Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...

Songbird Media Player 0.2 - Format String Denial of Service (PoC)

/ ======================================================================== 0-day Songbird Media Player November 2006 - Month Of Greg's Media Player Exploits : i'll probably continue...

GlobalScape Secure FTP Server 3.0 Buffer Overflow Exploit

No description provided by source. !/usr/bin/python GlobalScape Secure FTP Server Buffer Overflow Coded by [email protected] http://www.see-security.com http://www.hackingdefined.com/exploits/Globalscape30.pdf EIP Overwrite root@muts ./globalscape-3.0-ftp.py + Evil GlobalFTP 3.0 Secure Server...

ArGoSoft FTP Server 1.4.2.8 - Denial of Service

/ ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address : argosoft.com the bug was found by a mate and reported to...

Winamp - Buffer Overflow In IN_CDDA.dll

======================================================================== = Winamp - Buffer Overflow In INCDDA.dll = = Vendor Update: = http://www.winamp.com/player/ = = Affected Software: = Winamp 5.05 only version tested = = Public disclosure on November 23, 2004...

pop_exp2.py

!/usr/bin/env python """ Exploit for an old BoF in YPOPS v0.6 discovered by Behrang Fouldai Coded as a PoC for defeating NoN-Exec stacks and stack protections like overflow guard etc. This exploit utilizes the 520 byte buffer in the TEB i.e is used for ANSI to Unicode String operations. The EIP i...

Mandrake Linux 8.2 - '/usr/mail' Local Overflow

!/usr/bin/perl Mandrake 8.2 /usr/mail local exploit Usage: perl d86mail.pl offset Then enter "." dot and press 'Enter' Example: satan@localhost my$ perl d86mail.pl eip: 0xbffffddd .enter Cc: too long to edit sh-2.05$ $shellcode = "\x31\xdb\x89\xd8\xb0\x17\xcd\x80"...

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow (1)

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a...

Netscape FastTrack Server 2.0.1a - GET Buffer Overflow

Netscape FastTrack Server 2.0.1a - GET Buffer Overflow // source: https://www.securityfocus.com/bid/908/info The version of Netscape FastTrack server that ships with UnixWare 7.1 is vulnerable to a remote buffer overlow. By default, the httpd listens on port 457 of the UnixWare host and serves...

norton.2000.txt

This was going to be w00giving 11 w00giving 10 will be posted within the next few days. Anyway, this allows EIP to be overwritten with 265+ bytes, which person who posted this vulnerability failed to mention or failed to notice. It's unclear if he labeled it as a DoS because he didn't realize it...