bsnes 0.87 - Local Denial of Service

No description provided by source. ?php bsnes v0.87 Local Daniel Of Service Tested on Windows 7 64Bit Software Site: http://byuu.org/bsnes/ Software Download: http://www.emulator-zone.com/download.php/emulators/snes/bsnes/bsnesv087-64bit.7z Author: Pr0T3cT10n bsnes v0.87 is vulnerable to local...

HP OpenView NNM 7.5.1 - ovalarmsrv.exe Remote Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit Exploit date : 07.04.2008 Exploit...

IBM Lotus Notes Sametime User Enumeration

This module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack which is preferred, or a bruteforce attack trying all usernames of MAXDEPTH length or less. This module requires Metasploit: https://metasploit.com/download Current source:...

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow !/usr/bin/perl -w Exploit Title: WatchGuard Firewall XTM version 11.7.4u1 - Remote buffer overflow exploit sessionid cookie Date: Oct 18 2013 Exploit Author: [email protected] a.k.a. [email protected] Vendor Homepage:...

Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)

The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via unspecified vectors...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

bsnes 0.87 - Local Denial of Service

bsnes 0.87 - Local Denial of Service 'Load NES Catridge' that contains 9999 chars 'A', so bsnes should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 9999 chars'A'.. iffileputcontents'crash.nes', $buffer echo"File created successfuly.\r\bsnes should crash when you open the file with...

ruby WEBrick log escape sequence

WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrar...

AOL Desktop 9.6 .rtx Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE :...

AOL Desktop 9.6 - .rtx Local Buffer Overflow

AOL Desktop 9.6 - .rtx Local Buffer Overflow !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011...

AOL Desktop 9.6 Buffer Overflow

!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off CTRL+ALT+DELETE and turn all AOL processes off then try again...

AoA Audio Extractor 2.x - ActiveX ROP

AoA Audio Extractor 2.x - ActiveX ROP AoA Audio Extractor v2.x ActiveX ROP exploit Hadji Samir - s-dzhotmail.fr & mrme - mrmenet-ninja.net ' ROP magic begins here: Stack pivot seh = unescape"%72%2a%02%10"' 0x10022a72 == ADD ESP,604; RETN 4 ' VirtualProtect placeholders ; vp = "AAAA" vp = vp +...

Dolphin 2.0 (.elf) Local Daniel Of Service

Exploit for windows platform in category dos / poc ========================================== Dolphin 2.0 .elf Local Daniel Of Service ========================================== Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a fil...

uhttp Server 0.1.0-alpha - Directory Traversal

uhttp Server 0.1.0-alpha - Directory Traversal uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date...

UHTTP Server Path Traversal

uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-10 X. INDEX I. ABOUT THE APPLICATION I...

uhttp Server Path Traversal Vulnerability

Exploit for multiple platform in category remote exploits ========================================= uhttp Server Path Traversal Vulnerability ========================================= uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affecte...

uhttp Server 0.1.0-alpha - Directory Traversal

uhttp Server Path Traversal Vulnerability Name uhttp Server Vendor http://uhttps.sourceforge.net Versions Affected 0.1.0-alpha Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-03-10 X. INDEX I. ABOUT THE APPLICATION I...

eDisplay Personal FTP Server 1.0.0 Stack Buffer Overflow

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

ZoIPer v2.22 Call-Info Remote Denial Of Service

Exploit for unknown platform in category dos / poc ================================================================== Vulnerability in Zoiper softphone version 2.22 - Denial Of Service ==================================================================...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...