VLC Media Player 0.8.6 (udp://) Format String Exploit PoC (ppc)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is just a vanilla format string exploit for OSX on ppc. We overwrite a saved return addy with our shellcode address...

VLC Media Player 0.8.6 (udp://) Format String Exploit PoC (ppc)

Exploit for macOS platform in category dos / poc =============================================================== VLC Media Player 0.8.6 udp:// Format String Exploit PoC ppc =============================================================== !/usr/bin/perl...

VideoLAN VLC Media Player 0.8.6 (x86) - udp: Format String

VideoLAN VLC Media Player 0.8.6 x86 - udp: Format String !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-x86.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This exploit will create a malicious .m3u file that will cause VLC Player for OSX to execute arbitrary code. $outfil...

VideoLAN VLC Media Player 0.8.6 (PPC) - 'udp://' Format String (PoC)

!/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is just a vanilla format string exploit for OSX on ppc. We overwrite a saved return addy with our shellcode address. This code currently overwrites the saved return add...

Georgia SoftWorks Secure Shell Server 7.1.3 - Multiple Remote Code Execution Vulnerabilities

source: https://www.securityfocus.com/bid/27103/info Georgia SoftWorks Secure Shell Server is prone to multiple remote code-execution vulnerabilities: - A format-string vulnerability - Two buffer-overflow vulnerabilities. Successfully exploiting these issues allows remote attackers to execute...

VideoLAN VLC Media Player 0.8.6 (x86) - 'udp://' Format String

!/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-x86.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This exploit will create a malicious .m3u file that will cause VLC Player for OSX to execute arbitrary code. $outfile = "pwnage.m3u"; $bindshell =...

VideoLAN VLC Media Player 0.8.6 (PPC) - udp: Format String (PoC)

VideoLAN VLC Media Player 0.8.6 PPC - udp: Format String PoC !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is just a vanilla format string exploit for OSX on ppc. We overwrite a saved return addy with our shellcode...

VLC Media Player 0.8.6 (udp://) Format String Exploit (x86)

Exploit for macOS platform in category local exploits =========================================================== VLC Media Player 0.8.6 udp:// Format String Exploit x86 =========================================================== !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-x86.pl...

Debian DSA-1242-1 : elog - several vulnerabilities

Several remote vulnerabilities have been discovered in elog, a web-based electronic logbook, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5063 Tilman Koschnick discovered that log entry editing i...

CVE-2005-4817

The CVE-2005-4817 issue affects Textbased MSN Client (TMSNC) up to version before 0.2.5. It is a format-string vulnerability in ui.c that allows an attacker to cause a denial of service and possibly execute arbitrary code via injection into the wprintw function. Exploitation details are not provi...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

DEBIAN-CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name CN field of an SSL certificate associated with an https URL...

CVE-2006-6772

CVE-2006-6772 is a format-string vulnerability in w3m’s inputAnswer function (file.c) that affects modes -dump/-backend; an attacker could craft a certificate CN in an HTTPS URL to execute arbitrary code. The issue is fixed in later w3m builds (e.g., w3m-0.5.3+git20180125-1.14 and related openSUS...

[SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1242-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 27th, 2006 http://www.debian.org/security/faq -...

CVE-2006-6751

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service application crash via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...