Microsoft Internet Explorer - createTextRang Remote (Metasploit)

Microsoft Internet Explorer - createTextRang Remote Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Microsoft Internet Explorer - createTextRang Remote Code Execution

Microsoft Internet Explorer - createTextRang Remote Code Execution shellcode = unesc...

Microsoft Internet Explorer 6 - mshtml.dll checkbox Crash

Microsoft Internet Explorer 6 - mshtml.dll checkbox Crash r=document.getElementById"c"; a=r.createTextRange; milw0rm.com 2006-03-22...

[Full-disclosure] IE crash

I can't find any info on this delicious IE bug, but it seems to be publicly known: input type="checkbox" id='c' script r=document.getElementById"c"; a=r.createTextRange; /script It will badly access a virtual? pointer table, making EIP to jump at a random address. This has various effects on the...

zoo contains exploitable buffer overflows

Topic: zoo contains exploitable buffer overflows Announced: 2006-02-22 Product: zoo Category: Applications/Archiving Impact: Remote code execution Credits: Jean-Sbastien Guay-Leroux I. BACKGROUND zoo is a file archiving utility for maintaining collections of files. It uses Lempel-Ziv compression ...

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...

IMail IMAP4D Delete Overflow

This module exploits a buffer overflow in the 'DELETE' command of the IMail IMAP4D service. This vulnerability can only be exploited with a valid username and password. This flaw was patched in version 8.14. This module requires Metasploit: https://metasploit.com/download Current source:...

pwnzilla.txt

/ SSSSSSS, SSSSSSS' PwnZilla 5 - One sploit fits all. FireFox optimized iSY iS; .sS Exploit for IDN host name heap buffer overrun in .SSSSSSS .sS Mozilla browsers FireFox, Mozilla and Netscape iS; .sS Copyright C 2003-2005 by Berend-Jan Wever. .SS sSSSSSSP Official release:...

WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== WinZIP include define NOP 0x90 void main // create crafted command line char tmpfile = "c:\wzs45.tmp"; char winzippath = "C:\Program Files\WINZIP\winzip32.exe"; char zipandmailpar =...

GlobalScape Secure FTP Server 3.0 Buffer Overflow Exploit

No description provided by source. !/usr/bin/python GlobalScape Secure FTP Server Buffer Overflow Coded by [email protected] http://www.see-security.com http://www.hackingdefined.com/exploits/Globalscape30.pdf EIP Overwrite root@muts ./globalscape-3.0-ftp.py + Evil GlobalFTP 3.0 Secure Server...

ERNW Security Advisory 01/2005

ERNW Security Advisory 01-2005 Buffer Overflow in PMSoftware's Simple Web Server Author: Michael Thumann mthumannaternw.de 1. Summary: Simple Web Server doesn't do proper bounds checking handling normal GET requests. Sending an overlong page or script name, it causes an buffer overflow and an...

[Full-disclosure] PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

ArGoSoft FTP Server 1.4.2.8 - Denial of Service

/ ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address : argosoft.com the bug was found by a mate and reported to...

Sentinel License Manager lservnt Service Remote Buffer Overflow

The remote host is running a version of Sentinel License Manager that is subject to remote buffer overflows. By sending 3000 bytes or more to the UDP port on which it listens 5093 by default, a remote attacker can crash the LServnt.exe service, overwrite the EIP register, and possibly execute...

SafeNet Sentinel License Manager vulnerable to buffer overflow

Overview SafeNet Sentinel License Manager contains a buffer overflow vulnerability, which may allow a remote unauthenticated attacker to execute arbitrary code on the server. Description SafeNet Sentinel License Manager LM is a software-based license management application. It is reported that th...

[Full-Disclosure] unace-1.2b multiple buffer overflows and directory traversal bugs

I have found multiple security vulnerabilities in unace-1.2b. It is the last free version. The later versions are just binaries for the x86 processor, which is unhelpful if you want to use free software or if your computer has a non-x86 processor. There are two buffer overflows when extracting,...

Winamp - Buffer Overflow In IN_CDDA.dll

======================================================================== = Winamp - Buffer Overflow In INCDDA.dll = = Vendor Update: = http://www.winamp.com/player/ = = Affected Software: = Winamp 5.05 only version tested = = Public disclosure on November 23, 2004...

pop_exp2.py

!/usr/bin/env python """ Exploit for an old BoF in YPOPS v0.6 discovered by Behrang Fouldai Coded as a PoC for defeating NoN-Exec stacks and stack protections like overflow guard etc. This exploit utilizes the 520 byte buffer in the TEB i.e is used for ANSI to Unicode String operations. The EIP i...

[Full-Disclosure] SoX buffer overflows when handling .WAV files

SoX buffer overflows when handling .WAV files I have found two buffer overflows in SoX. They occur when the sox or play commands handle malicious .WAV files. The overflows have the identifier CAN-2004-0557. Versions 12.17.4, 12.17.3 and 12.17.2 are vulnerable to these overflows. Vulnerable versio...

Medal of Honor Remote Buffer Overflow Vulnerability

Exploit for unknown platform in category dos / poc =================================================== Medal of Honor Remote Buffer Overflow Vulnerability =================================================== / by Luigi Auriemma / include include include ifdef WIN32 include include include include...