Google Chrome 0.2.149.27 'SaveAs' Function Buffer Overflow Vulnerability

We SVRT-Bkis have just discovered vulnerability in Google Chrome 0.2.149.27. This is a Critical Buffer Overflow Vulnerability permiting hacker to perform a remote attack and take complete control of the affected system. We have submitted this Vulnerability to Google. They confirmed and assign a...

CitectSCADA ODBC Server - Remote Stack Buffer Overflow (Metasploit)

CitectSCADA ODBC Server - Remote Stack Buffer Overflow Metasploit $Id: citectscadaodbc.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Google Chrome Browser 0.2.149.27 (SaveAs) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ============================================================ Google Chrome Browser 0.2.149.27 SaveAs Remote BOF Exploit ============================================================ PoC Code is in Attach file because this file is saved in...

Google Chrome 0.2.149.27 - 'SaveAs' Remote Buffer Overflow

PoC Code is in Attach file because this file is saved in 'Unicode' type for exploit. Here is Description for this Vuln : · Type of Issue : Buffer Overflow. · Affected Software : Google Chrome 0.2.149.27. · Exploitation Environment : Google Chrome Language: Vietnamese on Windows XP SP2. ·...

Red Hat Directory Server LDAP内存泄漏拒绝服务漏洞

BUGTRAQ ID: 30872 CVE ID: CVE-2008-3283 CNCVE ID：CNCVE-20083283 Red Hat Directory Server是一款LDAPv3兼容的目录服务程序。 Red Hat Directory Server存在多个内存泄漏问题，远程攻击者可以利用漏洞使目录服务器消耗大量内存，可能导致应用程序崩溃或不可期的终止。 目前没有详细漏洞细节提供。 RedHat Directory Server 8 EL 5 RedHat Directory Server 8 EL 4 RedHat Directory Server 7.1 SP6...

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow

Friendly Technologies - fwRemoteCfg.dll ActiveX Remote Buffer Overflow Friendly Technologies - wayyy too friendly... function exploit var Evil = ""; // Our Evil Buffer var DamnIE = "\x0C\x0C\x0C\x0C"; // Damn IE changes address when not in the 0x00 - 0x7F range : // Need to use heap spray rather...

FlashGet 1.9.0.1012 - 'FTP PWD Response' Remote Buffer Overflow (SafeSEH)

!/usr/bin/perl ksOSe 08/17/2008 bypass safeseh using flash9f.ocx. use warnings; use strict; use IO::Socket; win32exec - EXITFUNC=seh CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x6b"...

blazedvd_bof.pl.txt

!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...

FlashGet 1.9 - FTP PWD Response Remote Buffer Overflow (PoC)

FlashGet 1.9 - FTP PWD Response Remote Buffer Overflow PoC !/usr/bin/python FlashGet 1.9 FTP PWD Response 0day Remote Buffer Overflow PoC Exploit Bug discovered by Krystian Kloskowski h07 Testen on: FlashGet 1.9 / XP SP2 Polish Product URL: http://www.flashget.com/en/download.htm?uid=undefined...

FlashGet 1.9 (FTP PWD Response) Remote BOF Exploit PoC 0day

Exploit for unknown platform in category dos / poc =========================================================== FlashGet 1.9 FTP PWD Response Remote BOF Exploit PoC 0day =========================================================== !/usr/bin/python FlashGet 1.9 FTP PWD Response 0day Remote Buffer...

CVE-2008-3648

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008...

BlazeDVD 5.0 - .PLF Playlist File Remote Buffer Overflow

BlazeDVD 5.0 - .PLF Playlist File Remote Buffer Overflow !/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other...

MS Windows Plug-and-Play Service Remote Universal Exploit (MS05-039)

No description provided by source. / HOD-ms05039-pnp-expl.c: 2005-08-10: PUBLIC v.0.2 Copyright c 2005 houseofdabus. MS05-039 Microsoft Windows Plug-and-Play Service Remote Overflow Universal Exploit + no crash shellcode .:: houseofdabus ::...

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow

Trend Micro OfficeScan - ObjRemoveCtrl ActiveX Control Buffer Overflow Trend Micro OfficeScan ObjRemoveCtrl ActiveX Control Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

WinZIP <= 8.1 Command Line Local Buffer Overflow Exploit

No description provided by source. / WinZip Command Line Local Buffer Overflow http://securitytracker.com/alerts/2004/Sep/1011132.html http://www.winzip.com/wz90sr1.htm Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan / / Tested with...

Document Imaging SDK 10.95 ActiveX Buffer Overflow PoC

No description provided by source. !-- Document Imaging SDK Buffer Overflow Vulnerability DoS Proof of concept Author: r0ut3r Mail : writ3r at gmail.com ----------------------------- -Tested on WinXP Pro SP2 Version: 10.95 Vendor : Black Ice Software Price : $999 File : biimgfrm.ocx CLSID:...

documentimaging-overflow.txt

Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBP 0013EA20 - 0013EAA4 ESP 0013E804...

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

Document Imaging SDK 10.95 - ActiveX Buffer Overflow PoC Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc:...

Document Imaging SDK 10.95 - ActiveX Buffer Overflow (PoC)

Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EAX 001919C0 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBX 41414141 ECX 00004141 EDX 00150168 - 00000000 EDI 41414141 ESI 001919B8 - Asc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA EBP 0013EA20 - 0013EAA4 ESP 0013E804...

Download Accelerator Plus - DAP 8.x m3u File Buffer Overflow Exploit (c)

No description provided by source. include stdio.h include stdlib.h / DAP 8.x .m3u File BOF C Exploit for XP SP2,SP3 English SecurityFocus Advisory: Download Accelerator Plus DAP is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied inpu...