PHP Tidy库远程缓冲区溢出漏洞

BUGTRAQ ID: 24527 Tidy库用于改正HTML文档中的常见错误并生成格式编排良好的等价文档，还可以生成XHTML格式的文档。 Tidy库实现上存在缓冲区溢出漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档执行恶意指令。 PHP所使用的Tidy库中没有正确验证对tidyparsestring和tidyrepairstring函数的输入。如果用户向这些函数传送了超长参数的话，就可能触发缓冲区溢出，导致执行任意指令。 C. Reitzel TidyLib for PHP 050506 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本...

MoviePlay 4.76 .lst File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== MoviePlay 4.76 .lst File Local Buffer Overflow Exploit ====================================================== !/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit t...

ultra-noob.txt

/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

IE 6 / Ademco co. ltd. ATNBaseLoader100 Module Remote BoF Exploit

No description provided by source. !-- IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module ATNBaseLoader100.dll 5, 4, 0, 6 remote buffer overflow exploit / XP SP2 it version by rgod site: retrogod.altervista.org this activex is installed browsing some webcam pages try this google dork:...

Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow

'metasploit one, add a user 'sun' with pass 'tzu' shellcode =...

eudora71-overflow.txt

!/usr/bin/python Eudora 7.1 SMTP Response 0day Remote Buffer Overflow PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / XP SP2 Polish Shellcode type: Windows Execute Command calc.exe Note:.. This vulnerability can be exploited only if user will ignore warning about...

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow

Eudora 7.1 - SMTP ResponseRemote Remote Buffer Overflow !/usr/bin/python Eudora 7.1 SMTP Response 0day Remote Buffer Overflow PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / XP SP2 Polish Shellcode type: Windows Execute Command calc.exe Note:.. This vulnerability...

webdesproxy 0.0.1 (GET Request) Remote Buffer Overflow Exploit

No description provided by source. / webdesproxyv0.0.1: cygwin remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo ...

gimp2214-overflow.txt

/ :: Kristian Hermansen :: Date: 20070509 Description: Gimp 2.2.14 RAS vuln, thanks to Marsu. This one is universal download and exec using call esp in libgimpcolor-2.0-0.dll. Vulnerable: Gimp 2.2.14 Tested: Gimp 2.2.14 on Windows Vista, XP, 2000 Compile: gcc -o netsniper-gimpu netsniper-gimpu.c...

3proxy 0.5.3g (Windows x86) - proxy.c logurl() Remote Buffer Overflow

3proxy 0.5.3g Windows x86 - proxy.c logurl Remote Buffer Overflow / 3proxyv0.5.3g: win32 service remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy-win32.c -o x3proxy-win32 syntax: ./x3proxy-win32 -pr -h host sumus homepage/url: http://3proxy.ru/...

3proxy 0.5.3g (Windows x86) - 'proxy.c logurl()' Remote Buffer Overflow

/ 3proxyv0.5.3g: win32 service remote buffer overflow exploit. by: vade79/v9 [email protected] fakehalo/realhalo compile: gcc x3proxy-win32.c -o x3proxy-win32 syntax: ./x3proxy-win32 -pr -h host sumus homepage/url: http://3proxy.ru/ 3Proxy tiny free proxy server previously known as 3APA3A tiny...

irfanview399-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow Multiple Targets and port bind shell Old Target: Windows XP Sp2 FR New targets: Windows XP SP2 Portuguese Call ESP Addr Windows XP SP2 English Call ESP Addr Greetz: Ricardo Fiorelli, Marsu make this possible.. nice job!, Str0ke , Sekure.org guys! / inclu...

Microsoft Windows - Animated Cursor .ani Local Overflow

Microsoft Windows - Animated Cursor .ani Local Overflow / .ANI exploit tested on Windows XP SP2 - Portuguese Shellcode port bind 13579 JMP ESP Addr - ntdll.dll Greetz: Marsu, Devcode, Str0ke, Dave, Sekure.org guys, Sauna. Exploit coded listen sauna hits Featuring Luiz Zanardo's gigs "Minoide...

Microsoft Windows - Animated Cursor '.ani' Local Overflow

/ .ANI exploit tested on Windows XP SP2 - Portuguese Shellcode port bind 13579 JMP ESP Addr - ntdll.dll Greetz: Marsu, Devcode, Str0ke, Dave, Sekure.org guys, Sauna. Exploit coded listen sauna hits Featuring Luiz Zanardo's gigs "Minoide - \x52\x49\x46\x46\x00\x04\x00\x41" @...

IrfanView 3.99 .ANI File Local Buffer Overflow Exploit (multiple targets)

Exploit for unknown platform in category local exploits ========================================================================= IrfanView 3.99 .ANI File Local Buffer Overflow Exploit multiple targets ========================================================================= / IrfanView 3.99 .ANI...

irfanview-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

winamp512-overflow.txt

!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)

No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...

Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC ========================================================= !/usr/bin/env python print...

Private Wire Gateway Buffer Overflow

This exploits a buffer overflow in the ADMCREG.EXE used in the PrivateWire Online Registration Facility. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This file may only be distributed as part of the Metasploit...