970 matches found
SurgeMail CGI可执行程序远程溢出漏洞
BUGTRAQ ID: 27992 SurgeMail是下一代的邮件服务器，可运行在Windows NT/2K或UNIX平台上，支持所有的标准IMAP、POP3、SMTP、SSL和ESMTP协议。 SurgeMail中用于处理CGI可执行程序的函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。...
D-Link MPEG4 SHM Audio Control (VAPGDecoder.dll 1.7.0.5) BOF Exploit
Exploit for unknown platform in category remote exploits ==================================================================== D-Link MPEG4 SHM Audio Control VAPGDecoder.dll 1.7.0.5 BOF Exploit ==================================================================== //add su one, user: sun pass: tzu...
dlink-overflow.txt
//add su one, user: sun pass: tzu shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...
Adobe Flash Media Server多个远程溢出漏洞
BUGTRAQ ID: 27762 CVECAN ID: CVE-2007-6149,CVE-2007-6148,CVE-2007-6431 Adobe Flash Media Server是基于Flash应用程序的服务器，可提供运行交互式应用及音频视频流的环境。 Flash Media Server包含有名为Edge Server的组件，该组件在TCP 1935和19350端口监听入站连接。Edge...
Rosoft Media Player 4.1.8 - .m3u File Remote Buffer Overflow (PoC)
Rosoft Media Player 4.1.8 - .m3u File Remote Buffer Overflow PoC Rosoft Media Player 4.1.8 Remote Buffer Overflow .M3U @nolife : Pow...Pow ..If you are kind i'll show my set of supers mega Tools, fuzzers ,and all the automated stuff i use For M3U/ASX/PLS Pow..Pow ... Nolifing is actually a...
IrfanView FPX文件远程堆溢出漏洞
BUGTRAQ ID: 27479 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。 IrfanView的FlashPix插件（fpx.dll）在处理FlashPix（.fpx）文件时存在堆溢出漏洞，如果用户受骗打开了特制的FlashPix文件的话，就可能触发堆溢出，导致执行任意指令。 IrfanView 4.10 厂商补丁： IrfanView --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.irfanview.net/ http://milw0rm.com/exploits/49...
Citadel < 7.11 makeuserkey Function RCPT TO Command Remote Overflow
Binary data 4352.prm...
Citadel SMTP <= 7.10 Remote Overflow Exploit
No description provided by source. Citadel SMTP = 7.10 Remote Overflow Exploit http://www.milw0rm.com/sploits/2008-vs-GNU-citadel.tar.gz...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP = 7.10 Remote Overflow Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
Citadel SMTP 7.10 - Remote Overflow
Citadel SMTP 7.10 - Remote Overflow Citadel SMTP = 7.10 Remote Overflow Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4949.tar.gz 2008-vs-GNU-citadel.tar.gz milw0rm.com 2008-01-21...
Citadel SMTP <= 7.10 Remote Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit ============================================ Citadel SMTP = 7.10 Remote Overflow Exploit http://www.inj3ct0r.com/sploits/9117.tar.gz 0day.today 2018-02...
IBM Tivoli Storage Manager Express Backup Server Service (dsmsvc.exe) Packet Handling Remote Overflow
The version of Tivoli Storage Manager TSM Express installed on the remote host is prior to 5.3.7.3. It is, therefore, affected by a heap-based buffer overflow vulnerability that can be triggered by a user-supplied length value. This could allow an unauthenticated attacker to run arbitrary code on...
nuvico-heap.txt
//add su one, user: sun pass: tzu shellcode =...
Windows system under the remote stack overflow principle-vulnerability warning-the black bar safety net
We have to study the windows system remote overflow method. Our purpose is to study how to use windows program overflow to remote attacks. If for windows buffer overflows are not very familiar with, please review my previous article: the window system under a stack overflow forIsBaseMagzine 2 0 0...
On the Expliot the guidelines for the preparation of the PNP the overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net
First, the vulnerability causes and impact of the range of Vulnerability causes as already briefly mentioned, we can see the vulnerability announcement. From the vulnerability announcement, we can see two points: 1． Vulnerability causes: Windows 2 0 0 0 version more than the PNP service remote...
yaSSL多个远程溢出及无效内存访问漏洞
BUGTRAQ ID: 27140 yaSSL是用于实现SSL的开源软件包。 yaSSL实现上存在多个远程溢出及无效内存访问问题，远程攻击者可能利用此漏洞控制服务器。 ------------------------------------------- A ProcessOldClientHello缓冲区溢出 ------------------------------------------- 用于包含客户端所接收的Hello报文中的数据的缓冲区结构如下（源自yasslimp.hpp）： class ClientHello : public HandShakeBase...
AOL YGPPicEdit.dll ActiveX控件多个远程溢出漏洞
BUGTRAQ ID: 27026 YGPPicEdit.dll是AOL产品所安装的图形编辑ActiveX控件。 YGPPicEdit.dll没有正确地验证多个属性的参数，如果用户受骗打开了恶意网页的话，就可能触发缓冲区溢出，导致执行任意指令。 AOL YGPPicEdit.dll 9.5.1.8 厂商补丁： AOL --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.aol.com/ html head script language="JavaScript" DEFER function Check var s...
PeerCast < 0.1218 servhs.cpp handShakeHTTP Function Remote Overflow
Binary data 4318.prm...
CUPS < 1.3.5 Back End SNMP Response Remote Overflow
Binary data 4320.prm...
WFTPD Explorer Pro 1.0 - Remote Heap Overflow (PoC)
WftpdExpProHeapPoC.py Discovered by r4x Kamil Szczerba [email protected] Soft : WFTPD Explorer Pro 1.0 Vendor : Texas Imperial Software Vuln : Heap Overwlow Res: LIST Exploit : PoC Reg Overwrite Reg: EAX = 41414141 ECX = 41414141 EDX = 00a57b38 ASCII "AAAA..." ESI = 00a57b30 ASCII "AAAA..."...