CVE-2011-2757

creationtimestamp| type| source ---|---|--- 2011-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17442 2011-06-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17437 2018-05-29 15:50:33+00:00| seen|...

Wireshark packet-dect.c Stack Buffer Overflow

This module exploits a stack buffer overflow in Wireshark use exploit/windows/misc/wireshark/packetdect msf undefinedpacketdect show actions ...actions... msf undefinedpacketdect set ACTION msf undefinedpacketdect show options ...show and set options... msf undefinedpacketdect run This module...

ManageEngine Applications Manager Authenticated Code Execution

This module logs into the Manage Engine Applications Manager to upload a payload to the file system and a batch script that executes the payload. Module Options msf use exploit/windows/http/manageengine/appsmngr msf undefinedappsmngr show actions ...actions... msf undefinedappsmngr set ACTION msf...

Foxit PDF Reader 4.2 Javascript File Write

This module exploits an unsafe Javascript API implemented in Foxit PDF Reader version 4.2. The createDataObject Javascript API function allows for writing arbitrary files to the file system. This issue was fixed in version 4.3.1.0218. Note: This exploit uses the All Users directory currently, whi...

Microsoft IIS FTP Server Encoded Response Overflow Trigger

This module triggers a heap overflow when processing a specially crafted FTP request containing Telnet IAC 0xff bytes. When constructing the response, the Microsoft IIS FTP Service overflows the heap buffer with 0xff bytes. This issue can be triggered pre-auth and may in fact be exploitable for...

FreeNAS exec_raw.php Arbitrary Command Execution

This module exploits an arbitrary command execution flaw in FreeNAS 0.7.2 use exploit/multi/http/freenas/execraw msf undefinedexecraw show actions ...actions... msf undefinedexecraw set ACTION msf undefinedexecraw show options ...show and set options... msf undefinedexecraw run This module requir...

DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.1.8.10. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/scada/realwin/scpcinitialize msf...

FTPShell 5.1 Stack Buffer Overflow

This module exploits a stack buffer overflow in FTPShell 5.1. The overflow gets triggered when the ftp client tries to process an overly long response to a PWD command. This will overwrite the saved EIP and structured exception handler. Module Options msf use exploit/windows/ftp/ftpshell51/pwdrep...

Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module

Exploit for windows platform in category remote exploits ================================================================== Digital Music Pad Version 8.2.3.3.4 SEH overflow Metasploit Module ================================================================== Digital Music Pad Version 8.2.3.3.4 SEH...

Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

No description provided by source. Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CV...

Integard Pro 2.2.0.9026 (Win7 ROP-Code Metasploit Module)

Exploit for windows platform in category remote exploits ========================================================= Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module ========================================================= Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Modu...

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code (Metasploit)

Integard Pro 2.2.0.9026 - Windows 7 ROP-Code Metasploit Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CVE : - class Metasploit3 'Race River...

WebDAV Application DLL Hijacker

This module presents a directory of file extensions that can lead to code execution when opened from the share. The default EXTENSIONS option must be configured to specify a vulnerable application type. Module Options msf use exploit/windows/browser/webdav/dllhijacker msf undefineddllhijacker sho...

A-PDF WAV to MP3 v1.0.0 Buffer Overflow

This module exploits a buffer overflow in A-PDF WAV to MP3 v1.0.0. When the application is used to import a specially crafted m3u file, a buffer overflow occurs allowing arbitrary code execution. Module Options msf use exploit/windows/fileformat/a/pdfwavtomp3 msf undefinedpdfwavtomp3 show actions...

JBoss Seam 2 Remote Command Execution

JBoss Seam 2 jboss-seam2, as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language EL expressions, which allows remote attackers to execute arbitrary code via a crafted URL. This modules also has been tested...

Microsoft SQL Server Interesting Data Finder

This module will search the specified MSSQL server for 'interesting' columns and data. This module has been tested against the latest SQL Server 2019 docker container image 22/04/2021. This module requires Metasploit: https://metasploit.com/download Current source:...

LiteSpeed Source Code Disclosure/Download

This module exploits a source code disclosure/download vulnerability in versions 4.0.14 and prior of LiteSpeed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LiteSpeed Source Code...

Xftp FTP Client 3.0 PWD Remote Buffer Overflow

This module exploits a buffer overflow in the Xftp 3.0 FTP client that is triggered through an excessively long PWD message. Module Options msf use exploit/windows/ftp/xftp/clientpwd msf undefinedclientpwd show actions ...actions... msf undefinedclientpwd set ACTION msf undefinedclientpwd show...

Generic x86 Tight Loop

Generate a tight loop in the target process This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 2 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo, 'Name' = 'Generi...

AjaXplorer checkInstall.php Remote Command Execution

This module exploits an arbitrary command execution vulnerability in the AjaXplorer 'checkInstall.php' script. All versions of AjaXplorer prior to 2.6 are vulnerable. Module Options msf use exploit/multi/http/ajaxplorer/checkinstallexec msf undefinedcheckinstallexec show actions ...actions... msf...