FreeBSD 3.3,Linux Mandrake 7.0 'xsoldier' Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/871/info Certain versions of FreeBSD 3.3 Confirmed and Linux Mandrake confirmed ship with a vulnerable binary in their X11 games package. The binary/game in question, xsoldier, is a setuid root binary meant to be run via ...

Ophcrack 3.5.0 - Local Code Execution BOF

No description provided by source. Exploit Title: ophcrack v3.5.0 - Local Code Execution BOF Date: 21.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://ophcrack.sourceforge.net/ Software Link: http://downloads.sourceforge.net/ophcrack/ophcrack-win32-installer-3.5.0.exe Version:...

VUPlayer 2.49 - .ASX File (HREF) Local Buffer Overflow Exploit (1)

No description provided by source. !/usr/bin/perl intro; does not need a thread method shellcode to run as best as can. seh work great too! win32exec - EXITFUNC=seh CMD=calc Size=343 Encoder=PexAlphaNum http://metasploit.com my $shellcode =...

Solaris/SPARC 2.5.1/2.6/7/8 Derived 'login' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...

AVCon DEP Bypass

No description provided by source. DEP Bypass for OptIn/OptOut all modules used are not aslr aware script produces a text file, copy the contents paste in the input field next to the call button discovered by Dillon Beresford import sys from struct import pack print \n===================== print...

BitchX 1.1 Final - MODE Remote Heap Overflow Exploit (0day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...

Easy~Ftp Server 1.7.0.2 - Post-Authentication BoF (PoC)

No description provided by source. !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/2010 Software link:...

VUPlayer <= 2.49 - (.m3u) Universal Buffer Overflow Exploit (DEP bypass)

No description provided by source. !/usr/bin/env python VUPlayer =2.49 .M3u Universal buffer overflow exploit w/ DEP bypass Author: mrme Download: http://vuplayer.com/ Tested on Wind0ws XP SP3 /noexecute=alwayson Greetz: Corelan Security Team...

Cisco IOS Connectback Shellcode 1.0

No description provided by source. ---------------------------------------------------------------------------------------- Cisco IOS Connectback shellcode v1.0 c 2007 IRM Plc By Gyan Chawdhary ---------------------------------------------------------------------------------------- The code creat...

PowerISO 4.0 - Local Buffer Overflow PoC

No description provided by source. !/usr/bin/env python Poweriso 4.0 Local Buffer Overflow PoC Found By: DrIDE Tested On: XPSP3 Usage: Create New ISO, Add a New Folder, Paste to Rename Folder, Click Save Notes: This must have been fixed somewhere between 4.0 and 4.7 ''' EAX 00ADDDC0 ECX 00000000...

Amaya Web Browser <= 11.0.1 - Remote Buffer Overflow Exploit (vista)

No description provided by source. !/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhuntin...

Linux/x86 - Disable randomize stack addresse - 106 bytes

No description provided by source. / Title: Linux/x86 - Disable randomize stack addresse - 106 bytes Set randomizevaspace to zero Author: Jonathan Salwan submit ! shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan !Database of Shellcodes...

Triologic Media Player 8 (.m3u) Local Universal Unicode Buffer Overflow (SEH)

No description provided by source. Exploit Title: Triologic Media Player 8 .m3u Local Universal Unicode Buffer Overflow SEH Date: August 17, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Software Link: http://download.cnet.com/Triologic-Media-Player/3000-21394-10691520.html Version:...

QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 25\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

freeBSD 4.8 realpath() Off-By-One Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8315/info The 'realpath' function is a C-library procedure to resolve the canonical, absolute pathname of a file based on a path that may contain values such as '/', './', '../', or symbolic links. A vulnerability that wa...

No-IP DUC <= 2.1.7 - Remote Code Execution Exploit

No description provided by source. / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability

No description provided by source. -------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz...

PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit

No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...

JITed exec notepad Shellcode

No description provided by source. Title: JITed exec notepad shellcode EDB-ID: CVE-ID: OSVDB-ID: Author: Alexey Sintsov Published: Verified: yes Download N/A // JIT.swf // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com // //...