4755 matches found
Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution (PoC)
Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution PoC / Copyright C 2006-2007 Aviv Raff http://aviv.raffon.net Greetz: hdm, L.M.H, str0ke, SkyLined Compile and upload to the victim's desktop as one of the following hidden DLL files: - sqmapi.dll - imageres.dll - schannel.dll Run I...
CVE-2006-5585: Undefined Security Weakness
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...
Microsoft Windows Manifest File Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...
Windows XP 3 3 8 9(terminals)multi-user login-bug warning-the black bar safety net
The first step:the first is on Windows XP SP2 installed the official version, according to the conventional manner of mounting can be, not repeat them here. Second step:prepare an earlier version of the SP2 terminal server softwareit is said that from Build 2 0 8 2 start the function is disabled,...
3comftp_xpsp2.rb.txt
3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb Default port is 69 if not specified require 'socket' win32bind...
Microsoft Windows图形设备接口附加库拒绝服务
No description provided by source. !/bin/perl 0-day crash poc gdiplus.dll by Mr.Niega Check out hex offset 2e play with the 2byte's, set it to 20 if you want a non crashing ico file Division by zero this POC tested with: win XP ENG sp2 And for SYS 49152 im that 0daysec guy ; Rename Poc.ico to...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit
No description provided by source. 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby 3comftpdxpsp2.rb victimhost victimport Defau...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow Exploit
Exploit for unknown platform in category remote exploits ==================================================================== 3Com TFTP Service Default port is 69 if not specified require 'socket' win32bind - EXITFUNC=seh LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com sc1 =...
3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow
3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...
3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC
No description provided by source. !/usr/bin/python Buffer Overflow Long transporting mode Vulnerability Exploit This is just a DoS exploiting code Tested on Windows xp SP2 Requires python and impacket Coded by Liu Qixu Of NCNIPC SUMMARY: 3CTftpSvc TFTP Server is a Freeware TFTP server for Window...
Windows Media ASX PlayList File Denial Of Service Vulnerability
Windows Media ASX PlayList File Denial Of Service Vulnerability Tested: Windows Media 10.00.00.4036 Windows XP SP2 file "example.asx": asxentry ref...
XMPlay 3.3.0.4 (M3U Filename) Local Buffer Overflow Exploit
No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...
XMPlay 3.3.0.4 (PLS) Local/Remote Buffer Overflow Exploit
No description provided by source. / =================================================================== 0-day XMPlay 3.3.0.4 .PLS Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow...
XMPlay 3.3.0.4 - '.M3U' Filename Local Buffer Overflow
/ =================================================================== 0-day XMPlay 3.3.0.4 .M3U Filename Buffer Overflow Exploit =================================================================== XMPlay 3.3.0.4 and lower experiance a stack-based buffer overflow when loading malformed M3U files...
WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow
/ WinZip - prdelka / include include inclu...
D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)
No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::DLinkDWLG132WiFiRates Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DWL-G132 Wireless Driver Beacon Rates...
CVE-2006-4689: Undefined Security Weakness
Unspecified vulnerability in the driver for the Client Service for NetWare CSNW in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service hang and reboot via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability...
CVE-2006-4691: Undefined Security Weakness
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service wkssvc.dll in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname...
CVE-2006-4688: Undefined Security Weakness
Buffer overflow in Client Service for NetWare CSNW in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."...
MS06-070 Microsoft Workstation Service NetpManageIPCConnect Overflow
This module exploits a stack buffer overflow in the NetApi32 NetpManageIPCConnect function using the Workstation service in Windows 2000 SP4 and Windows XP SP2. In order to exploit this vulnerability, you must specify the name of a valid Windows DOMAIN. It may be possible to satisfy this conditio...