7595 matches found
NVIDIA Graphics Driver <= 8774 Local Buffer Overflow Exploit
No description provided by source. / Copyright c 2005 Matthieu Herrb Copyright c 2006 Derek Abdine, Marc Bevand Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice...
Dropbear SSH <= 0.34 Remote Root Exploit
No description provided by source. / Linux x86 Dropbear SSH = 0.34 remote root exploit coded by live You'll need a hacked ssh client to try this out. I included a patch to openssh-3.6.p1 somewhere below this comment. The point is: the buffer being exploited is too small25 bytes to hold our...
linux/x86 setreuid(0,0) execve("/bin/sh", ["/bin/sh", NULL]) 33 bytes
No description provided by source. / Linux/x86 setreuid0,0 + execve/bin/sh, /bin/sh, NULL - 33 bytes - [email protected] / char shellcode = \x6a\x46 // push $0x46 \x58 // pop %eax \x31\xdb // xor %ebx, %ebx \x31\xc9 // xor %ecx, %ecx \xcd\x80 // int $0x80 \x31\xd2 // xor %edx, %edx \x6a\x0b // pus...
3Com Ftp Server 2.0 - Remote Overflow Exploit
No description provided by source. / Email fixed brotha /str0ke / / 3Com Ftp Server remote overflow exploit author : c0d3r kaveh razavi [email protected] package : 3CDaemon version 2.0 revision 10 advisory : http://secway.org/advisory/ad20041011.txt company address : 3com.com it is just a simp...
Linux i686 - pacman -S <package> (default package: backdoor) - 64 bytes
No description provided by source. / Title : Linux i686 - pacman -S package default package: backdoor - 64 bytes Author : Jonathan Salwan Mail : submit ! shell-storm.org Web : http://www.shell-storm.org Pacman is a software package manager, developed as part of the Arch Linux distribution. With...
Bifrost 1.2.1 - Remote Buffer OverFlow
No description provided by source. !/usr/bin/python2.7 By : Mohamed Clay import socket from time import sleep from itertools import izip, cycle import base64 import sys def rc4cryptdata, key: x = 0 box = range256 for i in range256: x = x + boxi + ordkeyi % lenkey % 256 boxi, boxx = boxx, boxi x =...
IWConfig Local ARGV Command Line Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/8901/info A problem has been identified in the iwconfig program when handling strings on the commandline. Because of this, a local attacker may be able to gain elevated privileges. Exploit: / PSTiwconfig /sbin/iwconfig...
Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH
No description provided by source. Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and...
IRIX 6.5.x gr_osview Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1526/info Under certain versions of IRIX, the 'grosview' command contains a buffer overflow that local attackers can exploit to gain root privileges. The grosview command produces a graphical display of memory-management...
Linux x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes
No description provided by source. include stdio.h include string.h / Aodrulez's /bin/sh Null-Free Polymorphic Shellcode. Shellcode size : 46 bytes. Special Tnx to 'Chema Garcia aka sch3m4' Tested on : Ubuntu 8.04,Hardy Heron. Email : f3arm3d3aratgmail.com Author: Aodrulez. Atul Alex Cherian Blog...
Stanley T. Shebs Xconq 7.2.2 - Buffer Overflow Vulnerabilities in xconq
No description provided by source. source: http://www.securityfocus.com/bid/1495/info Xconq is a multiple player strategy game available for many unix platforms. It contains a number of buffer overflow vulnerabilities including the ability to overflow stack buffers with either the DISPLAY or the...
MS Excel Malformed FEATHEADER Record Exploit (MS09-067)
No description provided by source. MS Excel Malformed FEATHEADER Record Exploit CVE-2009-3129, MS09-067, OSVDB-59860 Vulnerble application MS office 2003/2007 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Sean Larsson - Original Discovery !/usr/bin/python import sys import zlib Allwin WinExec...
Atftpd 0.6 - Remote Root Exploit (atftpdx.c)
No description provided by source. / PoC linux/86 remote exploit against atftpd c gunzip FIXED / include stdio.h include stdlib.h include unistd.h include string.h include netdb.h include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h include signal.h define HEAPSTART...
gaestebuch 1.2 - Remote File Inclusion Vulnerability
No description provided by source. HINNENDAHL.COM Gaestebuch 1.2 Remote File Inclusion Vulnerability by bd0rk || SOH-Crew www.soh-crew.it.tt Contact: bd0rkathackermail.com Affected-Software: HINNENDAHL.COM Gaestebuch 1.2 Vendor: http://www.hinnendahl.com/ Download:...
lftp <= 2.6.9 - Remote Stack based Overflow Exploit
No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...
AoA DVD Creator 2.6.2 - ActiveX Exploit
No description provided by source. !-- Exploit Title: AoA DVD Creator ActiveX Date: 19.05.2014 Author: metacom Website: www.rstforums.com Software Link: www.aoamedia.com/aoadvdcreator.exe Version: 2.6.2 Tested on: Windows xp sp3EN IE 6.0 -- html object...
Upclient 5.0 b7 Command Line Argument Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7703/info upclient has been reported prone to a buffer overflow vulnerability when handling command line arguments of excessive length. It is possible for a local attacker to seize control of the vulnerable application an...
Linux - setuid(0) & execve("/sbin/poweroff -f")
No description provided by source. include stdio.h / linux/x86 ; setuid0 & execve/sbin/poweroff -f 47 bytes written by ka0x - ka0x01alt+64gmail.com lun sep 21 16:40:16 CEST 2009 greets: an0de, Piker, xarnuz, NullWave07, Pepelux, JosS, sch3m4, Trancek, Hendrix and others! / int main char shellcode...
MPG123 0.59 Remote File Play Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8680/info A problem in the handling of some types of remote files has been reported in mpg123. Because of this, it may be possible for a remote attacker to execute arbitrary code with the privileges of the mpg123 user. /...
VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
No description provided by source. / 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: VCDGear is a program designed to allow a user to extract MPEG streams from C...