win32/PerfectXp-pc1/sp3 (Tr) Add Admin Shellcode 112 bytes

Title : win32/PerfectXp-pc1/sp3 Tr Add Admin Shellcode 112 bytes Author : KaHPeSeSe Screenshot : http://i53.tinypic.com/289yamq.jpg Desc. : usr: kpss , pass: 12345 , localgroup: Administrator Tested on : PERFECT XP PC1 / SP3 Date : 18/07/2011 Not : a.q kpss : include include include int main...

Freefloat FTP Server - 'MKD' Remote Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'Freefloat FTP Server MKD Command Stack Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in the MKD command in the Freefloat FTP server. , 'Author' = 'C4SS!0 G0M3S', Initial Discovery 'James Fitts' Metasploit Module ,...

FreeFloat FTP Server 1.00 MKD Buffer Overflow

!/usr/bin/ruby +Exploit Title: FreeFloat FTP Server MKD Buffer Overflow Exploit +Date: 16\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 Brazilian +CVE: N/A require 'socket' def banner print """...

Freefloat FTP Server 1.0 - MKD Remote Buffer Overflow

Freefloat FTP Server 1.0 - MKD Remote Buffer Overflow !/usr/bin/ruby +Exploit Title: FreeFloat FTP Server MKD Buffer Overflow Exploit +Date: 16\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 Brazilia...

Freefloat FTP Server 1.0 - 'MKD' Remote Buffer Overflow

!/usr/bin/ruby +Exploit Title: FreeFloat FTP Server MKD Buffer Overflow Exploit +Date: 16\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 Brazilian +CVE: N/A require 'socket' def banner print """...

Net Quality Web Design SQL Injection

Exploit Title : Net Quality Web Design Sql injection + Date : 11 July 2011 + Author : Anas + Category : WebApps + d0rk : "Site by Net Quality Web Design Nottingham inurl:prod.php?prod=" + Facebook : http://www.facebook.com/profile.php?id=100000442288288 + Tested on : Windows Xp SP3...

Solar FTP 2.1.1 PASV Buffer Overflow PoC

No description provided by source. !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Notes: We found...

CVE-2011-1883

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

Design/Logic Flaw

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-1886

CVE-2011-1886: Information-disclosure in Win32k.sys (Windows XP SP3 kernel-mode driver) due to improper validation of function parameters, enabling local users to read kernel memory via a crafted application that triggers a NULL pointer dereference. Affected component is Win32k.sys; impact is ker...

CVE-2011-1886

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference, aka "Win32k Incorrect Parameter Validatio...

CVE-2011-1884

CVE-2011-1884 describes a use-after-free vulnerability in the Windows kernel‑mode driver component win32k.sys. The flaw arises from incorrect management of driver objects in the Win32k subsystem, enabling a local attacker to gain privileges by running a crafted application. Affected platforms inc...

CVE-2011-1870: Undefined Security Weakness

Integer overflow in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that triggers an incorrect...

PT-2011-3443 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

PT-2011-3447

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Description An information disclosure issue exists due to improper validation of function parameters in Windows kernel-mode drivers. This allows an attacker to access data from any kernel-mode memory location, includin...

CVE-2011-1886: Undefined Security Weakness

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference, aka "Win32k Incorrect Parameter Validatio...

Solar FTP 2.1.1 PASV Buffer Overflow PoC

Exploit for windows platform in category remote exploits !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release o...

Net Quality Web Design Sql Injection Vulnerability

Exploit for php platform in category web applications + Exploit Title : Net Quality Web Design Sql injection + Date : 11 July 2011 + Author : Anas + Category : WebApps + d0rk : "Site by Net Quality Web Design Nottingham inurl:prod.php?prod=" + Facebook :...

Solar FTP Server 2.1.1 - PASV Buffer Overflow

!/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Notes: We found different offsets depending on the...

ZipItFast 3.0 Heap Overflow

!/usr/bin/perl +Exploit Title: ZipItFast v3.0 .ZIP File Heap Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipItFast---Zip-It-Free-Vprogram22803.html +Version: v3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use...