Berlios GPSD 2.7 - Remote Format String (Metasploit)

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...

OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)

OmniWeb 5.5.1 - JavaScript alert Remote Format String PoC MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length milw0rm.com 2007-01-07...

OmniWeb 5.5.1 Javascript alert() Remote Format String PoC

No description provided by source. !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd" html head titleMOAB-07-01-2007/title script / LMH / function boom var str = 'A'; while str.length = 32 str+=str; str = str + '%n%n%n%n%n%n'; alertstr; /script /head...

OmniWeb 5.5.1 Javascript alert() Remote Format String PoC

Exploit for macOS platform in category dos / poc ========================================================= OmniWeb 5.5.1 Javascript alert Remote Format String PoC ========================================================= MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length...

OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)

MOAB-07-01-2007 / LMH / function boom var str = 'A'; while str.length milw0rm.com 2007-01-07...

DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'

DMA2007-0104a - 'iLife iPhoto Photocasing Format String Vulnerability' Author: Kevin Finisterre Vendors: http://www.apple.com Product: 'iLife 06 ?' References: http://www.digitalmunition.com/DMA2007-0104a.txt http://www.apple.com/ilife/iphoto/features/photocasting.html...

CVE-2007-0051

Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...

Format string

Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...

CVE-2007-0051

The CVE affects Apple iPhoto up to version 6.0.5 (and older than 6.0.6). A format-string vulnerability in the title of an iPhoto photocast RSS feed enables remote code execution. Underlying cause: crafted input with format specifiers is processed by iPhoto, leading to arbitrary code execution. Im...

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

iLife iPhoto Photocast - XML Title Remote Format String PoC !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 +...

iLife iPhoto Photocast (XML title) Remote Format String PoC

Exploit for macOS platform in category dos / poc =========================================================== iLife iPhoto Photocast XML title Remote Format String PoC =========================================================== !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for...

VLC Media Player畸形“udp://”URI格式串处理漏洞

VLC Media Player是一款免费的媒体释放器。 VLC Media Player在处理畸形的URI串时存在漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 VLC Media Player在处理“udp://”开头的URI串时存在格式串处理漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页或打开恶意M3U文件控制用户机器。 VideoLAN VLC Media Player 0.x 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 不要打开来源不可信任的M3U文件。 厂商补丁： VideoLAN --------...

VLCMediaSlayer-ppc.pl.txt

!/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is just a vanilla format string exploit for OSX on ppc. We overwrite a saved return addy with our shellcode address. This code currently overwrites the saved return add...

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

!/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 + "%x.%n.%n.%n.%n.%n\r\n" + "\r\n" + "In Gruber We Trust\r\n" +...

USN-399-1: w3m vulnerabilities

A format string vulnerability was discovered in w3m. If a user were tricked into visiting an HTTPS URL protected by a specially crafted SSL certificate, an attacker could execute arbitrary code with user privileges...

DEBIAN-CVE-2007-0017

Multiple format string vulnerabilities in 1 the cdiologhandler function in modules/access/cdda/access.c in the CDDA libcddaplugin plugin, and the 2 cdiologhandler and 3 vcdloghandler functions in modules/access/vcdx/access.c in the VCDX libvcdxplugin plugin, in VideoLAN VLC 0.7.0 through 0.8.6...

CVE-2007-0017

Multiple format string vulnerabilities in 1 the cdiologhandler function in modules/access/cdda/access.c in the CDDA libcddaplugin plugin, and the 2 cdiologhandler and 3 vcdloghandler functions in modules/access/vcdx/access.c in the VCDX libvcdxplugin plugin, in VideoLAN VLC 0.7.0 through 0.8.6...

CVE-2007-0017

Multiple format string vulnerabilities in 1 the cdiologhandler function in modules/access/cdda/access.c in the CDDA libcddaplugin plugin, and the 2 cdiologhandler and 3 vcdloghandler functions in modules/access/vcdx/access.c in the VCDX libvcdxplugin plugin, in VideoLAN VLC 0.7.0 through 0.8.6...

Format string

Multiple format string vulnerabilities in 1 the cdiologhandler function in modules/access/cdda/access.c in the CDDA libcddaplugin plugin, and the 2 cdiologhandler and 3 vcdloghandler functions in modules/access/vcdx/access.c in the VCDX libvcdxplugin plugin, in VideoLAN VLC 0.7.0 through 0.8.6...

CVE-2007-0017

Multiple format string vulnerabilities in 1 the cdiologhandler function in modules/access/cdda/access.c in the CDDA libcddaplugin plugin, and the 2 cdiologhandler and 3 vcdloghandler functions in modules/access/vcdx/access.c in the VCDX libvcdxplugin plugin, in VideoLAN VLC 0.7.0 through 0.8.6...