Zip Unzip 6.0 - .zip Local Stack Buffer Overflow

Zip Unzip 6.0 - .zip Local Stack Buffer Overflow / // local file header $lfheader = "\x50\x4B\x03\x04\x14\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00". "\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x0f\x00\x00\x00"; // central directory file header $cdfh...

Zip Unzip 6.0 - '.zip' Local Stack Buffer Overflow

/ // local file header $lfheader = "\x50\x4B\x03\x04\x14\x00\x00\x00\x00\x00\xB7\xAC\xCE\x34\x00\x00\x00". "\x00\x00\x00\x00\x00\x00\x00\x00\xe4\x0f\x00\x00\x00"; // central directory file header $cdfheader = "\x50\x4B\x01\x02\x14\x00\x14\x00\x00\x00\x...

ZipScan 2.2c - Local Overflow (SEH)

!/usr/bin/perl Software : ZipScan 2.2c .zip Bug found by : Lincoln Author : Lincoln & corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', withou...

TugZip 3.5 Buffer Overflow

!/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warrant...

TugZip 3.5 Archiver - .ZIP File Buffer Overflow

TugZip 3.5 Archiver - .ZIP File Buffer Overflow !/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...

TugZip 3.5 Archiver - '.ZIP' File Buffer Overflow

!/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', without any warrant...

TugZip 3.5 (.zip) Local Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits ===================================================== TugZip 3.5 .zip Local Buffer Overflow Exploit SEH ===================================================== !/usr/bin/perl Software : TugZip 3.5 .zip Author : Lincoln Assisted by : corelanc0d...

Free MP3 CD Ripper 2.6 Buffer Overflow

?php / Free MP3 CD Ripper 2.6 wav 1day stack buffer overflow PoC exploit Found by: Richard leahy Author: mrme - http://net-ninja.net/ Download: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Platform: Windows XP sp3 Greetz to: Corelan Security Team & Richard...

Optimal Archive 1.38 - .zip File (SEH) (PoC)

Optimal Archive 1.38 - .zip File SEH PoC !/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En...

Optimal Archive v1.38 (.zip) 0day SEH PoC

Exploit for windows platform in category dos / poc ========================================= Optimal Archive v1.38 .zip 0day SEH PoC ========================================= !/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog &...

Optimal Archive 1.38 - '.zip' File (SEH) (PoC)

!/usr/bin/python Title: Optimal Archive 1.38 .zip 0day SEH PoC Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Found by: TecR0c Download: http://www.optimalaccess.com/oadownload.php?version=oarchive.exe Platform: Windows XP sp3 En Advisory:...

Free MP3 CD Ripper 2.6 - '.wav' Local Stack Buffer Overflow

?php / Free MP3 CD Ripper 2.6 wav 1day stack buffer overflow PoC exploit Found by: Richard leahy Author: mrme - http://net-ninja.net/ Download: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Platform: Windows XP sp3 Greetz to: Corelan Security Team & Richard...

Fa Web 2 Bypass / Shell Upload

======================================================================================== | Title : Faweb2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/Faweb2.NulL.bY.Eh3an.FaScript.Product.zip | Test...

Free MP3 CD Ripper 2.6 - .wav Local Stack Buffer Overflow

Free MP3 CD Ripper 2.6 - .wav Local Stack Buffer Overflow ?php / Free MP3 CD Ripper 2.6 wav 1day stack buffer overflow PoC exploit Found by: Richard leahy Author: mrme - http://net-ninja.net/ Download: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Platform: Windows XP sp3...

Multi-Mirror Shell Upload

======================================================================================== | Title : Multi-Mirror Remonte Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/Multi-Mirror-Eh3an-P30vel.zip |...

SuperNews (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= SuperNews index.php SQL Injection Vulnerability ================================================= SuperNews index.php SQL Injection Vulnerability Author : d4rk-h4ck3r Tunisian Security Team Dor...

Kenward Zipper 1.4 - Local Stack Buffer Overflow

Kenward Zipper 1.4 - Local Stack Buffer Overflow !/usr/bin/python Exploit Title : Kenward zipper v1.4 0day Stack Buffer Overflow PoC exploit Date : 23/3/2010 Bug found by : corelanc0d3r http://www.corelan.be:8800/ Author : mrme http://net-ninja.net/ Software Link :...

Kenward Zipper 1.4 - Local Stack Buffer Overflow

!/usr/bin/python Exploit Title : Kenward zipper v1.4 0day Stack Buffer Overflow PoC exploit Date : 23/3/2010 Bug found by : corelanc0d3r http://www.corelan.be:8800/ Author : mrme http://net-ninja.net/ Software Link : http://www.trans4mind.com/personaldevelopment/zipper/ Version : 1.4 OS : Windows...

Kenward Zipper 1.4 Stack Buffer Overflow

!/usr/bin/python Exploit Title : Kenward zipper v1.4 0day Stack Buffer Overflow PoC exploit Date : 23/3/2010 Bug found by : corelanc0d3r http://www.corelan.be:8800/ Author : mrme http://net-ninja.net/ Software Link : http://ken-ward-s-zipper.software.informer.com/ Version : 1.4 OS : Windows Teste...

Crimson Editor 3.70 SEH Overwrite

!/usr/bin/python Exploit Title : Crimson Editor r3.70 SEH Overwrite Vulnerability PoC exploit Date : 21/03/2010 Author : mrme Bug found by : sharpe Version : 3.70 Release Tested on : XP SP3 En Reference : http://www.exploit-db.com/exploits/11803 Greetz to : Corelan Security Team & sharpe...