395 matches found
Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)
No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...
abcview-overflow.txt
/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...
freshview-overflow.txt
/ FreshView 7.15 .PSP File Buffer Overflow FreshView is vulnerable to an unspecified buffer overflow when processing a crafted .PSP file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in XnView to see...
IrfanView <= 4.00 .IFF File Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =================================================== IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsig...
IrfanView 4.00 - .iff Local Buffer Overflow
IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
IrfanView 4.00 - '.iff' Local Buffer Overflow
/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit
No description provided by source. / XnView 1.90.3 .XPM File Buffer Overflow ...
ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================== ACDSee 9.0 .XPM File Local Buffer Overflow Exploit ==================================================== / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffe...
ACDSee 9.0 - .xpm Local Buffer Overflow
ACDSee 9.0 - .xpm Local Buffer Overflow / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP...
irfanview399-ani.txt
/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...
IrfanView 3.99 - '.ani' Local Buffer Overflow (2)
/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...
IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)
Exploit for unknown platform in category local exploits ========================================================================= IrfanView 3.99 .ANI File Local Buffer Overflow Exploit multiple targets ========================================================================= / IrfanView 3.99 .ANI...
IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit
Exploit for unknown platform in category remote exploits =================================================== IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit =================================================== !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windo...
Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit
No description provided by source. / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3...
ProFTPd 1.3.01.3.0a - mod_ctrls support Local Buffer Overflow (2)
ProFTPd 1.3.01.3.0a - modctrls support Local Buffer Overflow 2 !/usr/bin/perl -w $Id: revengeproftpdctrls26.pl, v1.1 2007/02/18 19:30:25 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition...
ProFTPd 1.3.01.3.0a - mod_ctrls support Local Buffer Overflow (1)
ProFTPd 1.3.01.3.0a - modctrls support Local Buffer Overflow 1 !/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory :...
Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit
Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...
Microsoft Internet Explorer - VML Download and Execute (MS07-004)
Microsoft Internet Explorer - VML Download and Execute MS07-004 c pang0 // www.tcbilisim.org bug found3d by LifeAsaGeek thx = o.g. / chaos / sakkure / stansar / xoron MS07-004 VML integer overflow exploit $html = "laz.html"; print "c pang0 // www.tcbilisim.org\nbug found3d by LifeAsaGeek\nMS07-00...
MS Internet Explorer VML Download and Execute Exploit (MS07-004)
Exploit for unknown platform in category remote exploits ================================================================ MS Internet Explorer VML Download and Execute Exploit MS07-004 ================================================================ c pang0 // www.tcbilisim.org bug found3d by...
PHP Command Shell, Bind TCP (via PHP)
Listen for a connection and spawn a command shell via php This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...