7594 matches found
linux/x86 - /sbin/iptables -F 40 bytes
linux/x86 /sbin/iptables -F 40 bytes. Shellcode exploit for linx86 platform / By Kris Katterjohn 11/18/2006 40 byte shellcode to flush iptables for Linux x86 section .text global start start: ; execve"/sbin/iptables", "/sbin/iptables", "-F", NULL , NULL push byte 11 pop eax cdq push edx push word...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
Exploit for unknown platform in category remote exploits ================================================================== Winamp = 5.12 Crafted PLS Remote Buffer Overflow Exploit perl ================================================================== !/usr/bin/perl -w...
Winamp <= 5.12 (Crafted PLS) Remote Buffer Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
Winamp 5.12 - .pls Remote Buffer Overflow (Perl) (2)
Winamp 5.12 - .pls Remote Buffer Overflow Perl 2 !/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
PHP 4.4.55.2.1 - shmop Local Code Execution
PHP 4.4.55.2.1 - shmop Local Code Execution ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the...
Winamp 5.12 - '.pls' Remote Buffer Overflow (Perl) (2)
!/usr/bin/perl -w =============================================================================================== Winamp 5.12 Playlist UNC Path Computer Name Overflow Perl Exploit By Umesh Wanve [email protected]...
PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie)
This module exploits an integer overflow vulnerability in the unserialize function of the PHP web server extension. This vulnerability was patched by Stefan in version 4.5.0 and applies all previous versions supporting this function. This particular module targets numerous web applications and is...
PHP <= 4.4.4 unserialize() ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP 4.4.4 - Unserialize() ZVAL Reference Counter Overflow (PoC)
PHP 4.4.4 - Unserialize ZVAL Reference Counter Overflow PoC ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code...
MOPB-01-2007:PHP 4 Userland ZVAL Reference Counter Overflow Vulnerability
Summary The Month of PHP Bugs starts with a PHP 4 security vulnerability that exploits a problem known for many years among the PHP developers. When a PHP application is run in PHP 4 it can overflow the variable reference counter because it is only 16 bit wide. Whenever this happens it will resul...
PHP 4 Userland ZVAL Reference Counter Overflow Exploit PoC
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || // // | |/ || '|/ |/ -| ' / -/ |||| /| || / //...
madwifi <= 0.9.2.1 WPA/RSN IE Remote Kernel Buffer Overflow Exploit
Exploit for linux platform in category remote exploits =================================================================== madwifi antifork.org -- 10/1/2007 CVE: 2006-6332 Laurent BUTTI, Jerome RAZNIEWSKI, Julien TINNES for wpa .... memcpybuf, se-sewpaie, se-sewpaie1 + 2 .... .... the function...
PHP 4 - Userland ZVAL Reference Counter Overflow (PoC)
PHP 4 - Userland ZVAL Reference Counter Overflow PoC Refcount drops down to 0...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit (perl)
No description provided by source. !/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected]...
PHP 4 - Userland ZVAL Reference Counter Overflow (PoC)
Refcount drops down to 0 // = String gets freed // 4 Free some more...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode (Perl)
3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Perl !/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$A...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode
!/usr/bin/perl -w =============================================================================================== 3Com TFTP Service \n\n"; exit; $target = IO::Socket::INET-newProto='udp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "Cannot connect to $ARGV0 on port $A...
News Rover 12.1 Rev 1 Remote Stack Overflow Exploit (perl)
Exploit for unknown platform in category local exploits ========================================================== News Rover 12.1 Rev 1 Remote Stack Overflow Exploit perl ========================================================== !/usr/bin/perl...
News Rover 12.1 Rev 1 - Stack Overflow (2)
News Rover 12.1 Rev 1 - Stack Overflow 2 !/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected]...