7304 matches found
Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit
No description provided by source. / rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player = 4.1.7 .M3U Stack Overflow 0-DAY Description: A stack overflow occurs when parsing an .m3u file...
Apple Mac OSX - 'mount_smbfs' Local Stack Buffer Overflow
/ Copyright C 2007-2008 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: CVE-2007-3876 http://docs.info.apple.com/article.html?artnum=307179 http://seclists.org/fulldisclosure/2007/Dec/0445.html...
Linux Kernel < 2.6.11.5 BLUETOOTH Stack Local Root Exploit
No description provided by source. / LINUX KERNEL Not tainted VLI EFLAGS: 00010286 2.6.9 EIP is at btsockcreate+0x3d/0x13...
RavWare Software - .MAS Flic Control Remote Buffer Overflow
RavWare Software - .MAS Flic Control Remote Buffer Overflow ----------------------------------------------------------------------- RavWare Software MAS Flic Control "FileName" method Buffer Overflow url: https://www.ravware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...
Rosoft Media Player 4.1.7 - '.m3u' Local Stack Overflow
/ rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player include / Invalid chars: 0x1A 0xA 0xD 0x00 win32bind - EXITFUNC=thread LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char uszShellcode =...
CCProxy Telnet Proxy Ping remote stack overflow analysis-vulnerability warning-the black bar safety net
By: mad Dog-B. C. T Simple to understand a bit of the vulnerability reason, the problem lies in the ping, the first to trigger this vulnerability see the effect. Turn on the CC, and then telnet 127.0.0.1 2 3, appeared the following tips CCProxy TelnetCCProxy Telnet Service Ready. CCProxy Telnet...
WinRAR 3.30 Long Filename Buffer Overflow Exploit
No description provided by source. / WinRAR Buffer Overflow 3.30 Exploit Bug founded by: Vredited By Alpha Programmer & Trap-Set U.H Team Exploit made by: K4P0 Contact: [email protected] / include stdio.h include windows.h int mainvoid char EvilBuff1024; // Normal cmd.exe shellcode...
Microsoft Office Excel 2003 Hlink Stack/SEH Overflow Exploit
No description provided by source. !perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Manuel Santamarina Suarez The vulnerability was discovered by 'kcope'. First click on the link and then on the "Yes" button to cause the stack overflow...
QuickTime RTSP Response Content-type remote stack rewrite exploit
Everyone Loves O|0+|O the Hypnotoad... |...| | | =o0O=====O0o=============================== | QuickTime RTSP Response Content-type | | remote stack rewrite exploit for IE 6/7 | | by Yag Kohha skyhole at gmail.com | =========================================== Exploit tested on: - Windows Vista -...
Microsoft Windows FTP客户端多个远程溢出漏洞
Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统自带的FTP客户端实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 Windows操作系统所捆绑的FTP客户端没有正确地验证mget、dir、user、password、ls等命令，如果用户使用FTP客户端连接到了FTP服务器上带有超长文件夹名或文件名的目录并发布了上述命令的话，就可以触发缓冲区溢出，导致拒绝服务或执行任意指令。但这个漏洞较难利用，因为需要社会工程学且必须以有漏洞命令参数的形式注入shellcode。 Microsoft Windows XP Microsoft Windo...
Apple QuickTime 7.2/7.3 RSTP Response Code Exec Exploit (Vista/XP)
No description provided by source. / ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on:...
Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit (IE7/FF/Opera)
No description provided by source. !/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista...
aquick-rstp.txt
/ ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on: - Quicktime 7.3 on Windows Vista, Result: SEH Overwrite, Code Exec -...
Apple QuickTime 7.27.3 (Internet Explorer 7 Firefox Opera) - RTSP Response Universal
Apple QuickTime 7.27.3 Internet Explorer 7 Firefox Opera - RTSP Response Universal !/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista This exploit is completely "Universal" .... It h...
Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit (IE7/FF/Opera)
Exploit for unknown platform in category remote exploits ====================================================================== Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit IE7/FF/Opera ====================================================================== !/usr/bin/python...
Apple QuickTime 7.3 RTSP Response Universal Exploit (Vista / XP)
No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response Vista / XPSP2 Universal Bug discovered by Krystian Kloskowski h07 [email protected] Edited by muts - offensive-security.com http://www.offensive-security.com Tested on XP SP2 and Vista EN QuickTime/7.3...
VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit
No description provided by source. / VMware Tools hgfs.sys Local Privilege Escalation Vulnerability Exploit Created by SoBeIt Main file of exploit Tested on: Windows XP PRO SP2 Chinese Windows XP PRO SP2 English...
联众 ConnectAndEnterRoom
No description provided by source. html title7jdg's Blog/title object classid="clsid:AE93C5DF-A990-11D1-AEBD-5254ABDD2B69" id='target' style='display:none'/object body SCRIPT language="javascript" ...
Microsoft Jet数据库引擎MDB文件解析远程缓冲区溢出漏洞
Microsoft Jet DataBase Engine是一款Access数据库引擎。 Microsoft Jet数据库引擎处理MDB文件时存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 当Microsoft Office Access解析MDB文件时，会调用Jet Engine msjet40.dll来解析它，通过构建恶意的MDB，会触发一个栈的缓冲区溢出： C:\\Windows\\System32\\msjet40.dll, version is 4.0.8618.0 .text:1B0B72BB mov ecx, edx ; ecx=0x5200...
迅雷5 pplayer.dll 组件漏洞
出现严重0-Day漏洞，病毒作者可利用该漏洞编写恶意网页，当用于浏览这些网页的时候，就会感染病毒，进而该病毒可以盗窃用户的帐号和密码，从而使用户遭受到损失。 与上次的不同，这次有漏洞的程序出现在迅雷看看（Thunder KanKan）上，pplayer.dll 组件版本号：1.2.3.49，CLSID:F3E70CEA-956E-49CC-B444-73AFE593AD7F. 该组件内的一个函数FlvPlayerUrl上，存在边界检查不严格的问题，当向其传递过长参数时，会导致程序溢出。病毒作者可以利用这个缺陷，精心编写Shellcode，溢出，然后可以下载任意恶意病毒文件。 迅雷5...