216 matches found
linux/x86 setreuid/execve 31 bytes
linux/x86 setreuid/execve 31 bytes. Shellcode exploit for linx86 platform / 31 byte setreuid shellcode - man shadow os: Slackware 9.1, Phlak 2.4, Knoppix 0.1 www.manshadow.org [email protected] irc.efnet.net manshadow / char shellcode = "\x31\xC9" / xor ecx,ecx / "\x31\xDB" / xor ebx,ebx /...
WinRAR 3.4.1 - Corrupt '.ZIP' File
/ WinRAR 3.40 Buffer Overflow POC Thanks to Miguel Tarasco Acuna. He has made a wonderful code for Microsoft Windows Vulnerability in Compressed zipped Folders MS04-034 which I edited and made this code by. Coded by Vafa Khoshaein - [email protected] Vulnerability discovery date : December 10...
WinRAR <= 3.4.1 Corrupt ZIP File Vulnerability PoC
Exploit for unknown platform in category local exploits ================================================== WinRAR include pragma pack1 define DATOS "email protected" typedef struct DWORD Signature; WORD VersionNeeded; WORD GeneralPurposeFlag; WORD CompressionMethod; WORD ModFileTime; WORD...
Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more)
Luigi Auriemma Application: Gamespy SDK used for online cd-keys validation in third party code hidden "security through obscurity" code Games/ver: Battlefield 1942 = 1.6.19 and 1.6rc1 http://www.battlefield1942.com Contract Jack = 1.1 http://nolf.sierra.com Gore = 1.48 1.49 http://gore.cryogame.c...
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Validator (1)
/ EDB Note: This will just "test" the vulnerability. EDB Note: An exploit version can be found here https://www.exploit-db.com/exploits/145/ / / Proof-of-concept exploit code for domremap Copyright C 2004 Christophe Devine and Julien Tinnes This program is free software; you can redistribute it...
Linux Kernel <= 2.4.22 (do_brk) Local Root Exploit (working)
Exploit for linux platform in category local exploits ============================================================ Linux Kernel Further research and exploit development by Wojciech Purczynski and Paul Starzetz. c 2003 Copyright by IhaQueR and cliph. All Rights Reserved. COPYING, PRINTING,...
XGalaga 2.0.34 local game exploit (Red Hat 9.0)
Exploit for linux platform in category local exploits =============================================== XGalaga 2.0.34 local game exploit Red Hat 9.0 =============================================== / 0x333xgalaga = XGalaga 2.0.34 local game exploit Red Hat 9.0 tested against xgalaga-2.0.34-1.i386.r...
ISC BIND 8.2.x - TSIG Remote Stack Overflow (1)
ISC BIND 8.2.x - TSIG Remote Stack Overflow 1 / tsig0wn.c Copyright Field Marshal August Wilhelm Anton Count Neithardt von Gneisenau [email protected] The author is not and will not be held responsible for the action of other people using this code. provided for informational purposes only sin...
LPRng (RedHat 7.0) - lpd Format String
LPRng RedHat 7.0 - lpd Format String / Copyright c 2000 - Security.is The following material may be freely redistributed, provided that the code or the disclaimer have not been partly removed, altered or modified in any way. The material is the property of security.is. You are allowed to adopt th...
Переполнение буфера в Statistics Server
Переполнение буфера в одном из CGI-компонентов позволяет выполнение кода с привилегией сервера...
MS:4A3CD85C-637D-4F9F-B74F-D15607E4E277
...
MS:2EC2F6BD-8D68-4FCA-B15D-0AA52396B4BC
...
MS:04A1DB2E-8BF3-4F31-B4FF-25ED264E3976
...
MS:C41F400E-6E02-4333-9F4E-BBADF281B885
...
MS:9CC24996-168F-4C50-9844-A8C1DC1DB137
...
MS:93F46960-1C8A-4C41-9936-1A22B06CCD23
...