Adobe Flash Player "newfunction" Invalid Pointer Use

This module exploits a vulnerability in the DoABC tag handling within versions 9.x and 10.0 of Adobe Flash Player. Adobe Reader and Acrobat are also vulnerable, as are any other applications that may embed Flash player. Arbitrary code execution is achieved by embedding a specially crafted Flash...

Safari 4.0.5 parent.close() Memory Corruption exploit (w/ASLR and DEP bypass)

No description provided by source. Download: http://www.exploit-db.com/sploits/safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: system"notepad" 0day.html - use 0x09090101 address for CALL JITed shellcode. START.htm - iff.htm -...

Apple Safari 4.0.5 - parent.close() Memory Corruption (ASLR + DEP Bypass)

Apple Safari 4.0.5 - parent.close Memory Corruption ASLR + DEP Bypass Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/12614.zip safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode:...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption (ASLR + DEP Bypass)

Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/12614.zip safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: system"notepad" 0day.html - use 0x09090101 address for CALL JITed shellcode...

Apple Safari <= Tag (heap spray) Remote Buffer Overflow Exploit (osX)

No description provided by source. !/usr/bin/env python Title: Apple Safari = Tag heap spray Remote BOF Exploit osX Author: eidelweiss Special Thanks to: AL-MARHUM - Deal Cyber - all Senior MEDANHACKER Greats: JosS hackown , r0073r & 0x1D inj3ct0r , kuris good job beib LOL Tested on ibook OS X...

Apple Safari <= Tag (heap spray) Remote BOF Exploit (osX)

Exploit for macOS platform in category remote exploits ========================================================= Apple Safari firelinking By eidelweiss Copyright C 2009-2010 firelinking by eidelweiss Apple Safari heap spray Remote BOF Exploit for osX Bind Shell Delivered on Port: 4444...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

No description provided by source. SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ http://www.exploit-db.com/sploits/11661.zip...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11661.zip...

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit

Exploit for unknown platform in category remote exploits =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray Exploit =========================================================== SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit...

SAP GUI 7.10 - WebViewer3D Active-X JIT-Spray

SAP GUI version 7.10 WebViewer3D Active-X JIT-Spray exploit Author: Alexey Sintsov Homepage: http://www.dsec.ru/ https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11661.zip...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

$Id: ultraofficehttpupload.rb 8705 2010-03-04 06:19:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

This module exploits a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control. If a long string is passed to the 'NewObject' method, a stack- based buffer overflow will occur when copying attacker-supplied data using the sprintf function. It is noteworthy that this vulnerability wa...

Ultra Shareware Office Control ActiveX HttpUpload Buffer Overflow

This module exploits a stack-based buffer overflow in Ultra Shareware's Office Control. When processing the 'HttpUpload' method, the arguments are concatenated together to form a command line to run a bundled version of cURL. If the command fails to run, a stack-based buffer overflow occurs when...

AOL 9.5 ActiveX 0day Exploit (heap spray)

Exploit for unknown platform in category remote exploits ========================================= AOL 9.5 ActiveX 0day Exploit heap spray ========================================= AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Tested on...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 - ActiveX Heap Spray AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc...

AOL 9.5 - ActiveX Heap Spray

AOL 9.5 ActiveX 0day Exploit heap spray + AOL 9.5 ActiveX 0day Exploit heap spray + Author : Dzattacker + Discovered by: Hellcode Research http://www.hellcode.net + Reference: http://www.exploit-db.com/exploits/11190 + Tested on Windows Xp SP3 ,IE7 // win32exec - calc shellcode =...

Internet Explorer 6 Web Server Exploit

Author : Ahmed Obied [email protected] Modify by: syniack [email protected] This program acts as a web server that generates an exploit to target a vulnerability CVE-2010-0249 in Internet Explorer. The exploit was tested using Internet Explorer 6 on Windows XP SP3. The exploit's payload...

JcomBand toolbar on IE ActiveX Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ====================================================== JcomBand toolbar on IE ActiveX Buffer Overflow Exploit ====================================================== JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Software...

JcomBand toolbar on IE - ActiveX Buffer Overflow

JcomBand toolbar on IE - ActiveX Buffer Overflow JcomBand Exploit heap spray // Author: germayax & D3V!L FUCKER // Version: 2.5 // special thanx: for my best friend his0k4. // Geetz 2 :Sarbot511 ,thrid-devil. //calc from metasploit shellcode =...

Microsoft SQL Server sp_replwritetovarbin Memory Corruption

$Id: ms09004spreplwritetovarbin.rb 8068 2010-01-05 00:02:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...