SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow

!/usr/bin/perl Remote Buffer Overflow in sipXtapi bad char 0x00 0x09 0x0a 0x0d 0x20 use IO::Socket; use strict; print "\n\n"; print "sipXtapi original Exploit by Michael Thumann added a real shellcode by acaro\n\n"; print "tested on sipXphone 2.6.0.27 read the code for ret address\n\n"; if not...

GnuPG 1.4/1.9 - Parse_Comment Remote Buffer Overflow

source: https://www.securityfocus.com/bid/19110/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote attackers to execute arbitrary machin...

GnuPG 1.41.9 - Parse_Comment Remote Buffer Overflow

GnuPG 1.41.9 - ParseComment Remote Buffer Overflow source: https://www.securityfocus.com/bid/19110/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may...

Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (2)

!/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit 05/23/2006 This exploit takes advantage of a stack based overflow. Once the stack corruption has occured it is possible to overwrite a pointer which is later used for a memcpy this gives us a write anything anywhere condition similar to a forma...

Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (2)

Exploit for multiple platform in category remote exploits ============================================================ Cyrus IMAPD 2.3.2 pop3d Remote Buffer Overflow Exploit 2 ============================================================ !/usr/bin/ruby cyrus-imapd pop3d exploit by bannedit...

FileCOPA FTP Server <= 1.01 (LIST) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w bad char 0x00 0x0a tested on win00 SP4 English on filecopa ftp server 6/4/2006 version use Net::FTP; $target = $ARGV0 || die "usage:$0 target port"; my $user = "test"; my $pass = "test"; $shellcode =...

SIPfoundry sipXtapi - 'CSeq' Remote Buffer Overflow (PoC)

!/usr/bin/perl PoC Exploit By [email protected] Remote Buffer Overflow in sipXtapi use IO::Socket; use strict; print "sipXtapi Exploit by Michael Thumann \n\n"; if not $ARGV0 print "Usage: sipx.pl \n"; exit; $target=$ARGV0; my $source ="127.0.0.1"; my $targetport = 5060; my $user ="bad"; my...

AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities

// source: https://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input before copying it into insufficiently sized memory buffers. These...

Gentoo-Specific MPG123 - URI Remote Buffer Overflow

source: https://www.securityfocus.com/bid/18794/info The mpg123 application is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote attackers to execute...

mutt -- Remote Buffer Overflow Vulnerability

SecurityFocus reports: Mutt is prone to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote attackers to execute arbitrary machin...

CesarFTP 0.99g - MKD Remote Buffer Overflow (Metasploit) (1)

CesarFTP 0.99g - MKD Remote Buffer Overflow Metasploit 1 ---ORIGINAL CREDITS TO h07 FOR FINDING THIS VULN--- Ported to metasploit by c0rrupt f34r.us package Msf::Exploit::cesarftpmkd; use base "Msf::Exploit"; use strict; use Pex::Text; my $advanced = ; my $info = 'Name' = 'CesarFTP 0.99g Buffer...

Microsoft Windows TCP/IP Protocol Driver Remote Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote buffer-overflow vulnerability. The vulnerability arises in the Microsoft Windows TCP/IP protocol driver when IP Source Routing has been enabled. A remote attacker may trigger a denial-of-service condition or may execute arbitrary code, leading to...

CesarFTP 0.99g - MKD Remote Buffer Overflow

CesarFTP 0.99g - MKD Remote Buffer Overflow !/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe...

CesarFTP 0.99g (MKD) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe metasploit.com...

CesarFTP 0.99g - 'MKD' Remote Buffer Overflow

!/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe "\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"...

FreeType - '.TTF' File Remote Buffer Overflow

source: https://www.securityfocus.com/bid/18326/info FreeType is prone to a buffer-overflow vulnerability. This issue is due to an integer-underflow that results in a buffer being overrun with attacker-supplied data. This issue allows remote attackers to execute arbitrary machine code in the...

QBik WinGate WWW Proxy Server 6.1.1.1077 - POST Remote Buffer Overflow

QBik WinGate WWW Proxy Server 6.1.1.1077 - POST Remote Buffer Overflow Proof of concept not for "in the wild" kiddies QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 german by kcope in 2006 use IO::Socket; if $ARGV0 eq "" print "param1 = remote host"; exit; win32bind - EXITFUNC=seh...

QBik WinGate WWW Proxy Server 6.1.1.1077 - 'POST' Remote Buffer Overflow

Proof of concept not for "in the wild" kiddies QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 german by kcope in 2006 use IO::Socket; if $ARGV0 eq "" print "param1 = remote host"; exit; win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum http://metasploit.com my...

Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/18271/info // // The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. // //...

Quake 3 Engine - CL_ParseDownload Remote Buffer Overflow

Quake 3 Engine - CLParseDownload Remote Buffer Overflow // source: https://www.securityfocus.com/bid/18271/info // // The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before...