PT-2016-7989

Name of the Vulnerable Software and Affected Versions Yasr version 0.6.9-5 Description A buffer overflow occurs when a local attacker provides an oversized argument to the -p parameter. This allows the attacker to crash the application or execute arbitrary code by using a crafted payload containi...

PT-2016-7986

Name of the Vulnerable Software and Affected Versions xwpe versions prior to 1.5.30a-2.1 Description A stack-based buffer overflow allows local attackers to execute arbitrary code or cause a denial of service. This occurs when overly long input strings exceed buffer boundaries. Specifically, an...

Linux/x86-64 - Bind 4444/TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Exploit Title: bindshell TCP Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Contact: https://www.facebook.com/sathish.royalmechanical...

PT-2016-7990

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the...

FTPShell client buffer overflow vulnerability

FTPShell client is a file transfer program for windows platform. A cache overflow entry exists in the input field 'Address' used to connect to an FTP server in the FTPShell.exe client. The vulnerability is exploited to execute arbitrary local commands by overwriting multiple stack registers and...

Linux/x86-64 - Bind TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Description: x64 Linux null-free TCP bind port shellcode Assembled Size: 103 bytes Teste...

KiTTY Portable 0.65.1.1p - Local Saved Session Overflow (Egghunter XP / Denial of Service 7/8.1/10)

Exploit Title: KiTTY Portable Local Code Execution Win7 - Denial Of Service Win8.1 - Denial Of Service Win10 - Denial Of Service...

KiTTY Portable 0.65.0.2p (Windows XP/7/10) - Chat Remote Buffer Overflow (SEH)

Exploit Title: KiTTY Portable Remote Code Execution...

Dynamic Shellcode Injection: Shellter

Shellter is a dynamic shellcode injection tool, and probably the first dynamic PE infector ever created. It can be used in order to inject shellcode into native Windows applications currently 32-bit apps only. The shellcode can be something yours or something generated through a framework, such a...

Ovidentia online Module 2.8 - 'GLOBALS[babAddonPhpPath]' Remote File Inclusion

Title: Ovidentia Module online 2.8 GLOBALSbabAddonPhpPath Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Download:...

Ovidentia online Module 2.8 - GLOBALS[babAddonPhpPath] Remote File Inclusion

Ovidentia online Module 2.8 - GLOBALSbabAddonPhpPath Remote File Inclusion Title: Ovidentia Module online 2.8 GLOBALSbabAddonPhpPath Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Download:...

Ovidentia Widgets 1.0.61 - Remote Command Execution

Ovidentia Widgets 1.0.61 - Remote Command Execution Title: Ovidentia Widgets 1.0.61 Remote Command Execution Exploit Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Download:...

Easy File Sharing FTP Server 3.6 Stack Buffer Overflow Exploit

Easy File Sharing FTP server version 3.6 suffers from a stack buffer overflow vulnerability. Exploit Title: Easy File Sharing FTP Server 3.6 0day - Stack Overflow Exploit Author: @zeifan Vendor Homepage: http://www.sharing-file.com/products.htm Software Link: http://www.efssoft.com/efsfs.exe...

Dell Pre-Boot Authentication Driver Uncontrolled Write Vulnerability

The Dell Pre-Boot Authentication Driver PBADRV.sys contains a vulnerability that can be leveraged to enable an attacker to write arbitrary code. The 'OutputAddress' from the IOCTL call is not validated before it attempts to write to memory. The content of the write is a four-byte hex value that i...

Easy File Sharing Web Server 7.2 HEAD SEH Buffer Overflow

Exploit Title: Easy File Sharing Web Server 7.2 - HEAD HTTP request SEH Buffer Overflow Date: 12/2/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 7.2 Tested on: XP SP3 EN category: Remote Exploit Usage: ./exploit.py ip port import socket import sys host = strsys.argv1...

Easy File Sharing Web Server 7.2 - HEAD Request Buffer Overflow (SEH)

Exploit Title: Easy File Sharing Web Server 7.2 - HEAD HTTP request SEH Buffer Overflow Date: 12/2/2015 Exploit Author: ArminCyber Contact: [email protected] Version: 7.2 Tested on: XP SP3 EN category: Remote Exploit Usage: ./exploit.py ip port import socket import sys host = strsys.argv1...

Ovidentia absences Module 2.64 - Remote File Inclusion

Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fabsences&file=absences-2-64.zip&idf=88...

Ovidentia absences Module 2.64 - Remote File Inclusion

Ovidentia absences Module 2.64 - Remote File Inclusion Title: Ovidentia Module absences 2.64 Remote File Include Vulnerability Author: bd0rk eMail: bd0rkathackermail.com Tested on: Ubuntu-Linux Download:...

Windows XP-10 - Null-Free WinExec Shellcode Python

Windows XP-10 - Null-Free WinExec Shellcode Python. Shellcode exploit for generator platform All Windows Null-Free WinExec Shellcode """ Coded by B3mB4m Concat : [email protected] Home : b3mb4m.blogspot.com 10.12.2015 Tested on : Windows XP/SP3 x86 Windows 7 Ultimate x64 Windows 8.1 Pro Build 9600 x...

win32/xp SP3 x86 Null-Free WinExec Shellcode

This is a tool written in python to generate shellcode to use on Microsoft Windows. All Windows Null-Free WinExec Shellcode """ Coded by B3mB4m Concat : email protected Home : b3mb4m.blogspot.com 10.12.2015 Tested on : Windows XP/SP3 x86 Windows 7 Ultimate x64 Windows 8.1 Pro Build 9600 x64 Windo...