2559 matches found
News Bin Pro 5.33 (.NBI File) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =========================================================== News Bin Pro 5.33 .NBI File Local Buffer Overflow Exploit =========================================================== /\ News Bin Pro 5.33 .NBI File Buffer Overflow exploit There ar...
News Bin Pro 5.33 (.NBI File) Local Buffer Overflow Exploit
No description provided by source. /\ News Bin Pro 5.33 .NBI File Buffer Overflow exploit There are 2 buffer overflow in News Bin Pro 5.33 that can be triggered by a crafted .nbi config file. DataPath and DownloadPath sizes are not checked and code execution is possible. This vulnerability also...
uTorrent 1.6 Remote Heap Overflow Exploit PoC
No description provided by source. / This is a PoC remote exploit for uTorrent 1.6 Author: defsec [email protected] http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include stdio.h include stdlib.h define NASIZE 4880 unsigned char niceannounceNASIZE;...
μTorrent (uTorrent) 1.6 build 474 - announce Key Remote Heap Overflow
μTorrent uTorrent 1.6 build 474 - announce Key Remote Heap Overflow / This is a PoC remote exploit for uTorrent 1.6 Author: defsec http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include include define NASIZE 4880 unsigned char niceannounceNASIZE; unsigned char...
μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow
/ This is a PoC remote exploit for uTorrent 1.6 Author: defsec http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include include define NASIZE 4880 unsigned char niceannounceNASIZE; unsigned char xorops="\x33\xc0\x33\xdb"; // win32exec - EXITFUNC=process CMD=calc Size=343...
Computer Associates BrightStor ARCserve Backup Catirpc.EXE远程拒绝服务漏洞
Computer Associates BrightStor ARCserve Backup是一款企业级别的备份解决方案。 BrightStor AECserver Backup包含的Catirpc.exe处理TADDR2UADDR过程存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Catirpc.exe是为BrightStor Backup产品提供末端映射和启用RPC服务的程序。CATIRPC.dll不正确处理用于与CA RPC服务器通信的TADDR2UADDR过程，可导致一个NULL指针引用而造成拒绝服务攻击。 Computer Associates BrightSto...
CA BrightStor ARCserve - msgeng.exe Remote Heap Overflow (2)
CA BrightStor ARCserve - msgeng.exe Remote Heap Overflow 2 !/usr/bin/perl original exploit by lssec.com this is a perl porting acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage :...
MOAB-03-01-2007: Apple Quicktime HREFTrack Cross-Zone Scripting vulnerability
Summary A month ago, a vulnerability in QuickTime was exploited to spread a worm in MySpace. The vulnerability was first published by pdp. In his article, pdp describes how HREFTrack attribute in .mov files can be used for malicious scripting. The MySpace worm abused this vulnerability in a...
Let IRIS Sniffer can be in the Win2003 SP1 running on-vulnerability warning-the black bar safety net
IRIS Sniffer is a famous network security eeye company of a network for the diagnosis of the Sniffer program with the Sniffer Pro compared with the interface refreshing, easy-to-use features, especially its features of HTTP, FTP, MAIL Protocol the ability to decode powerful, and therefore the...
Mercur v5.0 IMAP SP3 SELECT Buffer Overflow
Mercur v5.0 IMAP server is prone to a remotely exploitable stack-based buffer overflow vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied data prior to copying it to a fixed size memory buffer. Credit to Tim Taylor for discover the vulnerabilit...
Microsoft Windows Manifest File Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...
CVE-2006-6299
Summary (CVE-2006-6299): A heap-based buffer overflow in Msg.dll affects Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the ZENworks Collection client. The vulnerability allows remote attackers to trigger arbitrary code execution via crafted network packets, with the Collection clie...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...
XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U files...
MS Windows XP Task Scheduler (.job) Universal Exploit (MS04-022)
No description provided by source. / HOD-ms04022-task-expl.c: MS04-022 Microsoft Windows XP Task Scheduler .job Universal Exploit Exploit version 0.1 coded by .:: houseofdabus ::. at inbox dot ru ------------------------------------------------------------------- Tested on: - Internet Explorer 6....
Microsoft Windows TCP/IP协议驱动远程溢出漏洞（MS06-032）
Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的TCP/IP协议驱动处理特定畸形的IP源路由报文时存在缓冲区溢出漏洞，远程攻击者可以通过发送有Loose Source and Record Route选项的特制ICMP报文触发这个漏洞，导致tcpip.sys或ntoskrnl.exe中出现错误而造成拒绝服务或执行任意指令。 默认情况下，Windows系统的路由及远程访问服务是关闭的，也就是说默认情况下系统不受此漏洞影响。 Microsoft Windows XP SP2 Microsoft Windows XP SP1...
Microsoft PGM远程缓冲区溢出漏洞（MS06-052）
PGM是一个可靠且可伸缩的多播协议，允许接收方检测丢失、请求重新传输丢失的数据或者通知应用程序无法恢复的丢失情形。 Microsoft在处理PGM消息时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者发送了特制的多播消息的话，就可能触发这个漏洞，导致执行任意指令。但成功攻击要求系统安装了MSMQ（Microsoft消息队列）服务，而该服务不是默认安装的。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 厂商补丁： Microsoft ---------...
Kerio Personal Firewall 2.1.4 Remote Code Execution Exploit
No description provided by source. / Kerio Personal Firewall v2.1.4 remote code execution exploit Tested on Windows XP with SP1 In order to exploit, for ease of mind, set the firewall to permit all traffic, or allow a connection to port 44334 from your testing unix shell ip. It is also possible t...
SHTTPD 1.34 (POST) Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================= SHTTPD 1.34 POST Remote Buffer Overflow Exploit ================================================= !/usr/bin/perl -w SHTTPD Buffer Overflow POST Tested on SHTTPD 1.34 WinXP SP1 Hebrew...
CVE-2006-4777
Heap-based buffer overflow in the DirectAnimation Path Control DirectAnimation.PathControl COM object daxctle.ocx for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the...