QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow

QuickTime Player 7.3.1.70 - RTSP Remote Buffer Overflow Quicktime Player 7.3.1.70 rtsp Remote Buffer Overflow Exploit PoC https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4906.zip 2008-quicktimebof.zip milw0rm.com 2008-01-14...

Libnemesi 0.6.4-rc1 - Multiple Remote Buffer Overflow Vulnerabilities

Libnemesi 0.6.4-rc1 - Multiple Remote Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27048/info Libnemesi is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input. Attackers can exploit these issues...

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow !/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni...

Easy File Sharing Web Server 1.3x4.5 - Directory Traversal Multiple Information Disclosure Vulnerabilities

Easy File Sharing Web Server 1.3x4.5 - Directory Traversal Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/26771/info Easy File Sharing Web Server is prone to a directory-traversal and multiple information-disclosure vulnerabilities. Successfully exploiti...

Apple QuickTime 7.3 RTSP Response Universal Exploit (Vista / XP)

No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response Vista / XPSP2 Universal Bug discovered by Krystian Kloskowski h07 [email protected] Edited by muts - offensive-security.com http://www.offensive-security.com Tested on XP SP2 and Vista EN QuickTime/7.3...

I Hear U 0.5.6 - Multiple Remote Denial of Service Vulnerabilities

I Hear U 0.5.6 - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/26516/info Multiple denial-of-service vulnerabilities affect I Hear U because the application fails to handle specially crafted packets. An attacker may leverage these issues to cause a...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...

IBM Tivoli Storage Manager 5.3 - Express CAD Service Buffer Overflow

!/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com http://www.offensive-security.com/0day/dsmcad.py.txt bt ./dsmcad....

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit ============================================================== !/usr/bin/python IBM Tivoli Storage Manager Express...

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMT...

Mercury/32 Mail Server 3.32 < 4.51 - SMTP EIP Overwrite

/ Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMTP Pre-Auth EIP overwrite exploit Exploit date :...

IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py...

IBM Tivoli Provisioning Manager - Remote Overflow (Egghunter)

!/usr/bin/python IBM Tivoli Provisioning Manager PRE AUTH Remote Exploit http://dvlabs.tippingpoint.com/advisory/TPTI-07-05 Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com/0day/ibm-ti-pro.py Notes: Egghunter can take upto 5...

ProFTPd 1.3.01.3.0a - mod_ctrls exec-shield Local Overflow

ProFTPd 1.3.01.3.0a - modctrls exec-shield Local Overflow ProFTPD 1.3.0/1.3.0a modctrls Local Overflow Exploit exec-shield https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3730.tgz 04132007-pr0ftpdmodctrls.tgz milw0rm.com 2007-04-13...

Microsoft Word 2007 - Multiple Vulnerabilities

Mati Aharoni muts .@. offensive-security.com http://www.offensive-security.com My 7 line python fuzzer found several file format bugs in 3 hours. Quite alarming. No deep analysis was done, I leave that to the community. These are some of the results: file789-1.doc - Unspecified Overflow in word...

Microsoft Windows - Animated Cursor .ani Universal Generator

Microsoft Windows - Animated Cursor .ani Universal Generator -------------------------------------------------------------------------------- Info: .ANI RIFF Cursors 2007 universal exploit generator Tested on MS Internet Explorer 6.x-7.x, Windows XP SP2, Windows Vista Author: Yag Kohha 10xnGr33tz...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you...

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow

Microsoft Windows XPVista - Animated Cursor .ani Remote Overflow ..:: jamikazu presents ::.. Windows Animated Cursor Handling Exploit 0day Works on fully patched Windows Vista I think it is first real remote code execution exploit on vista = Tested on: Windows Vista Enterprise Version 6.0 Build...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

Exploit for unknown platform in category remote exploits =================================================== IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit =================================================== !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windo...

IBM Lotus Domino Server 6.5 - Remote Overflow

IBM Lotus Domino Server 6.5 - Remote Overflow !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton...