BlazeDVD Pro Player 6.1 - Stack Based Buffer Overflow Jump ESP

No description provided by source. Exploit-DB Note: XPSP3 - my $eip = pack'V',0x7c868667; jmp ESP on kernel32.dll Date: Tue Apr 8 2014 Vendor link: http://www.blazevideo.com/download.htmm Software Link: http://www.blazevideo.com/download.php?product=BlazeDVDPro App Version: 6.1 Tested on: Windows...

Winamp 5.572 - whatsnew.txt Local Buffer Overflow Exploit WinXP SP3 De

No description provided by source. Tested on: WinXP SP3 De !/usr/bin/perl Still learning, having some fun... Greetz to -Sid- Roadkill Jess Dawn Linki Special greetz do Debug, even i dont know you. Nice find man. Exploit has something around 70% chance of success. print \n\n; print Winamp 5.572...

VideoCharge Studio 2.12.3.685 - GetHttpResponse() MITM Remote Code Execution Exploit

No description provided by source. !/usr/bin/python Exploit Title: VideoCharge Studio v2.12.3.685 GetHttpResponse MITM Remote Code Execution Exploit SafeSEH/ASLR/DEP Bypass Version: v2.12.3.685 Date: 2014-02-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...

VLC Media Player < 0.9.6 .RT Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl VLC Media Player 0.9.6 .RT File Buffer Overflow Stack Based --------------------------------------------------------------- Exploit by SkD [email protected] This should work on a fully up-to-date Windows XP SP3. If you want it to work on your OS...

CA CAM log_security() Stack Buffer Overflow (Win32)

No description provided by source. $Id: camlogsecurity.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability

No description provided by source. Exploit Title: GSPlayer 1.83a Win32 Release Buffer Overflow Vulnerability Date: 2010/11/04 Author: moigai e-mail: [email protected] Software Link: http://www.vector.co.jp/download/file/win95/art/fh296344.html Version: 1.83a Win32 Release Tested on: Windows XP...

CoolPlayer Portable 2.19.1 - (m3u) Buffer Overflow Exploit

No description provided by source. CoolPlayer Portable 2.19.1 m3u Buffer Overflow exploit Credit To Goldm http://www.milw0rm.com/exploits/8489 I test it 12 times but the 13 is worked but i dont know maybe it work in first time for you By Stack chars = \x41 212 eip = \xED\x1E\x94\x7C ntdll.dll jmp...

PCMAN FTP 2.07 - Buffer Overflow Exploit

No description provided by source. Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place...

MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Buffer Overflow

No description provided by source. $Id: mdaemonworldclientform2raw.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

YahooPOPs <= 1.6 SMTP Port Buffer Overflow Exploit

No description provided by source. / YahooPOPS v1.6 and prior SMTP port buffer overflow exploit v0.1 Exploit code by class101 at DFind.kd-team.com Bind a shellcode to the port 101. Thanx to Behrang [email protected] for the bug discovery Thanx to HDMoore and Metasploit.com for their...

VUPlayer 2.49 - (.wax File) Local Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w Author : Houssamix Download : http://vuplayer.com/files/vuplayersetup.exe tested in windows pro Sp 2 french -- Viva Gazza -- Viva Palestine -- print ===================================================================== \n; print Author :...

Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)

Microsoft Internet Explorer 8 - Fixed Col Span ID Full ASLR + DEP + EMET 4.1.x Bypass MS12-037 function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var...

(0Day) SAP Sybase ESP esp_parse Connection.getErrors Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Connection.getErrors function in espserverlib.dll. By sending specific arguments ...

(0Day) SAP Sybase ESP esp_parse Connection.reset Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Connection.reset function in espserverlib.dll. By sending specific arguments to t...

(0Day) SAP Sybase ESP esp_parse Connection.getType Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Connection.getType function in espserverlib.dll. By sending specific arguments to...

(0Day) SAP Sybase ESP esp_parse ConnectionType.getXmlDescription Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the ConnectionType.getXmlDescription function in espparse.exe. By sending specific...

(0Day) SAP Sybase ESP esp_parse Connection.dispose Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Connection.dispose function in espserverlib.dll. By sending specific arguments to...

(0Day) SAP Sybase ESP esp_parse ConnectionType.getParamNames Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the ConnectionType.getParamNames function in espserverlib.dll. By sending specific...

(0Day) SAP Sybase ESP esp_parse ConnectionType.getName Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the ConnectionType.getName function in espserverlib.dll. By sending specific argument...

(0Day) SAP Sybase ESP esp_parse Connection.getError Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Sybase ESP. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Connection.getError function in espserverlib.dll. By sending specific arguments t...