IrfanView 4.00 - '.iff' Local Buffer Overflow

/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...

XnView 1.90.3 (.XPM File) Local Buffer Overflow Exploit

No description provided by source. / XnView 1.90.3 .XPM File Buffer Overflow ...

ACDSee 9.0 (.XPM File) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== ACDSee 9.0 .XPM File Local Buffer Overflow Exploit ==================================================== / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffe...

ACDSee 9.0 - .xpm Local Buffer Overflow

ACDSee 9.0 - .xpm Local Buffer Overflow / ACDSee v9.0 .XPM File Buffer Overflow ACDSee is vulnerable to an unspecified buffer overflow when processing a crafted .XPM file. This exploit runs calc.exe or binds shell to port 4444, and works against ACDSee and ACDSee Quick View. Tested against Win XP...

irfanview399-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

IrfanView 3.99 - '.ani' Local Buffer Overflow (2)

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)

Exploit for unknown platform in category local exploits ========================================================================= IrfanView 3.99 .ANI File Local Buffer Overflow Exploit multiple targets ========================================================================= / IrfanView 3.99 .ANI...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

Exploit for unknown platform in category remote exploits =================================================== IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit =================================================== !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windo...

Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit

No description provided by source. / axiagen.c Axigen eMail Server v2.0 beta by fuGich Tue Dec 5 2006 thanks to mu-b - Tested on: Axigen V2 beta logType for the pop3 service must be "system" and the logLevel set to any number with 4th bit set remote shell format string vulnerability in pop3...

ProFTPd 1.3.01.3.0a - mod_ctrls support Local Buffer Overflow (2)

ProFTPd 1.3.01.3.0a - modctrls support Local Buffer Overflow 2 !/usr/bin/perl -w $Id: revengeproftpdctrls26.pl, v1.1 2007/02/18 19:30:25 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Original Advisory : http://www.coresecurity.com/?action=item&id=1594 Exploitation condition...

ProFTPd 1.3.01.3.0a - mod_ctrls support Local Buffer Overflow (1)

ProFTPd 1.3.01.3.0a - modctrls support Local Buffer Overflow 1 !/usr/bin/perl -w $Id: revengeproftpdctrls24.pl, v1.0 2007/02/18 19:24:22 revenge Exp $ ProFTPD v1.3.0/1.3.0a Controls Buffer Overflow Exploit Old style school sploit against gcc 3.x and linux kernel 2.4 Original Advisory :...

Axigen eMail Server 2.0.0b2 (pop3) Remote Format String Exploit

Exploit for linux platform in category remote exploits =============================================================== Axigen eMail Server 2.0.0b2 pop3 Remote Format String Exploit =============================================================== / axiagen.c Axigen eMail Server v2.0 beta by fuGich...

Microsoft Internet Explorer - VML Download and Execute (MS07-004)

Microsoft Internet Explorer - VML Download and Execute MS07-004 c pang0 // www.tcbilisim.org bug found3d by LifeAsaGeek thx = o.g. / chaos / sakkure / stansar / xoron MS07-004 VML integer overflow exploit $html = "laz.html"; print "c pang0 // www.tcbilisim.org\nbug found3d by LifeAsaGeek\nMS07-00...

MS Internet Explorer VML Download and Execute Exploit (MS07-004)

Exploit for unknown platform in category remote exploits ================================================================ MS Internet Explorer VML Download and Execute Exploit MS07-004 ================================================================ c pang0 // www.tcbilisim.org bug found3d by...

PHP Command Shell, Bind TCP (via PHP)

Listen for a connection and spawn a command shell via php This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...

BomberClone 0.11.6.2 - Error Messages Remote Buffer Overflow

BomberClone 0.11.6.2 - Error Messages Remote Buffer Overflow / bomberclone include include include include include include include / fork + bind port 31337 - ty izik / char linuxshellcode= "\x6a\x66\x58\x99\x6a\x01\x5b\x52\x53\x6a\x02\x89\xe1\xcd\x80"...

BlueCoat WinProxy 6.0 R1c (Host) Remote Stack/SEH Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== BlueCoat WinProxy 6.0 R1c Host Remote Stack/SEH Overflow Exploit ================================================================== !perl "WinProxy 6.0 R1c" Remote Stack/SEH...

BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow (SEH)

BlueCoat WinProxy 6.0 R1c - Host Remote Stack Overflow SEH !perl "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit Author: FistFucker aka FistFuXXer e-Mail: [email protected] Advisory: http://www.idefense.com/intelligence/vulnerabilities/display.php?id=364 CVE info: CAN-2005-4085 use IO::Socke...

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...

MS Windows Plug-and-Play Service Remote Overflow (MS05-039)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows Plug-and-Play Service Remote Overflow MS05-039 =========================================================== / Windows 2000 universal exploit for MS05-039...