Cheese Tracker 0.9.9 - Local Buffer Overflow

Cheese Tracker 0.9.9 - Local Buffer Overflow / by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ +...

Cheese Tracker 0.9.9 - Local Buffer Overflow

/ by Luigi Auriemma / include include include include define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW define BOFSZ JUNKSZ + OVERFLOW - CPOS define myzerox memsetx, 0,...

Cheese Tracker <= 0.9.9 Local Buffer Overflow Exploit PoC

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include stdint.h include string.h define VER "0.1" define CPOS 243 // reader.getfilepos-pcpos define JUNKSZ 500 + CPOS // Uint8 junkbuster500 define OVERFLOW 740 // overflow define BOFSZNUM JUNKSZ + OVERFLOW...

Microsoft Word 2000/2003 Hlink Local Buffer Overflow Exploit PoC

No description provided by source. !/bin/perl Microsoft Word hlink 0-day by SYS 49152 this POC works only with: win 2ksp4 ENG + word 2000/XP all versions. win XP ENG sp1/sp2 + word XP 2002 SP3. Word 2003 is not vulnerable. bindshell on port 49152 hey kids.. I hope you know how to use winzip :- to...

Microsoft Excel 2003 (Italian) - Hlink Local Buffer Overflow

Microsoft Excel 2003 Italian - Hlink Local Buffer Overflow !perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Giuseppe Gottardi aka oveRet [email protected] Note: This exploit was originaly written by Manuel Santamarina Suarez, but it was working by clicking on the...

Microsoft Excel 2000/2003 (French) - Hlink Local Buffer Overflow

/ -/\NSRocket/- presents Microsoft Excel 2000 and 2003 exploit for WinXP SP2 french with shellcode source integrated Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed Excel document is opened. The issue is due to an error in Excel while...

Microsoft Excel 2003 (Italian) - Hlink Local Buffer Overflow

!perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Giuseppe Gottardi aka oveRet [email protected] Note: This exploit was originaly written by Manuel Santamarina Suarez, but it was working by clicking on the link and then on the "Yes" button. In this version of explo...

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft...

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

/ Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process to run arbitrary code. / include include const char...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit (c code)

Exploit for linux platform in category local exploits ========================================================== Xmame 0.102 -lang Local Buffer Overflow Exploit c code ========================================================== / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit (c code)

No description provided by source. / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix [email protected] 0x11 @EFNET icq : 234263 0x11.org Advisory : http://kerneltrap.org/node/6055 e.g: Qnix ./exploit /usr/games/bin/xmame.x11 Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qn...

Xmame 0.102 - lang Local Buffer Overflow (C)

Xmame 0.102 - lang Local Buffer Overflow C / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix [email protected] 0x11 @EFNET icq : 234263 0x11.org Advisory : http://kerneltrap.org/node/6055 e.g: Qnix ./exploit /usr/games/bin/xmame.x11 Xmame 0.102 -lang Local Buffer Overflow Exploit Cod...

Xmame 0.102 - -lang Local Buffer Overflow

Xmame 0.102 - -lang Local Buffer Overflow !/usr/bin/ruby One of the PoC code for xmame "-lang" options. Advisory is base on : http://kerneltrap.org/node/6055 by xwings at mysec dot org url : http://www.mysec.org , new website Tested on : Linux debian24 2.4.27-2-386 1 Mon May 16 16:47:51 JST 2005...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ================================================= Xmame 0.102 -lang Local Buffer Overflow Exploit ================================================= !/usr/bin/ruby One of the PoC code for xmame "-lang" options. Advisory is base on :...

PHP 4.4.0 - mysql_connect function Local Buffer Overflow

PHP 4.4.0 - mysqlconnect function Local Buffer Overflow ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this...

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...

WinRAR 3.30 - Filename Local Buffer Overflow (2)

WinRAR 3.30 - Filename Local Buffer Overflow 2 / IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx to Lo...

dBpowerAMPv11.5.txt

dBpowerAMP Music Converter v11.5 and priors Local Buffer Overflow Issue Original: http://secubox.shadock.net/dBpowerAMPMusicConverterv11.5LocalBufferOverflowIssue.html VULNERABLE PRODUCT ----------------------------------- Software: dBpowerAMP Music Converter Corporation: Illustrate Release: 11.5...

QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)

Exploit for QNX platform in category local exploits ============================================================ QNX RTOS 6.3.0 phgrafx Local Buffer Overflow Exploit x86 ============================================================ / email protected c 2005, all rights reserved. sample exploit for...

Apache <= 1.3.33 htpasswd local overflow

The remote host appears to be running Apache 1.3.33 or older. There is a local buffer overflow in the 'htpasswd' command in these versions that may allow a local user to gain elevated privileges if 'htpasswd' is run setuid or a remote user to run arbitrary commands remotely if the script is...