Solar FTP 2.1.1 PASV Buffer Overflow PoC

Exploit for windows platform in category remote exploits !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release o...

Solar FTP Server 2.1.1 - PASV Buffer Overflow

Solar FTP Server 2.1.1 - PASV Buffer Overflow !/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Note...

Solar FTP Server 2.1.1 - PASV Buffer Overflow

!/usr/bin/python Title: Solar FTP 2.1.1 PASV Command PoC Authors: Craig Freyman @cd1zz and Gerardo Iglesias @iglesiasgg Tested: Windows XP SP3 Vendor Contacted July 11, 2011 Vendor Response: July 12, 2011 - Will fix ASAP, approved release of PoC. Notes: We found different offsets depending on the...

ZipGenius 6.3.2.3000 Buffer Overflow

!/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use...

CoolPlayer 2.19 Buffer Overflow

Title : CoolPlayer 219 Buffer Overflow Exploit Software : http://coolplayer.en.softonic.com/ Tested on : Windows XP SP3 English Date : 04/07/2011 Author : X-h4ck Site : http://www.pirate.al/ PirateAL Crew , http://theflashcrew.blogspot.com/ Email : [email protected] Greetz : Wulns - IllyrianWarrior...

Word List Builder Buffer Overflow Exploit (SEH)

No description provided by source. Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham...

SAP Player 0.9 Buffer Overflow

SAP Player 0.9 .m3u universal Diret ret version Author Abhishek Sahni - abhil00703atgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from http://www.sorinara.com/sap/sap09.exe Vulnerable versio...

CoolPlayer 219 Buffer Overflow Exploit

Exploit for windows platform in category local exploits Title : CoolPlayer 219 Buffer Overflow Exploit Software : http://coolplayer.en.softonic.com/ Tested on : Windows XP SP3 English Date : 04/07/2011 Author : X-h4ck Site : http://www.pirate.al/ PirateAL Crew , http://theflashcrew.blogspot.com/...

MS Office 2010 RTF Header Stack Overflow Vulnerability Exploity Exploit

Exploit for windows platform in category local exploits Exploit Title: MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit Date: 7/3/2011 Author: Snake Shahriyar.j gmail Version: MS Office unfortunately msgr3en.dll loads a few seconds after opining office, so just need to open open...

HP Data Protector 6.11 - Remote Buffer Overflow (DEP Bypass)

!/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference: http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities...

HP Data Protector 6.11 Remote Buffer Overflow

!/usr/bin/python HP Data Protector 6.11 Remote Buffer Overflow Tested on Windows 2003 R2 + DEP Enabled Authors: muts & dookie Reference: http://www.exploit-db.com/exploits/17458/ Reference: http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities...

OpenBSD/x86 sys_execve ('/bin/sh -c "reboot"') - 178 bytes (encoded)

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

M86 Researchers Discover Short-Lived IE 0-Day

Researchers from M86 claim to have discovered a 0-day exploit for Internet Explorer that is being used in the wild, according to Avri Schneider, an M86 researcher. Writing for an M86 blog yesterday, Schneider said that the company’s team of researchers discovered a piece of JavaScript on the page...

FreeAmp .pls Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python +Exploit Title: FreeAmp 2.0.7 .PLS File Buffer Overflow Exploit +Date: 24\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.exploit-db.com/application/17441/ +Version: 2.0.7 +Tested On: WIN-XP SP3 Brazilian Portuguese...

Linux/SuperH (sh4) - execve("/bin/sh", 0, 0) Shellcode (19 bytes)

Linux/SuperH sh4 - execve"/bin/sh", 0, 0 Shellcode 19 bytes. Shellcode exploit for SuperHSH4 platform / | Title: Linux/SuperH - sh4 execve"/bin/sh", 0, 0 - 19 bytes | Date: 2011-06-22 | Tested on: Debian-sh4 2.6.32-5-sh7751r | Author: Florian Gaultier - agix - twitter: @Agixid | |...

Black Ice Fax Voice SDK 12.6 Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

FreeBSD/x86 Alphanumeric Bomb Firn-Fork - ShellCode 126 bytes

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

OpenBSD/x86 Execve ("/bin/sh") - ShellCode 57 bytes

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Sunway ForceControl 6.1 - Multiple Heap Buffer Overflow Vulnerabilities

Sunway ForceControl 6.1 - Multiple Heap Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/48328/info Sunway ForceControl is prone to multiple heap-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data...

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow

UUSEE ActiveX 6.11.0412.1 - Buffer Overflow Exploit Title：UUSEE ActiveX shellcode = unescape“%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800″ + “%u75C0%uFE0F%u1285%u0001%uE800%u001A%u0000%uC009%u1074%u0A6A” + “%u858D%u0114%u0000%uFF50%u0695%u0001%u6100%uC031%uC489%uC350″ +...