493 matches found
LeadTools MultiMedia 15 - 'Ltmm15.dll' ActiveX Control Stack Buffer Overflow
source: https://www.securityfocus.com/bid/24035/info LEADTOOLS Multimedia is prone to a stack-based buffer-overflow vulnerability because the software fails to adequately check boundaries on data supplied to an ActiveX control method. An attacker can exploit this issue to execute arbitrary code i...
Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC
No description provided by source. pre span style="font: 14pt Courier New;"p align="center"b2007/05/14/b/p/span codespan style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bClever Database Comparer ActiveX versi...
EUVD-2007-2569
Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers to execute arbitrary code via a long OpenDVD property value. NOTE: this issue might be related to CVE-2007-0976...
East Wind Software (advdaudio.ocx 1.5.1.1) Local BoF Exploit
Exploit for unknown platform in category local exploits ============================================================ East Wind Software advdaudio.ocx 1.5.1.1 Local BoF Exploit ============================================================ 2007/05/05...
Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow Exploit
No description provided by source. /\ Adobe Photoshop CS2 / CS3 Unspecified .BMP File Buffer Overflow There is a buffer overflow in Adobe products that can be triggered while processing a malformed BMP, DIB or RLE file. This sploit runs calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and...
Winamp <= 5.3 (WMV File) Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================= Winamp ./exploit.wmv"; print wmv "\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00". print wmv "\x4D\x54\x68\x64"; closewmv; Tested : --- WINAMP 5.3 Version --- Author : UniquE-KeyUniquE-Cracker...
MS Windows DNS RPC Remote Buffer Overflow Exploit (port 445) v2
No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...
Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit
No description provided by source. / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow ...
ActSoft DVD-Tools - 'dvdtools.ocx' Remote Buffer Overflow
ActSoft DVD-Tools dvdtools.ocx Buffer Overflow Exploit- By Umesh Wanve var nop=unescape"%90%90%90%90%90%90%90%90%90%90%90%90%90%90%90"; var pointertoseh=unescape"%eb%06%90%90"; var sehhandler=unescape"%a9%11%02%75"; var shellcode= unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%49%49"+...
Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow milw0rm.com 2007-03-25...
CVE-2007-1387
The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...
PHP 4.4.6 snmpget() object id Local Buffer Overflow Exploit PoC
Exploit for unknown platform in category local exploits =============================================================== PHP 4.4.6 snmpget object id Local Buffer Overflow Exploit PoC =============================================================== 0day.today 2017-12-31...
GNU/Linux mbse-bbs 0.70.0 - Local Buffer Overflow
/ GNU/Linux mbse-bbs 0.70.0 & below stack overflow exploit ======================================================== Multiple overflow conditions occur within mbse-bbs versions 0.70.0 & below. The current version of mbse-bbs does not contain these weaknesses. Exploitation of these vulnerabilities...
Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow
!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...
3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Remote Overflow
3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb Default port is 69 if not specified require 'socket' win32bind...
3CTftpSvc <= 2.0.1 (Long Transporting Mode) Buffer Overflow PoC
No description provided by source. !/usr/bin/python Buffer Overflow Long transporting mode Vulnerability Exploit This is just a DoS exploiting code Tested on Windows xp SP2 Requires python and impacket Coded by Liu Qixu Of NCNIPC SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Window...
XMPlay 3.3.0.4 - '.ASX' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed .ASX files...
XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits =========================================================== XMPlay 3.3.0.4 M3U Filename Local Buffer Overflow Exploit =========================================================== /...
AIX 4.2 /usr/dt/bin/dtterm Local Buffer Overflow Exploit
No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/dt/bin/dtterm"; char prog230="dtterm"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...