Sysax 5.57 - Directory Traversal

!/usr/bin/python Title: Sysax Multi Server = 5.57 Directory Traversal Tool Post Auth Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bit Date Discovered: March 27, 2012 Vendor Contacted: March 29, 2012 Vendor Response: April 3, 2012 Vendor Fixed: Currently working on fi...

FoxPlayer 2.6.0 Denial Of Service

Denial of Service in FoxPlayer version 2.6.0 =================================================================================== Exploit Title:Denial of Service in FoxPlayer version 2.6.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.exe Author: Ahmed Elhady Mohamed Emai...

IBM Cognos tm1admsd.exe Overflow

This module exploits a stack buffer overflow in IBM Cognos Analytic Server Admin service. The vulnerability exists in the tm1admsd.exe component, due to a dangerous copy of user controlled data to the stack, via memcpy, without validating the supplied length and data. The module has been tested...

FoxPlayer version 2.6.0 Denial of Service

Exploit for windows platform in category dos / poc Denial of Service in FoxPlayer version 2.6.0 =================================================================================== Exploit Title:Denial of Service in FoxPlayer version 2.6.0 Download link...

FoxPlayer 2.6.0 - Denial of Service

FoxPlayer 2.6.0 - Denial of Service Denial of Service in FoxPlayer version 2.6.0 =================================================================================== Exploit Title:Denial of Service in FoxPlayer version 2.6.0 Download link :http://www.foxmediatools.com/installers/fox-player-setup.e...

MailMax 4.6 POP3 Buffer Overflow

!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...

MailMax 4.6 - POP3 USER Remote Buffer Overflow

MailMax 4.6 - POP3 USER Remote Buffer Overflow !/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffe...

Microsoft Windows Media Player v. 11.0.5721.5145 .snd Memory Corruption

Exploit for windows platform in category local exploits // Title: Microsoft Windows Media Player v. 11.0.5721.5145 .snd Memory Corruption // Date: 3/24/2012 // Author: Dan Fosco // Vendor or Software Link: www.microsoft.com // Version: 11.0.5721.5145 // Category: local // Tested on: Windows XP SP...

Havalite CMS Shell Upload / SQL Injection / Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Havalite CMS latest (FU/SQLi/dCDB) Mutiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

This module exploits a buffer overflow in UltraVNC Viewer 1.0.2 Release. If a malicious server responds to a client connection indicating a minor protocol version of 14 or 16, a 32-bit integer is subsequently read from the TCP stream by the client and directly provided as the trusted size for...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ class Metasploit3...

UltraVNC 1.0.2 Client (vncviewer.exe) Buffer Overflow

Exploit for php platform in category web applications $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ class Metasploit...

Ricoh DC DL-10 SR10 FTP USER Command Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Ricoh DC Software DL-10 SR10 FTP Server (SR10.exe) - FTP USER Command Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Ricoh DC DL-10 SR...

Ricoh DC Software DL-10 FTP Server <= 1.1.0.6 Remote Buffer Overflow

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: Ricoh DC Software DL-10 FTP Server SR10.exe = 1.1.0.6 Remote Buffer Overflow Vulnerability Version: = 1.1.0.6 Date: 2012-02-05 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://www.ricohpmmc.com...

Zinf Audio Player (m3u file) Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python Product Details: --------------------------------------------------------------------------------- The Zinf audio player is a simple, but powerful audio player for Linux and Win32. It supports MP3, Ogg/Vorbis, WAV and Audio ...

dokuwiki Arbitrary File Upload Vulnerabilirty

Exploit for php platform in category web applications ---- /\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\-/\- -/ --------------------------------|----------------------------------/--------| -/ + Exploit Title : Release / dokuwiki Arbitrary File Upload Vulnerabilirty...

RM Downloader 3.1.3.3.2010.06.26 - '.m3u' Local Buffer Overflow (Metasploit)

require 'msf/core' class Metasploit3 'RM Downloader Version 3.1.3.3.2010.06.26 .m3u Buffer Overflow MSF', 'Description' = %q RM Downloader Version 3.1.3.3.2010.06.26 has buffer overflow vuln. we will create file. File type be m3u. File name is exp.m3u if we open exp.m3u whit RM Downloader Version...

VLC v. 1.1.11 .eac3 DOS

Exploit for windows platform in category dos / poc Exploit Title: VLC v. 1.1.11 .eac3 DOS Date: 3/14/2012 Author: Dan Fosco Vendor or Software Link: www.videolan.org Version: 1.1.11 Category:: local Google dork: n/a Tested on: Windows XP SP3 64-bit Demo site: n/a include int mainint argc, char ar...