Disk Sorter Enterprise 9.1.12 - 'Login' Remote Buffer Overflow

!/usr/bin/python print "Disk Sorter Enterprise 9.1.12 Login Buffer Overflow" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTEM You do not need to be authenticated, password below is...

KarjaSoft Sami FTP Server 2.0.2 - USER/PASS Remote Buffer Overflow (SEH) Exploit

Exploit for windows platform in category remote exploits /usr/bin/python -- Coding: utf-8 -- Sami FTP Server 2.0.2- SEH Overwrite, Buffer Overflow by n30m1nd Date: 2016-01-11 Exploit Author: n30m1nd Vendor Homepage: http://www.karjasoft.com/ Software Link:...

KarjaSoft Sami FTP Server 2.0.2 - USERPASS Remote Buffer Overflow (SEH)

KarjaSoft Sami FTP Server 2.0.2 - USERPASS Remote Buffer Overflow SEH /usr/bin/python -- Coding: utf-8 -- Sami FTP Server 2.0.2- SEH Overwrite, Buffer Overflow by n30m1nd Date: 2016-01-11 Exploit Author: n30m1nd Vendor Homepage: http://www.karjasoft.com/ Software Link:...

Disk Savvy Enterprise 9.0.32 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Savvy Enterprise 9.0.32 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTE...

Disk Pulse Enterprise 9.0.34 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Pulse Enterprise 9.0.34 Buffer Overflow Exploit" print "Author: Tulpa // tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpa-security.com Exploit will land you NT...

Better

Better NOP generator This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework MixedNop ---------- This class implements a mixed NOP generator for MIPS big endian class MetasploitModule 'Better', 'Alias' = 'mipsbebetter',...

Easy File Sharing Web Server 7.2 Buffer Overflow

!/usr/bin/env python Exploit title: Easy File Sharing Web Server v7.2 - Remote SEH Buffer Overflow DEP bypass with ROP Date: 29/11/2015 Exploit Author: Knaps Contact: @TheKnapsy Website: http://blog.knapsy.com Software Link: http://www.sharing-file.com/efssetup.exe Version: Easy File Sharing Web...

cups-filters remove_bad_chars function arbitrary command execution vulnerability

CUPS is a Universal Unix Printing System, a cross-platform printing solution for Unix environments, based on the Internet Printing Protocol, providing most PostScript and raster printer services. A security vulnerability exists in the removebadchars function in cups-filters utils/cups-browsed.c,...

DEBIAN-CVE-2015-2265

The removebadchars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the 1 model or 2 PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

MP3Info 0.8.5a - SEH Buffer Overflow Exploit

No description provided by source. Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy aymansagy at gmail.com Vendor Homepage: http://ibiblio.org/mp3info/ Software Link:...

uhttp Server Path Traversal Vulnerability

No description provided by source. uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-10 ...

Wireshark 1.4.1-1.4.4 - SEH Overflow Exploit

No description provided by source. !/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5 DO NOT...

HP OpenView NNM 7.5.1 - ovalarmsrv.exe Remote Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit Exploit date : 07.04.2008 Exploit...

bsnes 0.87 - Local Denial of Service

No description provided by source. ?php bsnes v0.87 Local Daniel Of Service Tested on Windows 7 64Bit Software Site: http://byuu.org/bsnes/ Software Download: http://www.emulator-zone.com/download.php/emulators/snes/bsnes/bsnesv087-64bit.7z Author: Pr0T3cT10n bsnes v0.87 is vulnerable to local...

FSD 2.052/3.000 sysuser.cc sysuser::exechelp Function HELP Command Remote Overflow

No description provided by source. source: http://www.securityfocus.com/bid/25883/info FSD is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary...

IBM Lotus Notes Sametime User Enumeration

This module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack which is preferred, or a bruteforce attack trying all usernames of MAXDEPTH length or less. Module Options msf use auxiliary/gather/ibm/sametimeenumerateusers msf...

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow !/usr/bin/perl -w Exploit Title: WatchGuard Firewall XTM version 11.7.4u1 - Remote buffer overflow exploit sessionid cookie Date: Oct 18 2013 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...

Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)

The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via unspecified vectors...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

bsnes 0.87 - Local Denial of Service

bsnes 0.87 - Local Denial of Service 'Load NES Catridge' that contains 9999 chars 'A', so bsnes should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 9999 chars'A'.. iffileputcontents'crash.nes', $buffer echo"File created successfuly.\r\bsnes should crash when you open the file with...