10443 matches found
Simple Web Server 2.2-rc2 ASLR Bypass Exploit
No description provided by source. use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: pole Tested on Windows 7 32bit NOTE : If explo...
ALLMediaServer 0.8 SEH Overflow Exploit
No description provided by source. Exploit Title: seh exploit, BOF Date: 04/07/2012 Exploit Author: motaz reda my E-mail: [email protected] Software Link: http://allmediaserver.org/ Version: ALLMediaServer 0.8 Tested On: Windows 7 ultimate !/usr/bin/python import sys, socket s =...
Thunder Kankan Player 4.8.3.840 - Stack Overflow/DOS Exploit
No description provided by source. !/usr/bin/env python print 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/ :...
Write-to-file Shellcode (Win32)
No description provided by source. ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server 2003, Server 2008, Vista, Windows 7 ; ; Size: 278 bytes ;...
Dexter (CasinoLoader) Panel - SQL Injection
No description provided by source. Exploit Title: Dexter CasinoLoader Panel SQLi Date: Feb, 13, 2014 Exploit Author: Brian Wallace @botnethunter Version: CasinoLoader Tested on: Windows 7, Ubuntu, Debian import pycurl import urllib import cStringIO import base64 import argparse import sys import...
BlazeVideo HDTV Player 6.6 Professional - SEH&DEP&ASLR
No description provided by source. !/usr/bin/python -w ----------------------------------------------------------------------------------- Exploit: BlazeVideo HDTV Player 6.6 Professional SEH&DEP&ASLR Author: b33f - http://www.fuzzysecurity.com/ OS: Tested on Windows 7 32-bit PRO SP1 Software Lin...
xeams email server 4.4 build 5720 - Stored XSS
No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Xeams Email Server Version: 4.4 Build 5720 Vendor Site: http://www.xeams.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosure dat...
Winamp 5.572 - Local BoF Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/python Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Tested on: Windows 7 Ultimate x64 ENG Badchars...
MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Oreans Themida 2.1.8.0 - TMD File Handling Buffer Overflow Vulnerability
No description provided by source. / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software develope...
Magix Musik Maker 16 - .mmm Stack Buffer Overflow (without egg-hunter)
No description provided by source. --- My version of exploit... Looks like bug the same as in: http://www.exploit-db.com/exploits/17313/ My exploit does not use egg-hunter, so it must be faster, but i have limited size for payload - 750 bytes 8 Speed Vs Size... --- Title: Magix Musik Maker 16...
IBM Lotus QuickR qp2 ActiveX Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Adobe On Location CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe On Location CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 Build 315 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .olproj Greetz: Astalavista,...
NJStar Communicator MiniSmtp Buffer Overflow [ASLR Bypass]
No description provided by source. Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow ASLR Bypass Date: 02/12/11 Author: Zune - Julian Pulido Software Link: http://www.njstar.com/download/njcom.exe Version: 3.0 Build: 11818 and previous Tested on: Windows 7 Ultimate CVE:2011-4040 !...
SIEMENS Solid Edge ST4/ST5 SEListCtrlX ActiveX - SetItemReadOnly Arbitrary Memory Rewrite RCE
SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Control SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution Vulnerability SEListCtrlX ActiveX 安装与西门子 Solid Edge 产品此模块功绩。此漏洞存在几个 api 提供的控制,在那里用户提供的输入处理作为内存的指针,而不进行适当的验证,允许攻击者读取和损坏从目标进程的内存。本模块滥用方法 NumChildren 和 DeleteItem 分别达到内存信息泄漏及远程执行代码。本模块对...
IBM Forms Viewer - Unicode Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rexml/document' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include REXML include...
Jzip SEH Unicode Buffer Overflow (Denial of Service)
No description provided by source. !/usr/bin/python Exploit title: seh unicode buffer overflow DOS Date: 16/04/2014 Exploit Author: motaz reda motazkhodairatgmail.com Software Link : http://www.jzip.com/ Version: jZip v2.0.0.132900 Tested On: Windows 7 ultimate import sys, os filename = vuln.zip...
MyBB MyStatus 3.1 - SQL Injection Vulnerability
No description provided by source. ?--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...
ACE Stream Media 2.1 - (acestream://) Format String Exploit PoC
No description provided by source. ? ACE Stream Media 2.1 acestream:// Format String Exploit PoC Vendor: ACE Stream Product web page: http://www.acestream.org Affected version: Ace Player HD 2.1.9 VLC 2.0.5 Summary: Ace Stream is an innovative multimedia platform of a new generation, which includ...
Kaillera Multiple Clients Buffer Overflow Vulnerabilities
No description provided by source. !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13:...