PHP 4.x < 4.4.5, 5.x < 5.2.1 Heap Information Leak Vulnerability

PHP SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100603";...

Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference

This module exploits an out of bounds function table dereference in the SMB request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7 release candidates not RTM, and Windows 2008 Server prior to R2. Windows Vista without SP1 does not seem affected by this flaw. This...

MS09-067 Microsoft Excel Malformed FEATHEADER Record Vulnerability

This module exploits a vulnerability in the handling of the FEATHEADER record by Microsoft Excel. Revisions of Office XP and later prior to the release of the MS09-067 bulletin are vulnerable. When processing a FEATHEADER Shared Feature record, Microsoft used a data structure from the file to...

Deepburner pro 1.9.0.228 dbr file Buffer Overflow Exploit (Universal)

Exploit for unknown platform in category local exploits ===================================================================== Deepburner pro 1.9.0.228 dbr file Buffer Overflow Exploit Universal ===================================================================== / Deepburner pro 1.9.0.228 dbr fi...

php: exif_read_data crash on corrupted JPEG files

The exifreaddata function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service crash via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353...

Mini-Stream Buffer Overflow

!/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP English 12.27.2009 Author: Ron Henry -...

Mini-stream Ripper (Windows XP SP2SP3) - Local Overflow

Mini-stream Ripper Windows XP SP2SP3 - Local Overflow !/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP...

Mini-Stream Exploit for Windows XP SP2 and SP3

Exploit for unknown platform in category local exploits ============================================== Mini-Stream Exploit for Windows XP SP2 and SP3 ============================================== Title: Mini-Stream Exploit for Windows XP SP2 and SP3 CVE-ID: OSVDB-ID: Author: Ron Henry Published:...

Easy RM to MP3 2.7.3.700 - Local Buffer Overflow

!/usr/bin/python Exploit for against Easy RM to MP3 2.7.3.700 12.2.2009 Author: Ron Henry - [email protected] - dijital1 Version: Easy RM to MP3 2.7.3.700 Tested against WinXP SP3 - English outputfile = "astley.m3u" shellcode="A" 26071 Offset to EIP - Windows XP SP3 shellcode+="\x25\x96\xa0\x7c"...

Microsoft Excel Shared Feature Header Pointer Offset Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must open a malicious spreadsheet. The specific flaw exists in the handling of Shared Feature...

Mozilla Firefox 2.0.0.16 UTF-8 URL Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python FireFox 2.0.0.16 Windows XP SP3 x86 Remote Exploit Author: Dominic Chell [email protected] Exploits the UTF-8 URL overflow vulnerability described in CVE-2008-0016. As of September 2009 there are no public exploits for this vulnerability...

Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC

No description provided by source. / Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR file ,edit it with HEX EDITOR and...

Portable E.M Magic Morph 1.95b Buffer Overflow

/ Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR file ,edit it with HEX EDITOR and start counting from the start of t...

Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC

Exploit for unknown platform in category local exploits ================================================================== Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow PoC ================================================================== / Portable E.M Magic Morph 1.95b .MOR Fi...

Portable E.M Magic Morph 1.95b - .MOR File Stack Buffer Overflow

Portable E.M Magic Morph 1.95b - .MOR File Stack Buffer Overflow / Portable E.M Magic Morph 1.95b .MOR File Stack Buffer Overflow POC By fl0 fl0w "can't stop me/my time is now/your time is up/MY TIME IS NOW !!!!" / The EIP offset is at 312 bytes 0x138 HEX After you compile and create the .MOR fil...

Windows x64 Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 460 include Msf::Payload::Windows include Msf::Payload::Single includ...

ProjectButler 1.5.0 Remote File Inclusion

projectbutler - 1.5.0 offset RFI Vulnerability Author: cr4wl3r Contact: cr4wl3r4tlinuxmaildotorg Download: http://sourceforge.net/projects/projectbutler/files/projectbutler/1.5.0/ProjectButler.tar.gz Vuln : requireonce$offset."class.project.inc"; PoC :...

ProjectButler 1.5.0 (pda_projects.php offset) RFI Vulnerability

Exploit for unknown platform in category web applications =============================================================== ProjectButler 1.5.0 pdaprojects.php offset RFI Vulnerability =============================================================== projectbutler - 1.5.0 offset RFI Vulnerability...

Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit #2

Exploit for unknown platform in category local exploits ================================================================== Millenium MP3 Studio 1.0 .mpf File Local Stack Overflow Exploit 2 ================================================================== + Vulnerability : .mpf File Local Stack...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:147)

Security vulnerabilities has been identified and fixed in pidgin : Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these detail...