HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow

$Id: hploadrunneraddfolder.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Alt-N SecurityGateway username Buffer Overflow

$Id: altnsecuritygateway.rb 8010 2009-12-28 20:38:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'SafeNet...

MS03-046 Exchange 2000 XEXCH50 Heap Overflow

$Id: ms03046exchange2000xexch50.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe Illustrator CS4 v14.0.0

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Adobe Illustrator...

Adobe U3D CLODProgressiveMeshDeclaration Array Overrun

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Adobe FlateDecode Stream Predictor 02 Integer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'zlib' class Metasploit3...

Zabbix Agent net.tcp.listen Command Injection

$Id: zabbixagentexec.rb 7854 2009-12-14 20:09:46Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTML Help Worksho...

Apple OS X Software Update Command Execution

$Id: softwareupdate.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

!/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally discovered by prodigy exec calc.exe...

DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)

DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow...

Media Jukebox 8.0.400 - Local Buffer Overflow (SEH) (Metasploit)

$Id: mediajukebox.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)

$Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

HP OpenView Network Node Manager ovalarm.exe Accept-Language buffer overflow

Added: 12/22/2009 CVE: CVE-2009-4179 BID: 37261 OSVDB: 60930 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow in the ovalarm.exe CGI program allows command execution when an attacker sends an HTTP request to this...

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express Remote Client Agent service. By sending a "dicuGetIdentify" request packet containing a long NodeName parameter, an attacker can execute arbitrary code. NOTE: this exploit first connects to the CAD service to...

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express CAD Service. By sending a "ping" packet containing a long string, an attacker can execute arbitrary code. NOTE: the dsmcad.exe service must be in a particular state CadWaitingStatus = 1 in order for the...

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities

Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...

ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflow

This module exploits a stack-based buffer overflow in ProShow Gold v4.0.2549. An attacker must send the file to victim and the victim must open the file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...