Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwri...

EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC

Exploit for windows platform in category dos / poc ====================================================== EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC ====================================================== sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail:...

Oracle Java 6 - OBJECT tag launchjnlpdocbase Remote Buffer Overflow

Oracle Java 6 - OBJECT tag launchjnlpdocbase Remote Buffer Overflow Source: http://code.google.com/p/skylined/issues/detail?id=23 SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS ,dSSSSSSSSSSSS SSSS ,dSSY' SSSS SSSS SSSS SSSS SSSSb, SS...

Oracle Java 6 - OBJECT tag 'launchjnlp'/'docbase' Remote Buffer Overflow

Source: http://code.google.com/p/skylined/issues/detail?id=23 SSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSS ,dSSSSSSSSSSSS SSSS ,dSSY' SSSS SSSS SSSS SSSS SSSSb, SSSS ,dSSSSSSSSSSSS SSSSSSSSSSSSb, SSSS SSSS ,dSSY' SSSS SSSS SSSS SSS...

DJ Studio Pro 8.1.3.2.1 SEH Overwrite

DJ Studio Pro Version 8.1.3.2.1 SEH 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.e-soft.co.uk/DJSP.htm Vulnerable version DJ Studio...

Audiotran 1.4.2.4 SEH Overflow Exploit

Exploit for windows platform in category local exploits ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit ====================================== Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web -...

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass)

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow DEP Bypass / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage ...

Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)

Exploit for windows platform in category local exploits ======================================================== Mini-stream Ripper v3.1.2.1 Buffer Overflow DEP Bypass ======================================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS...

Mini-stream Ripper 3.1.2.1 - Local Buffer Overflow (DEP Bypass)

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

GSM SIM Utility 5.15 - Direct RET Overflow

Exploit Title : GSM SIM Utility Local Exploit Direct Ret ver. Date : July 07, 2010 Author : chap0 www.seek-truth.net Download Link : http://download.cnet.com/GSM-SIM-Utility/3000-185084-10396246.html?tag=mncol Version : 5.15 OS : Windows XP SP3 Greetz to : Corelan Security Team Advisory :...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

Apple Mac OSX EvoCam Web Server Snow Leopard - ROP Remote Overflow !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

DoubleTake/HP StorageWorks Storage Mirroring Service - Authentication Overflow (Metasploit)

$Id: doubletake.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CA BrightStor Discovery Service - TCP Overflow (Metasploit)

$Id: discoverytcp.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

TweakFS 1.0 (FSX Edition) Stack buffer overflow

Exploit for windows platform in category local exploits =============================================== TweakFS 1.0 FSX Edition Stack buffer overflow =============================================== Exploit Title : TweakFS 1.0 FSX Edition CVE : CVE-2010-1458 Corelan :...

PHP 6.0 Dev str_transliterate() Buffer Overflow

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)

PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...

Easy FTP Server version 1.7.0.2 buffer Overflow RET Overwrite Exploit

Exploit for unknown platform in category remote exploits ===================================================================== Easy FTP Server version 1.7.0.2 buffer Overflow RET Overwrite Exploit ===================================================================== !/usr/bin/env python RCE for...

RM Downloader .m3u BOF (SEH)

Exploit for unknown platform in category local exploits ============================ RM Downloader .m3u BOF SEH ============================ !/usr/bin/perl -w Author: Jacky Version: 3.0.2.1 Tested on: Windows XP SP2 RM Downloader m3u Buffer Overflow SEH Perl Edition Discovered by :: Peter Van...

Audiotran 1.4.1 Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...

Audiotran 1.4.1 - Direct RET Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...