6561 matches found
Orbit Downloader - URL Unicode Conversion Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Microsoft ASP.NET 1.0/1.1 - Unicode Character Conversion Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12574/info It is reported that ASP.NET is prone to various cross-site scripting attacks. These issues when ASP.NET converts Unicode characters ranging from U+ff00-U+ff60 to ASCII. Apparently, the application fails to...
MS SQL Server 2000,MS Jet 4.0 Engine Unicode Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5057/info Microsoft SQL Server is prone to a remotely exploitable unicode-based buffer overflow condition. This condition occurs when the OpenDataSource function is used with MS Jet Engine. This issue may be exploited to...
Light Alloy 4.7.3 (.m3u) - SEH Buffer Overflow (Unicode)
No description provided by source. !/usr/bin/perl Exploit Title: Light Alloy 4.7.3 .m3u - SEH Buffer Overflow Unicode Date: 11-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Light Alloy v4.7.3 Vendor Site: http://www.light-alloy.ru/ Vulnerable Software Link:...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
CORE Multimedia Suite 2011 CORE Player 2.4 - Buffer Overflow (.m3u)
No description provided by source. Exploit: CORE Multimedia Suite 2011 CORE Player 2.4 Unicode SEH Buffer Overflow Exploit .m3u Date: 18.03.11 Author: Rh0atz1p.biz Software Link: http://mjm-soft.zzl.org/COREMMS2011.zip Version: 2.4 Tested on: WinXP Pro SP3 EN VirtualBox The application does not...
M.J.M. Quick Player 1.2 - Stack BOF
No description provided by source. Vulnerability : M.J.M. Quick Player v1.2 Stack BOF Discovered by : mrme seeleymagicathotmaildotcom Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : dec 28th, 2009 Type : local and remote code execution OS : Windows Product : M.J.M...
Huawei Technologies Internet Mobile - Unicode SEH Exploit
No description provided by source. !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Vulnerable : Etisalat , Vodafone , Meditel ,...
Omnicron OmniHTTPD 2.0.4-8 File Source Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2788/info Submitting a specially crafted GET request for a known file .php, .pl, or .shtml, could cause OmniHTTPD to disclose the source code of the requested resource. The GET requested would have to be appended with the...
Aesop GIF Creator <= 2.1 - (.aep) Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link: http://www.yukudr.com/h84561/aesopsetup.exe...
AIMP2 Audio Converter <= 2.53 build 330 Playlist (.pls) Unicode BOF
No description provided by source. !/usr/bin/python Author contact : seeleymagicathotmaildotcom For educational purposes only You have been warned My original crash breakdown: EAX 001B0020 UNICODE AAAAAAAAAAAAAAAAAAAA ECX 00000273 EDX 00000C4C EBX 00000000 ESP 0012DCA8 EBP 0012DD64 ESI 001B6610...
Weborf HTTP Server Denial of Service Vulnerability
No description provided by source. DCA-0012 Software - Weborf HTTP Server Vendor Product Description - Weborf is a lightweight Web server written in C. It supports IPv6 and basic authentication. It doesn't implement the full HTTP specification, but can be used to easily share directories or files...
RPM Select/Elite 5.0 - (.xml config parsing) Unicode Buffer Overflow PoC
No description provided by source. !/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
Write-to-file Shellcode (Win32)
No description provided by source. ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server 2003, Server 2008, Vista, Windows 7 ; ; Size: 278 bytes ;...
Microsoft Unicode Scripts Processor - Remote Code Execution
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Final Binary Analysis | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : Microsoft Unicode Scripts Processor Remote Code Execution Version : usp10.dll XP , Vista Analysis :...
BS.Player 2.57 Buffer Overflow Exploit (Unicode SEH)
No description provided by source. +Exploit Title: Exploit Buffer Overfloe Bsplayer 2.57UNICODE-SEH +Date: 01\07\2010 +Author: C4SS!0 G0M3S +Software Link: http://www.bsplayer.com/services/downlad-free-bsplayer.php?type=2 +Version: 2.57 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A /...
Apache Struts < 2.2.0 - Remote Command Execution
No description provided by source. $Id: strutscodeexec.rb 13586 2011-08-19 05:59:32Z bannedit $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
ScriptFTP 3.3 - Remote Buffer Overflow (MSF)
No description provided by source. Exploit Title: ScriptFTP 3.3 Remote Buffer Overflow MSF Date: Sept 20 2011 Author: otoy Version: 3.3 Tested on: Windows XP SP3 CVE : - EDB-ID: 17876 Thanks: cyb3r.anbu, spentera-team, dE-team, offsec, exploit-db, corelanc0d3r class Metasploit3 Msf::Exploit::Remo...
Microsoft Windows XP/2000/NT 4 ntdll.dll Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/7116/info The Windows library ntdll.dll includes a function that does not perform sufficient bounds checking. The vulnerability is present in the function RtlDosPathNameToNtPathNameU and may be exploited through other...