SmartVmd Active-X 1.3 File Overwrite

===================================================================== SmartVmd ActiveX 1.3 ActiveXLoadMaskFromFile file overwrite Exploit ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

Ultimate Player 1.56 Beta Buffer Overflow

!/usr/bin/perl by hack4love [email protected] Ultimate Player v 1.56 beta .m3u/upl Universal Local BOF SEH my $bof="\x41" x 4108; my $nsh="\xEB\x06\x90\x90"; my $seh="\xb8\x15\xd1\x72";tasted under sp2//sp3 univ my $nop="\x90" x 20; my $sec=...

CVE-2009-3020: Undefined Security Weakness

win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service system crash by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets CSS rule in an HTML document, possibly related to the Embedded OpenType EOT Font Engin...

HTML Creator & Sender <= 2.3 build 697 Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for...

HTML Creator Sender 2.3 build 697 - Local Buffer Overflow (SEH)

HTML Creator Sender 2.3 build 697 - Local Buffer Overflow SEH !/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to...

win32/xp sp2 (fr) notepad.exe 41 bytes

Exploit for win32 platform in category shellcode ======================================== win32/xp sp2 fr notepad.exe 41 bytes ======================================== windows xp-sp2 fr notepad.exe 41 bytes author opt!x hacker " in this shellcode I use 2 API finded in kernel32.dll:in windows XP S...

HTML Creator And Sender 2.3 Buffer Overflow

!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...

HTML Creator & Sender 2.3 build 697 - Local Buffer Overflow (SEH)

!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...

EesySec Personal Firewall Remote Buffer Overflow Exploit

!/usr/bin/perl + Bug : EesySec Personal Firewall Remote Buffer Overflow Exploit + program Download : http://www.effectmatrix.com/easysec/ + Author : theEdit0r + Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site: Expl0iters.ir Anti-security.i...

RM Downloader Stack Overflow

!/usr/bin/perl + Bug : RM Downloader .Ram/.Smi/ .pls/ .smil/ .wax/ .wpl File Local Stack Overflow + Author : theEdit0r + Greetz to all my friends + Tested on: Windows XP Pro SP2 + Big thnx: Expl0iters.ir Anti-security.ir 0012F920 |00168370 ASCII "AAAA" 0012F924 |41410004 0012F928 |41414141 0012F9...

Playlistmaker 1.51 - .m3u Local Buffer Overflow (SEH)

Playlistmaker 1.51 - .m3u Local Buffer Overflow SEH Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems ...

Playlistmaker 1.51 (.m3u File) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================== Playlistmaker 1.51 .m3u File Local Buffer Overflow Exploit SEH ================================================================== Playlistmaker version 1.51 Tested on Windows...

Playlistmaker 1.51 (.m3u File) Local Buffer Overflow Exploit (SEH)

No description provided by source. Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems to be compiled wi...

Playlistmaker 1.51 - '.m3u' Local Buffer Overflow (SEH)

Playlistmaker version 1.51 Tested on Windows XP SP2 English Exploit originally discovered by ThE g0bL!N/exploited by germayax I could not get germayax's exploit to work with XP3. The only useable p/p/r I could find was in oledlg.dll which seems to be compiled with SafeSEH on in XP SP3. However,...

CVE-2008-6975

Multiple cross-site request forgery CSRF vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary commands via the pingip parameter; 2 change the administrative credentials via the httpusername and...

EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflows (PoC)

EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflows PoC !/usr/bin/python EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs Found By: DrIDE Based On: http://www.milw0rm.com/exploits/9411 Tested On: XP SP2 Notes: These don't seem to actually take down the server, they cause a...

Integer overflow

Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4 system via a crafted AVI file, or cause a denial of service on a Windows XP SP2 or SP3, Server 2003 SP2, Vista Gold, SP1, ...

CVE-2009-1923: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Windows Internet Name Service WINS component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka "WINS Heap Overflow...

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability

ZDI-09-053: Microsoft Windows WINS Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-053 August 11, 2009 -- CVE ID: CVE-2009-1923 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Windows 2003 SP2 Microsoft Windows 2000 SP4 -- TippingPointTM IPS...

CVE-2009-1922: Undefined Security Weakness

The Message Queuing aka MSMQ service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka "MS...