WM Downloader 3.0.0.9 - .asx Local Buffer Overflow

WM Downloader 3.0.0.9 - .asx Local Buffer Overflow !/usr/bin/python Title: WM Downloader 3.0.0.9 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode =...

Shadow Stream Recorder 3.0.1.7 Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

CompleteFTP Directory Traversal

Exploit Title: CompleteFTP Server Directory Traversal Date: 2010-03-30 Author: zombiefx [email protected] Software Link: http://www.enterprisedt.com/products/completeftp/download/CompleteFTPSetup.exe Version: CompleteFTP Server v 3.3.0 Tested on: Windows XP SP3 CVE : Code : 230 User test logged...

RM Downloader 3.0.2.1 - .asx Local Buffer Overflow (SEH)

RM Downloader 3.0.2.1 - .asx Local Buffer Overflow SEH !/usr/bin/python Title: RM Downloader 3.0.2.1 .asx Local Buffer Overflow SEH Date: 03-29-2010 Author: b0telh0 Link: http://www.mini-stream.net/downloads/RMDownloader.exe Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process,...

Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

Shadow Stream Recorder 3.0.1.7 (.asx) Local Buffer Overflow

Exploit for windows platform in category local exploits =========================================================== Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow =========================================================== !/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Loc...

RM Downloader 3.0.2.1 - '.asx' Local Buffer Overflow (SEH)

!/usr/bin/python Title: RM Downloader 3.0.2.1 .asx Local Buffer Overflow SEH Date: 03-29-2010 Author: b0telh0 Link: http://www.mini-stream.net/downloads/RMDownloader.exe Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode =...

RM Downloader 3.0.2.1 (.asx) Local Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ======================================================== RM Downloader 3.0.2.1 .asx Local Buffer Overflow SEH ======================================================== !/usr/bin/python Title: RM Downloader 3.0.2.1 .asx Local Buffer Overflow S...

Shadow Stream Recorder 3.0.1.7 - .asx Local Buffer Overflow

Shadow Stream Recorder 3.0.1.7 - .asx Local Buffer Overflow !/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes...

Stud_PE <= v2.6.05 Stack Overflow PoC exploit

Exploit for windows platform in category local exploits ============================================= StudPE = v2.6.05 Stack Overflow PoC exploit ============================================= Exploit Title: StudPE = v2.6.05 Stack Overflow PoC exploit Date: 03/28/2010 Author: zha0 Software Link:...

Stud_PE 2.6.05 - Local Stack Overflow

StudPE 2.6.05 - Local Stack Overflow Exploit Title: StudPE = v2.6.05 Stack Overflow PoC exploit Date: 03/28/2010 Author: zha0 Software Link: http://www.cgsoftlabs.ro/studpe.html Version: StudPE = v2.6.05 Tested on: Windows XP SP3 CHT CVE : Code : Greetz to : nanika, Catherine & chr00t team...

CVE-2010-1131

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service application crash via an HTML document composed of many successive occurrences of the substring...

Hardcoded credentials

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service application crash via an HTML document composed of many successive occurrences of the substring...

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7

JITed egg-hunter stage-0 shellcode Adjusted universal for xp/vista/win7. Shellcode exploit for windows platform // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com//...

CVE-2010-1131

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service application crash via an HTML document composed of many successive occurrences of the substring...

CVE-2010-1131

CVE-2010-1131 describes a denial-of-service vulnerability in Apple Safari 4.0.5 for Windows XP SP3 caused by crafted HTML containing many successive tags. Multiple connected sources corroborate: the issue affects JavaScriptCore.dll used by Safari and leads to application crash under such input, ...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (2)

eDisplay Personal FTP Server 1.0.0 - Authenticated Multiple Stack Buffer Overflows 2 Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference :...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

Exploit for windows platform in category remote exploits ========================================================================= eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF ========================================================================= Exploit Title :...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (2)

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 24, 2010 Author : Sud0 Version : 1.0.0 OS : Windows...

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes

win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes. Shellcode exploit for windows platform 68 9D 61 F9 77 push 0x77C01345 B8 C7 93 C1 77 mov eax,msvcrt.system FF D0 call eax In msvcrt.dll at 0x77C01344 We have string ".cmd", that's the trick. Code will work in WinXP SP3 Pro Rus, in other...