Helix Server 11.0.1 (Windows 2000 SP4) - Remote Heap Overflow

/usr/bin/python Remote exploit for the vulnerability in Helix server v11.0.1 as described at http://gleg.net/helix.txt The exploit spawns a shell on TCP port 4444 and connects to it. At the time of overflow we control EAX which is used in a call as follows 00420C64: call dword ptr eax + 4 ECX...

Avant Browser <= 11.0 build 26 Remote Stack Overflow Crash Exploit

No description provided by source. !/usr/bin/perl Avant Browser ALL Version Remot Stack OverFlow Crash Discovered by DATASNIPER Usage: connect from Avant browser to http://127.0.0.1/ use IO::Socket; my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 80, Proto = 'tcp';...

Apache mod_jk Long URL Worker Map Stack Remote Overflow

According to its banner, the version of the Apache modjk module in use on the remote web server contains a buffer overflow vulnerability. An unauthenticated, remote attacker may be able to exploit this flaw by sending a long URL request to crash the affected service or execute arbitrary code on t...

Apache TomCat mod_jk < 1.2.21 Worker Map Remote Overflow

Binary data 3932.prm...

μTorrent (uTorrent) 1.6 build 474 - 'announce' Key Remote Heap Overflow

/ This is a PoC remote exploit for uTorrent 1.6 Author: defsec http://www.defacedsecurity.com Works on XP SP1 and w2k sp1-4 / include include define NASIZE 4880 unsigned char niceannounceNASIZE; unsigned char xorops="\x33\xc0\x33\xdb"; // win32exec - EXITFUNC=process CMD=calc Size=343...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================ CA BrightStor ARCserve msgeng.exe Remote Heap Overflow Exploit ================================================================ !/usr/bin/python I couldnt find a reliable...

Intel Centrino ipw2200BG Wireless Driver Remote Overflow PoC

No description provided by source. / This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet [email protected] Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit...

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow / This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit...

Intel Centrino ipw2200BG Wireless Driver Remote Overflow PoC

Exploit for unknown platform in category remote exploits ============================================================ Intel Centrino ipw2200BG Wireless Driver Remote Overflow PoC ============================================================ / This is a PoC exploit for Intel Centrino ipw2200...

Intel Centrino ipw2200BG - Wireless Driver Remote Overflow

/ This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit that demonstrates the remote code execution on ipw2200...

Acrobat Reader多个远程溢出漏洞

Acrobat Reader是非常流行的PDF文件阅读器。 PDF格式将文档对象层次的根定义为“目录词典”，目录中包含有到对象的引用、构成文档内容的数据及其属性，以及定义如何向用户显示文档的指令。 当前的PDF规范中存在设计错误，如果引用了无效的页面树节点或对象的话，目录中恶意的Pages项设置或恶意的目录词典可能会出现非预期的情况，包括内存破坏、内存泄漏或拒绝服务。 Adobe Acrobat Reader 5.0 - 7.0 目前厂商还没有提供补丁或者升级程序，SEBUG建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com...

Tencent QQ multiple remote overflow vulnerabilities demo-vulnerability warning-the black bar safety net

The following is demo ! /Article/UploadPic/2007-1/200714105438199.jpg ! /Article/UploadPic/2007-1/200714105532691.jpg ! /Article/UploadPic/2007-1/20071410560783.jpg ! /Article/UploadPic/2007-1/200714105631232.jpg...

WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WinZIP 10.0 FileView ActiveX Controls Remote Overflow Exploit ============================================================= / ---=== winzip-exploit.html XiaoHui : 76693223at163co...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

WinZip 10.0 - FileView ActiveX Controls Remote Overflow / ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can...

WinZip 10.0 - FileView ActiveX Controls Remote Overflow

/ ---=== winzip-exploit.html XiaoHui : 76693223at163com HomePage: www.nipc.org.cn c 2006 All rights reserved. note:Because of the prior vuln in FileView ActiveX Control,Micorsoft has disabled this ActiveX Controls, To test this vuln,You can delete the key:...

Novell Netmail NMAP服务STOR命令远程溢出漏洞

Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 NetMail中绑定到TCP 689端口的NMAP服务（nmapd.exe）在处理STOR命令时存在缓冲区溢出漏洞，如果攻击者能够向该命令发送特定参数的话，就可以触发这个溢出，导致执行任意指令。 Novell NetMail 3.52 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026f.SALPublic.html...

OpenLDAP 2.4.3 - KBIND Remote Buffer Overflow

OpenLDAP 2.4.3 - KBIND Remote Buffer Overflow / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse Shoutouts to LSD for their l33t asm code and to all 0dd people Private 0dd code. ...

Novell ZENworks Asset Management Collection Client Remote Overflow

The remote host is running Novell ZENworks Asset or Inventory Management, a remote desktop and network management software. The remote version of this software has multiple heap overflow vulnerabilities that may be exploited by an attacker to execute arbitrary code on the remote host with SYSTEM...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...

Nullsoft Winamp Ultravox多个远程堆溢出漏洞

Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的Ultravox协议处理器在处理ultravox-max-msg头时存在堆溢出漏洞。恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Winamp的Ultravox Lyrics3解析代码中也存在堆溢出漏洞。如果解析了某些Lyrics3标签，恶意的服务器可能导致Winamp客户端分配很小的空间，然后填充大量的服务器数据来触发这个溢出，最终执行任意指令。 Nullsoft Winamp 5.3 Nullsoft Winamp 5.24...