976 matches found
Chasys Media Player 1.1 (.mid) - Local Buffer Overflow
No description provided by source. !/usr/bin/perl Chasys Media Player 1.1 .mid Local Buffer Overflow Exploit Coded by: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in the...
PHP <= 4.4.3 / 5.1.4 (objIndex) Local Buffer Overflow Exploit PoC
No description provided by source. ?php / Author: Heintz Date: 4-th august 2006 Greets: Waraxe from www.waraxe.us All buds at www.plain-text.info Torufoorum ext/standard/scanf.c line 887 --- if numVars current = argsobjIndex++; --- objIndex points past the end of array in other format cases too...
Mini-stream Ripper 3.0.1.1 (.smi) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/python Tested on: win XPsp3 webpage: d3b4g.info EAX 00E1C880 EDX 00000001 EBX 41414141------------------------------------------------ ESP 000D198C EBP 00E1C880 controle over registers ESI 41414141------------------------------------------------ EDI...
Elecard MPEG Player 5.7 - Local Buffer Overflow PoC (SEH)
No description provided by source. !/usr/bin/python Elecard MPEG Player 5.7 Local Buffer Overflow PoC SEH Vendor: Elecard Group Product web page: http://www.elecard.com Affected version: 5.7.100629 Summary: Elecard MPEG Player is a high-quality full-featured multimedia player supporting the newes...
Nethack 3 Local Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6806/info By passing an overly large string when invoking nethack, it is possible to corrupt memory. By exploiting this issue it may be possible for an attacker to overwrite values in sensitive areas of memory, resulting ...
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
No description provided by source. Exploit Title : Mini-stream RM-MP3 Converter? V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email :...
HP-UX 11 Software Distributor Lang Environment Variable Local Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8986/info HP has reported that some Software Distributor SD utilities are prone to a locally exploitable buffer-overrun vulnerability. Affected utilities include swinstall1M and swverify1M. / Program : xhpux11isw.c Use :...
Easy Music Player 1.0.0.2 - (wav) Universal Local Buffer Exploit (SEH)
No description provided by source. !/usr/bin/perl by ahwak2000 email: 0.watw.cn Easy Music Player 1.0.0.2 wav Universal Local Buffer Exploit SEH http://www.otbcode.com/downloads/easymusicsetup.exe my $shellcode= \xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49...
Sun Solaris 10 Traceroute Multiple Local Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive data supplied through command line arguments...
Exploit Easy RM to MP3 2.7.3.700 (.m3u , .pls , .smi , .wpl , .wax , .wvx , .ram)
No description provided by source. Exploit Title: Easy RM to MP3 2.7.3.700 Local Buffer Overflow .m3u , .pls , .smi , .wpl , .wax , .wvx , .ram Date: 4 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.exploit-db.com/application/10642/ Version: 2.7.3.700 Tested on: Windows XP SP 1 CVE : N...
CoolPlayer 2.19 - (Skin File) Local Buffer Overflow Exploit (py)
No description provided by source. CoolPlayer Skin Buffer Overflow maybe all versions are affected : By:Encrypt3d.M!nd Orginal Exploit: by r0ut3r http://www.milw0rm.com/exploits/7536 i've test it on my boxwinxp sp3 and didn't work so i've re-wrote the exploit and this is workin tested: Windows xp...
Easy Music Player 1.0.0.2 - (wav) Universal Local Buffer Exploit (SEH) (3)
No description provided by source. !/usr/bin/perl by hack4love [email protected] first http://www.milw0rm.com/exploits/9412 Easy Music Player 1.0.0.2 wav Universal Local Buffer Exploit SEH http://www.otbcode.com/downloads/easymusicsetup.exe my $bof=\x41 x 4132; my $nsh=\xEB\x06\x90\x90; my...
Apache <= 1.3.31 mod_include Local Buffer Overflow Exploit
No description provided by source. / local exploit for modinclude of apache 1.3.x written by xCrZx /18.10.2004/ bug found by xCrZx /18.10.2004/ Successfully tested on apache 1.3.31 under Linux RH9.0Shrike / / Technical Details: there is an overflow in gettag function: static char gettagpool p, FI...
CrystalPlayer 1.98 - (.mls) Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon...
Destiny Media Player 1.61 - (lst File) Local Buffer Overflow Exploit
No description provided by source. Destiny Media Player 1.61 lst File Local Buffer overflow Exploit By:Encrypt3d.M!nd i was so stupid when i wrote the poc coz i didn't realize somethings :p well this is workin exploit tested on windows xp sp3 don't double click the file,import it from the program...
Winamp 5.572 - Local BoF Exploit (EIP & SEH DEP Bypass)
No description provided by source. !/usr/bin/python Title: Winamp v5.572 local BOF exploit EIP & SEH DEP Bypass Author: Rocco Calvi aka TecR0c - http://tecninja.net/blog | http://twitter.com/TecR0c Found BY: Debug Date: June 18th, 2010 Platform: Windows XP sp3 En Greetz to: Corelan Security Team...
PHP <= 4.4.3 / 5.1.4 (sscanf) Local Buffer Overflow Exploit
No description provided by source. ? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
MP3Info 0.8.5a - Local Buffer Overflow SEH Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Teste...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
I saw the notice for this CVE today but there was no known published expoits so I figured I'd put together this quick POC. Note, all app modules for the tested version were compiled with safeSEH so my use of an OS module may require adjustment of the offsets. There also appears to be several bad...