CCMPlayer 1.5 Stack based Buffer Overflow (.m3u)

Exploit: CCMPlayer 1.5 Stack based Buffer Overflow SEH Exploit .m3u Date: 30 Nov 2011 Author: Rh0 Software: CCMPlayer 1.5 Tested on: Windows XP SP3 32-Bit EN VirtualBox require 'msf/core' class Metasploit3 'CCMPlayer 1.5 Stack based Buffer Overflow .m3u', 'Description' = %q This module exploits a...

CVE-2011-3173

Stack-based buffer overflow in the GetDriverSettings function in nipplib.dll in the iPrint client in Novell Open Enterprise Server 2 aka OES2 SP3 allows remote attackers to execute arbitrary code via a long 1 hostname or 2 port field...

CVE-2011-3173

CVE-2011-3173 is a stack-based buffer overflow in the GetDriverSettings function of nipplib.dll used by the Novell iPrint Client (OES2 SP3). The vulnerability allows remote code execution via overly long hostname/port fields. Affected component is the iPrint client; Red Hat/SUSE advisories corrob...

CCMPlayer 1.5 Stack based Buffer Overflow SEH Exploit (.m3u)

Exploit for windows platform in category local exploits Exploit: CCMPlayer 1.5 Stack based Buffer Overflow SEH Exploit .m3u Date: 30 Nov 2011 Author: Rh0 Software: CCMPlayer 1.5 Tested on: Windows XP SP3 32-Bit EN VirtualBox require 'msf/core' class Metasploit3 'CCMPlayer 1.5 Stack based Buffer...

Titan FTP Server 8.40 Denial Of Service

!/usr/bin/python Exploit Title : Titan FTP Server 8.40 DoS Kernel Crash Date: 25/11/2011 Author: Houssam Sahli Software Link trial version : http://southrivertech.com/software/demosoft/titanftp.exe Version: 8.40 Developed by : South River Technologies, Inc. Tested on: Windows XP SP3 French...

Titan FTP Server 8.40 - 'APPE' Remote Denial of Service

source: https://www.securityfocus.com/bid/50819/info Titan FTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the affected FTP server, denying service to legitimate users. Titan FTP Server 8.40 is vulnerable; other versions may...

Free MP3 CD Ripper 1.1 (WAV File) Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Free MP3 CD Rippe...

Yahoo! Small Business Directory Traversal

======================================== Yahoo! smallbusiness Directory Traversal ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ; 0 0...

Free MP3 CD Ripper 1.1 (WAV File) Stack Buffer Overflow

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Kool Media Converter 2.6.0 - .ogg File Buffer Overflow

Kool Media Converter 2.6.0 - .ogg File Buffer Overflow source: https://www.securityfocus.com/bid/50651/info Kool Media Converter is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage this issue to execute...

AbsoluteFTP 2.2.10 Buffer Overflow

Exploit Title: AbsoluteFTP 1.9.6 - 2.2.10 Remote Buffer Overflow LIST Date: 2011-11-09 Author: Node Software Link: http://www.vandyke.com/pub/AbsoluteFTP/aftp2210.exe Version: 1.9.6 - 2.2.10 Tested on: Windows XP SP3, Windows 7 SP1 CVE : - Exploit has been tested to work on: AbsoluteFTP 2.2.10...

AbsoluteFTP 1.9.6 2.2.10 - LIST Remote Buffer Overflow (Metasploit)

AbsoluteFTP 1.9.6 2.2.10 - LIST Remote Buffer Overflow Metasploit Exploit Title: AbsoluteFTP 1.9.6 - 2.2.10 Remote Buffer Overflow LIST Date: 2011-11-09 Author: Node Software Link: http://www.vandyke.com/pub/AbsoluteFTP/aftp2210.exe Version: 1.9.6 - 2.2.10 Tested on: Windows XP SP3, Windows 7 SP1...

XlightFTP-Server-v3.7.0

XlightFTP Server v3.7.0 Remote Root BOF Exploit when parsing the command connect, leads to a stack based overflow. Xlight FTP Server 3.7.0 allow remote anonymous login by default exploiting these issues could allow an attacker to compromise the application, access or modify data. from socket impo...

Oracle 10g R2 Buffer Overflow

Exploit Title: New exploit to Oracle CVE-2007-4517 vulnerability Date: 11,2,2011 Author: David Maman and the GreenSQL Team Software Link: http://blog.greensql.com/2011/11/02/new-exploit-to-oracle-vulnerability/ Version: 0.1 Tested on: Oracle Database 10g Express Edition CVE : New exploit to...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020002 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020002 GetFooterRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

Mini-Stream 3.0.1.1 Buffer Overflow Exploit

Exploit for windows platform in category local exploits $Id: ministream.rb 14155 2011-11-04 08:20:43Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Opera Web Browser SVG布局内存破坏漏洞

BUGTRAQ ID: 50044 Opera为来自挪威的一个浏览器。 Opera Web Browser在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞执行任意代码，可能会造成拒绝服务。 Opera Software Opera Web Browser 12 Opera Software Opera Web Browser 11.x Opera Software Opera Web Browser 10.x 厂商补丁： Opera Software -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

BlueZone Desktop - Multiple Malformed Files Local Denial of Service Vulnerabilities

BlueZone Desktop - Multiple Malformed Files Local Denial of Service Vulnerabilities Exploit Title: BlueZone Desktop Malformed .zmd file Local Denial of Service Date: 10-24-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest...

BlueZone Desktop - Multiple Malformed Files Local Denial of Service Vulnerabilities

Exploit Title: BlueZone Desktop Malformed .zmd file Local Denial of Service Date: 10-24-11 Author: Silent Dream Software Link: http://www.rocketsoftware.com/bluezone/downloads/desktop-free-trial Version: Latest Tested on: Windows XP SP3 To trigger: Run this script, double click file to open with...