3268 matches found
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption
Microsoft Windows - DCE-RPC svcctl ChangeServiceConfig2A Memory Corruption !/usr/bin/python MS Windows DCE-RPC svcctl ChangeServiceConfig2A 0day Memory Corruption PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Windows 2000 SP4 Polish all patches Requires.. - Impacket :...
MS03-007 Microsoft IIS 5.0 WebDAV ntdll.dll Path Overflow
This exploits a buffer overflow in NTDLL.dll on Windows 2000 through the SEARCH WebDAV method in IIS. This particular module only works against Windows 2000. It should have a reasonable chance of success against SP0 to SP3. This module requires Metasploit: https://metasploit.com/download Current...
winamp512-overflow.txt
!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
php_446_mssql_connect_bof.txt
original url: http://retrogod.altervista.org/php446mssqlconnectbof.html...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp 5.12 - .pls Remote Buffer Overflow (Perl) (2)
Winamp 5.12 - .pls Remote Buffer Overflow Perl 2 !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)
!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
Exploit for unknown platform in category remote exploits ================================================================== Winamp = 5.12 Crafted PLS Remote Buffer Overflow Exploit perl ================================================================== !/usr/bin/perl -w...
Microsoft Windows - .doc Malformed Pointers Denial of Service
Microsoft Windows - .doc Malformed Pointers Denial of Service /\ Microsoft Windows .doc File Malformed Pointers DoS Just move your mouse on the file and explorer crashes. If it does not try to look at file properties. Bug comes from Ole32.dll: CMP DWORD PTR DS:EAX+EBX,3 and we can set EAX, EDX an...
PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass
?php // PHP = 4.4.6 mssqlconnect & mssqlpconnect local buffer overflow // poc exploit and safemode bypass // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org // u can easily adjust for php5 // this as my little contribute to MOPB $scode= "xebx1b". "x5b"...
[Reversemode Advisory] Apple Quicktime Color ID remote heap corruption
APPLE QUICKTIME COLOR TABLE ID REMOTE HEAP CORRUPTION Rubйn Santamarta [email protected] Affected products and/or platforms: Mac OS X v10.3.9 and later Windows Vista Windows XP Windows 2000 Color table ID A 16-bit integer that identifies which color table to use. If this field is set to –1, t...
PHP 4.4.6 - mssql_[p]connect() Local Buffer Overflow
PHP 4.4.6 - mssqlpconnect Local Buffer Overflow milw0rm.com 2007-03-05...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================= PHP 0day.today 2018-03-31...
PHP <= 4.4.6 mssql_[p]connect() Local Buffer Overflow Exploit
No description provided by source. ?php // PHP = 4.4.6 mssqlconnect & mssqlpconnect local buffer overflow // poc exploit and safemode bypass // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org // u can easily adjust for php5 // this as my little contribute to...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected]...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service = 2.0.1 Long Transporting Mode Overflow Perl Exploit By Umesh Wanve [email protected]...
Windows 图像捕获服务中的漏洞可能允许特权提升(MS07-007)
在 Windows XP Service Pack 2 内，Window 图像捕获启动应用程序的方式中存在一个特权提升漏洞。 已登录的用户可通过利用此漏洞完全控制系统。 Microsoft Windows 2000 Service Pack 4 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 和 Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows Server 2003（用于基于 Itanium 的系统）和...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode
!/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 on port $A...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode (Perl)
3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Perl !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$A...