955 matches found
Quick TFTP Server Pro 2.1 - Remote Overflow (SEH)
Quick TFTP Server Pro 2.1 - Remote Overflow SEH !/usr/bin/python Quick TFTP Pro 2.1 SEH Overflow 0day Tested on Windows XP SP2. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/quick-tftp-poc.py.txt bt quickftp.py Quick TFTP Pro 2.1 SEH Overflow 0day...
NetWin SurgeMail <= 3.8k4-4 IMAP LIST Command Remote Overflow
Binary data 4431.prm...
IBM Informix Dynamic Server多个远程溢出漏洞
BUGTRAQ ID: 28198 CVECAN ID: CVE-2008-0727,CVE-2008-0949 IBM Informix Dynamic Server为企业提供运行业务所需的任务关键型数据基础设施。 Informix Dynamic Server默认监听于TCP 1526端口的oninit.exe进程在认证期间没有验证DBPATH变量和用户口令的长度，如果用户提供了超长的变量名或口令的话，就可以触发缓冲区溢出，导致执行任意指令。 IBM Informix Dynamic Server 9.x IBM Informix Dynamic Server 7.x IBM...
Borland StarTeam多个远程溢出及拒绝服务漏洞
BUGTRAQ ID: 28080 Borland Starteam是Borland公司ALM生命周期管理的核心工具，是目前市面上最好的软件配置管理工具之一。 Starteam服务器没有正确地计算为从客户端所接收到的某些数组所需分配的内存数，导致多个整数溢出漏洞。在PROJECTLOGIN和SETSERVERACL命令中，有32位从客户端所接收到的用于指定报文中条目数量的数字分别被乘以8（或4，具体取决于文件名名称或规范）和12，然后未经考虑32位的限制便将结果用于分配内存，这可能触发堆溢出，允许攻击者控制某些寄存器，导致执行恶意指令。但攻击者必须拥有有效帐号才能利用这些漏洞。...
Livebox TP路由器远程溢出拒绝服务漏洞
BUGTRAQ ID: 28066 Livebox TP是在波兰广泛使用的宽带路由器。 Livebox TP在处理畸形用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器。 Livebox TP中所内嵌的ADI Convergence Galaxy FTP服务器没有正确地验证用户输入参数，如果远程攻击者向路由器的FTP服务发送了特制报文的话，就可能触发缓冲区溢出，导致服务崩溃。 Neostrada Livebox TP 厂商补丁： Neostrada --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
SurgeMail CGI可执行程序远程溢出漏洞
BUGTRAQ ID: 27992 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail中用于处理CGI可执行程序的函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。...
D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit
Exploit for unknown platform in category remote exploits ==================================================================== D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 BOF Exploit ==================================================================== //add su one, user: sun pass: tzu...
dlink-overflow.txt
//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...
Adobe Flash Media Server多个远程溢出漏洞
BUGTRAQ ID: 27762 CVECAN ID: CVE-2007-6149,CVE-2007-6148,CVE-2007-6431 Adobe Flash Media Server是基于Flash应用程序的服务器，可提供运行交互式应用及音频视频流的环境。 Flash Media Server包含有名为Edge Server的组件，该组件在TCP 1935和19350端口监听入站连接。Edge...
Rosoft Media Player 4.1.8 - .m3u File Remote Buffer Overflow (PoC)
Rosoft Media Player 4.1.8 - .m3u File Remote Buffer Overflow PoC Rosoft Media Player 4.1.8 Remote Buffer Overflow .M3U @nolife : Pow...Pow ..If you are kind i'll show my set of supers mega Tools, fuzzers ,and all the automated stuff i use For M3U/ASX/PLS Pow..Pow ... Nolifing is actually a...
IrfanView FPX文件远程堆溢出漏洞
BUGTRAQ ID: 27479 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。 IrfanView的FlashPix插件（fpx.dll）在处理FlashPix（.fpx）文件时存在堆溢出漏洞，如果用户受骗打开了特制的FlashPix文件的话，就可能触发堆溢出，导致执行任意指令。 IrfanView 4.10 厂商补丁： IrfanView --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.irfanview.net/ http://milw0rm.com/exploits/49...
Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow
Binary data 4352.prm...
Citadel SMTP <= 7.10 Remote Overflow Exploit
No description provided by source. Citadel SMTP = 7.10 Remote Overflow Exploit http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz...
Citadel SMTP <= 7.10 Remote Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit http://www.inj3ct0r.com/sploits/9117.tar.gz 0day.today 2018-02...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP 7.10 - Remote Overflow Citadel SMTP = 7.10 Remote Overflow Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP = 7.10 Remote Overflow Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
IBM Tivoli Storage Manager Express Backup Server Service (dsmsvc.exe) Packet Handling Remote Overflow
The version of Tivoli Storage Manager TSM Express installed on the remote host is prior to 5.3.7.3. It is, therefore, affected by a heap-based buffer overflow vulnerability that can be triggered by a user-supplied length value. This could allow an unauthenticated attacker to run arbitrary code on...
nuvico-heap.txt
//add su one, user: sun pass: tzu shellcode =...
Windows system under the remote stack overflow principle-vulnerability warning-the black bar safety net
We have to study the windows system remote overflow method. Our purpose is to study how to use windows program overflow to remote attacks. If for windows buffer overflows are not very familiar with, please review my previous article: the window system under a stack overflow forIsBaseMagzine 2 0 0...
On the Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net
First, the vulnerability causes and impact of the range of Vulnerability causes as already briefly mentioned, we can see the vulnerability announcement. From the vulnerability announcement, we can see two points: 1． Vulnerability causes: Windows 2 0 0 0 version more than the PNP service remote...