Live for Speed S1S2Demo - .mpr replay Local Buffer Overflow

Live for Speed S1S2Demo - .mpr replay Local Buffer Overflow / 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over...

Live for Speed S1/S2/Demo - '.mpr replay' Local Buffer Overflow

/ 0day Live for speed patch x s2 /s1 and demo local .mpr buffer over flow Credit's to n00b for finding bug and writing the exploit Lfs is a racing simulator with a huge player data-base with 100,000+ user's. I found a local buffer over flow where im able to execute shell code on the user's...

movieplay-overflow.txt

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

MoviePlay 4.76 .lst File Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================== MoviePlay 4.76 .lst File Local Buffer Overflow Exploit ====================================================== !/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit t...

MoviePlay 4.76 - '.lst' Local Buffer Overflow

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

DVD X Player 4.1 Professional - '.PLF' File Buffer Overflow

!/usr/bin/env ruby 0day DVD X Player 4.1 Professional .PLF file buffer over flow found by n00b and poc by n00b. First of all DVD x is prone to a buffer-overflow when playing an overly long file name inside A .plf file Which is InterVideo WinDVD Play list File but also Dvd x uses this file as a pl...

Acoustica MP3 CD Burner 4.32 Local Buffer Overflow PoC

No description provided by source. / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

/ Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to open a specialy crafted .asx play li...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow PoC / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you ca...

Acoustica MP3 CD Burner 4.32 Local Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ====================================================== Acoustica MP3 CD Burner 4.32 Local Buffer Overflow PoC ====================================================== / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32...

ultra-noob.txt

/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow (1)

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow 1 / Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode =...

GLSA-200703-11 : Amarok: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200703-11 Amarok: User-assisted remote execution of arbitrary code The Magnatune downloader doesn't quote the 'mcurrentAlbumFileName' parameter while calling the 'unzip' shell command. Impact : A compromised or malicious Magnatune...

PHP Rapid Kill All Version File Injection

Discovered By:Null PHP Rapid Kill All Version File Injection U Can Upload Your Shell Code To Rapidshare.de and then copy link to the Link to Download text box of the web app then your shell Uploaded To this URL www.site.com/rapidpath/yourfile.php Download App:http://www.filefactory.com/file/f1486...

Internet Explorer Heap Spray Shell Code Execution (MS06-055 MS06-067; CVE-2006-4446; CVE-2006-4777; CVE-2006-4868; CVE-2009-2991)

Heap spraying is a new and increasingly popular technique to exploit vulnerabilities in Internet browsers. Heap spraying is used by attackers to implant a shell code on a target system. Shell code is a piece of executable code that opens a command shell that the attacker can control remotely...

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are...

PlumeCMS_1.1.10.txt

Vendor: Plume CMS 1.1.10 Found By : D3nGeR Scripit Site : http://plume-cms.net in file prepend.php ; includeonce $PXconfig'managerpath'.'/inc/class.config.php' code http://site.com/pathmanager/frontinc/prepend.php?PXconfigmanagerpath=shell code...

exV2 <= 2.0.4.3 extract() Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================== exV2 = 2.0.4.3 extract Remote Command Execution Exploit ========================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...

hoagie_php_sscanf.txt

? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice child pid 28222 exit signal...

PHP 4.4.35.1.4 - sscanf Local Buffer Overflow

PHP 4.4.35.1.4 - sscanf Local Buffer Overflow ? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10...