Intel Centrino ipw2200BG - Wireless Driver Remote Overflow

/ This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit that demonstrates the remote code execution on ipw2200...

Acrobat Reader多个远程溢出漏洞

Acrobat Reader是非常流行的PDF文件阅读器。 PDF格式将文档对象层次的根定义为“目录词典”，目录中包含有到对象的引用、构成文档内容的数据及其属性，以及定义如何向用户显示文档的指令。 当前的PDF规范中存在设计错误，如果引用了无效的页面树节点或对象的话，目录中恶意的Pages项设置或恶意的目录词典可能会出现非预期的情况，包括内存破坏、内存泄漏或拒绝服务。 Adobe Acrobat Reader 5.0 - 7.0 目前厂商还没有提供补丁或者升级程序，SEBUG建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com...

Tencent QQ multiple remote overflow vulnerabilities demo-vulnerability warning-the black bar safety net

The following is demo ! /Article/UploadPic/2007-1/200714105438199.jpg ! /Article/UploadPic/2007-1/200714105532691.jpg ! /Article/UploadPic/2007-1/20071410560783.jpg ! /Article/UploadPic/2007-1/200714105631232.jpg...

WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit ============================================================= / ---=== winzip-exploit.html XiaoHui : 76693223at163co...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

/ ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can delete the key:...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

WinZip 10.0 - FileView ActiveX Controls Remote Overflow / ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can...

Novell Netmail NMAP服务STOR命令远程溢出漏洞

Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 NetMail中绑定到TCP 689端口的NMAP服务（nmapd.exe）在处理STOR命令时存在缓冲区溢出漏洞，如果攻击者能够向该命令发送特定参数的话，就可以触发这个溢出，导致执行任意指令。 Novell NetMail 3.52 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026f.SALPublic.html...

OpenLDAP 2.4.3 - KBIND Remote Buffer Overflow

OpenLDAP 2.4.3 - KBIND Remote Buffer Overflow / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse Shoutouts to LSD for their l33t asm code and to all 0dd people Private 0dd code. ...

Novell ZENworks Asset Management Collection Client Remote Overflow

The remote host is running Novell ZENworks Asset or Inventory Management, a remote desktop and network management software. The remote version of this software has multiple heap overflow vulnerabilities that may be exploited by an attacker to execute arbitrary code on the remote host with SYSTEM...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...

Nullsoft Winamp Ultravox多个远程堆溢出漏洞

Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的Ultravox协议处理器在处理ultravox-max-msg头时存在堆溢出漏洞。恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Winamp的Ultravox Lyrics3解析代码中也存在堆溢出漏洞。如果解析了某些Lyrics3标签，恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Nullsoft Winamp 5.3 Nullsoft Winamp 5.24...

Asterisk Skinny Channel Driver (chan_skinny) get_input Function Remote Overflow

The chanskinny channel driver included in the version of Asterisk running on the remote host does not properly validate the length header in incoming packets. An unauthenticated, remote attacker may be able to leverage this flaw to execute code on the affected host subject to the privileges under...

Security-Assessment.com Advisory: Asterisk remote heap overflow

======================================================================== = Asterisk - chanskinny Remote Unauthenticated Heap Overflow = = Vendor Website: = http://www.asterisk.org = = Affected Version: = All 1.2-branch releases prior to and including 1.2.12.1 = All 1.0-branch releases prior to an...

McAfee ePolicy Orchestrator HTTP Server Source Header Remote Overflow

Binary data 3766.prm...

MS Windows NetpIsRemote() Remote Overflow Expl (MS06-040) (2k3)

Exploit for unknown platform in category remote exploits ================================================================== MS Windows NetpIsRemote Remote Overflow Exploit MS06-040 2k3 ================================================================== netapiwin2003.pm MS06-040 Exploit for Windows...

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it exploitable on Windows Server 2003 platform ?". As I know, Windows XP SP2 and...

Microsoft Windows Server 2003 - NetpIsRemote() Remote Overflow (MS06-040) (Metasploit)

Microsoft Windows Server 2003 - NetpIsRemote Remote Overflow MS06-040 Metasploit netapiwin2003.pm MS06-040 Exploit for Windows Server 2003 SP0 Author: Trirat Puttaraksa Kira http://sf-freedom.blogspot.com For educational purpose only Note: This exploit is developed because of my question "Is it...

Ipswitch IMail Server RCPT String Remote Overflow

Binary data 3738.prm...

MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) (2)

No description provided by source. / MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000 SP0-SP4 Microsoft Windows...

Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)

Microsoft Windows - NetpIsRemote Remote Overflow MS06-040 2 / MS06-040 Remote Code Execution Proof of Concept Ported by ub3r st4r aka iRP --------------------------------------------------------------------- Tested Against: Windows XP SP1 Windows 2000 SP4 Systems Affected: Microsoft Windows 2000...