7304 matches found
Chasys Media Player 1.1 - (.pls) Local Stack overflow Exploit
No description provided by source. usage: exploit.py print print Chasys Media Playerpls File Local Stack overflow Exploit\n print Founder: zAx my friend : print Exploited by : His0k4 print Tested on: Windows XP Pro SP2 Fr\n print Good news : The program didn't crash after running the exploit :...
45 bytes sys_execve("/bin/sh", "-c", "reboot") x86 linux shellcode
No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
nginx 0.6.38 - Heap Corruption Exploit
No description provided by source. !/usr/bin/env python Exploit Title: nginx heap corruption Date: 08/26/2010 Author: aaron conole [email protected] Software Link: http://nginx.org/download/nginx-0.6.38.tar.gz Version: = 0.6.38, = 0.7.61 Tested on: BT4R1 running nginx 0.6.38 locally CVE: 2009-26...
Inso DynaWeb httpd 3.1/4.0.2/4.1 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5384/info Inso DynaWeb webserver, dwhttpd, is used as a subcomponent in products such as Sun's AnswerBook2, which is shipped as part of the Solaris operating environment. The dwhttpd webserver is prone to a remotely...
Ultra Crypto Component (CryptoX.dll <= 2.0) Remote BoF Exploit
No description provided by source. pre codespan style=font: 10pt Courier New;span class=general1-symbolbody bgcolor=E0E0E0----------------------------------------------------------------------------------- bUltra Crypto Component CryptoX.dll = 2.0 AcquireContext Remote BoF Exploit/b url:...
Samhain Labs 1.x HSFTP Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9715/info hsftp has been found to be prone to a remote print format string vulnerability. This issue is due to the application improper use of a format printing function. Ultimately this vulnerability could allow for...
linux/x86 setreuid(geteuid(),geteuid()),execve("/bin/sh",0,0) 34 bytes
No description provided by source. / linux/x86 setreuidgeteuid,geteuid,execve/bin/sh,0,0 34byte universal shellcode blue9057 [email protected] / int main char shellcode=\x6a\x31\x58\x99\xcd\x80\x89\xc3\x89\xc1\x6a\x46 \x58\xcd\x80\xb0\x0b\x52\x68\x6e\x2f\x73\x68\x68...
Half-Life StatsMe 2.6.x Plug-in MakeStats Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6578/info The Half-Life StatsMe plug-in is prone to an exploitable format string vulnerability. This issue may be exploited by an attacker who can authenticate with the rcon-password of the Half-Life server to execute...
SoX - (.wav) Local Buffer Overflow Exploiter
No description provided by source. //--------------------------------- Begin Code: sox-exploiter.c --------------------------------- / Copyright Rosiello Security 2004 http://www.rosiello.org CVE Reference: CAN-2004-0557 Bug Type: Stack Overflow Date: 01/08/2004 Ulf Harnhammar reported that there...
BigAnt Server 2.2 - PreAuth Remote SEH Overflow Exploit (0day)
No description provided by source. !/usr/bin/python BigAnt Server Ver 2.2 PreAuth Remote SEH Overflow 0day Matteo Memelli aka ryujin www.be4mind.com - www.gray-world.net 04/13/2008 Tested on Windows 2000 Sp4 English Vulnerable process is AntServer.exe Offset for SEH overwrite is 954 Bytes...
KingView 6.5.3 SCADA ActiveX Exploit
No description provided by source. Exploit Title: KingView 6.5.3 SCADA ActiveX Date: March 07 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows xp sp3 running on...
ZipScan 2.2c SEH
No description provided by source. !/usr/bin/perl Software : ZipScan 2.2c .zip Bug found by : Lincoln Author : Lincoln & corelanc0d3r OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...
KnFTP 1.0.0 Server - Remote Buffer Overflow Exploit, 'USER' command
No description provided by source. Exploit Title: KnFTP 1.0.0 Server - Remote Buffer Overflow Exploit,'USER' command Date: 19/9/2011 Author: mr.pr0n @pr0n Homepage: http://ghostinthelab.wordpress.com/ - http://s3cure.gr Tested on: Windows XP SP3 En !/usr/bin/perl use IO::Socket; Exploit Title:...
Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID - Buffer Overflow
No description provided by source. !/usr/bin/python import sys,socket banner = Coded by: Muhammad EL Harmeel m.harmeelatgmaildotcom Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets...
Windows Xp Home Edition SP2 English (calc.exe) 37 bytes
No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = \xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0...
Elm Development Group ELM 2.4/2.5.1 Mail for UNIX (ELM) Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/1276/info Buffer overflow vulnerabilities exist in elm Electronic Mail for Unix. / Elm 2.5 PL3 exploit Tested Under Linux Slackware 3.6, 4.0, 7.0 By xfer [email protected] Of Buffer0verfl0w Security At Sat May 27...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X)
No description provided by source. !/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX...
Freefloat FTP Server Buffer Overflow Vulnerability 0day
No description provided by source. Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability Date: 12/05/2010 Author: 0v3r Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python import socket import sys def usage: pri...
XFree86 4.3 Font Information File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9636/info It has been reported that the XFree86 X Windows system is prone to a local buffer overflow vulnerability. The issue arises from improper bounds checking when parsing the 'font.alias' file. Successful exploitatio...
SGI IRIX <= 6.4 permissions Buffer overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/417/info A buffer overrun exists in the permissions program, as shipped by Silicon Graphics with the 5.x and 6.x Irix operating system. By supplying a long, well crafted buffer as the 4th argument to the program, arbitrar...