NET Framework PE加载器远程溢出漏洞（MS07-040）
BUGTRAQ ID: 24778 CVECAN ID: CVE-2007-0041 Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework PE加载器处理包含畸形数据的PE文件时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 .NET Framework...
SILC工具包和客户端NICK_CHANGE函数远程溢出漏洞
BUGTRAQ ID: 24795 SILC（Secure Internet Live Conferencing）是安全的互联网会议讨论系统，可以发送任何类型的信息，包括多媒体信息，如视频、音频、图象等等。 SILC在处理畸形格式的消息时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 SILC客户端和工具包的lib/silcclient/clientnotify.c文件没有正确地处理NICKCHANGE通知。如果攻击者更改了隧道中的别名，就可能触发缓冲区溢出，导致执行任意指令。 SILC Toolkit/Client 1.1.2...
Apache Tomcat Connector mod_jk - 'exec-shield' Remote Overflow
/ Fedora Core 5,6 exec-shield based Apache Tomcat Connector modjk remote overflow exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference: https://www.securityfocus.com/bid/22791 vendor:...
Apache Tomcat Connector mod_jk - exec-shield Remote Overflow
Apache Tomcat Connector modjk - exec-shield Remote Overflow / Fedora Core 5,6 exec-shield based Apache Tomcat Connector modjk remote overflow exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference:...
FreeType位图字体处理远程溢出漏洞
BUGTRAQ ID: 24708 FreeType是一个流行的字体函数库。 FreeType的src/base/ftbimap.c文件没有正确地处理位图字体，如果用户受骗打开了特制的字体文件的话，就可能触发缓冲区溢出，导致拒绝服务或执行任意指令。 FreeType FreeType 2.3.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://downloads.sourceforge.net/freetype/freetype-2.3.4.tar.gz?modtime=1176187387&bigmirror=0...
RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow
RKD Software BarCode ActiveX Control BarCodeAx.dll 4.9 - Remote Overflow :. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID...
RKD Software BarCode ActiveX Control 'BarCodeAx.dll' 4.9 - Remote Overflow
:. GOODFELLAS Security Research TEAM .: :. http://goodfellas.shellcode.com.ar .: BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow ================================================================= Internal ID: VULWAR200706223 Introduction ------------ BarCodeAx.dll is a library...
IBM Tivoli Provisioning Manager - Remote Overflow (Egghunter)
IBM Tivoli Provisioning Manager - Remote Overflow Egghunter !/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected]...