Racer v0.5.3 Beta 5 Buffer Overflow

This module exploits the Racer Car and Racing Simulator game versions v0.5.3 beta 5 and earlier. Both the client and server listen on UDP port 26000. By sending an overly long buffer we are able to execute arbitrary code remotely. This module requires Metasploit: https://metasploit.com/download...

Beatport Player 1.0.0.283 Stack Overflow

!/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the cmd executed :d use strict; use...

Beatport Player 1.0.0.283 (.M3U File) Local Stack Overflow Exploit #3

No description provided by source. !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the...

Beatport Player 1.0.0.283 - .m3u Local Stack Overflow (3)

Beatport Player 1.0.0.283 - .m3u Local Stack Overflow 3 !/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait...

Beatport Player 1.0.0.283 - '.m3u' Local Stack Overflow (3)

!/usr/bin/perl Beatport Player 1.0.0.283 .M3U File Stack Core Overflow ExploitSEH Work Only in WIN SP2 FR Credit to SirGod The Discover Stack The exploiter Whalna rire m3a lprogram mati khdeme hta ti chiyeb lpc :d After exec the exploit wait some sec for see the cmd executed :d use strict; use...

Zinf Audio Player 2.2.1 (PLS File) Stack Buffer Overflow

This module exploits a stack-based buffer overflow in the Zinf Audio Player 2.2.1. An attacker must send the file to victim and the victim must open the file. Alternatively it may be possible to execute code remotely via an embedded PLS file within a browser, when the PLS extension is registered ...

Microsoft Internet Explorer Denial of Service Vulnerability - Apr09

This host is installed with Internet Explorer and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiedosvulnapr09.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer Denial of Service Vulnerability - Apr09 Authors: Sharath S Copyright: Copyrig...

ftpdmin 0.96 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server ...

HTML Email Creator <= 2.1b668 (html) Local SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator = 2.1 build 668 html Local SEH Overwrite Exploit Vendor:...

ftpdmin 0.96 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ============================================== ftpdmin 0.96 Arbitrary File Disclosure Exploit ============================================== !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach o...

FTPDMIN 0.96 - Arbitrary File Disclosure

!/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp server so like we see if we want conect in...

XBMC 8.10 GET Request Remote Buffer Overflow Exploit (SEH) (univ)

No description provided by source. !/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 sehUniversal address!! Tested:Win xp sp2 eng Win vista sp1 Vendor url:http://xbmc.org/ Release date:April the 4th 2009 versions affected: windows all versions. I had tried awhile to get a nice...

XBMC 8.10 Overflow

!/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 sehUniversal address!! Tested:Win xp sp2 eng Win vista sp1 Vendor url:http://xbmc.org/ Release date:April the 4th 2009 versions affected: windows all versions. I had tried awhile to get a nice pop ebx pop ret address and just...

XBMC 8.10 GET Request Remote Buffer Overflow Exploit (SEH) (univ)

Exploit for windows platform in category remote exploits ================================================================= XBMC 8.10 GET Request Remote Buffer Overflow Exploit SEH univ ================================================================= !/usr/bin/env python ''' Xbmc get request remo...

XBMC 8.10 - GET Remote Buffer Overflow (SEH) (Universal)

XBMC 8.10 - GET Remote Buffer Overflow SEH Universal !/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 sehUniversal address!! Tested:Win xp sp2 eng Win vista sp1 Vendor url:http://xbmc.org/ Release date:April the 4th 2009 versions affected: windows all versions. I had tried...

XBMC 8.10 (takescreenshot) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected...

XBMC 8.10 (Get Request) Remote Buffer Overflow Exploit (win)

Exploit for windows platform in category remote exploits ============================================================ XBMC 8.10 Get Request Remote Buffer Overflow Exploit win ============================================================ !/usr/bin/env python ''' Xbmc get request remote buffer...

XBMC 8.10 - 'takescreenshot' Remote Buffer Overflow

!/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected. Restrictions:No restrictions This exploit happe...

XBMC 8.10 GET Overflow

!/usr/bin/env python ''' Xbmc get request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affected. Restrictions:Bad chars need to be filtered. This exploit...

XBMC 8.10 - takescreenshot Remote Buffer Overflow

XBMC 8.10 - takescreenshot Remote Buffer Overflow !/usr/bin/env python ''' Xbmc takescreenshot request remote buffer overflow 8.10 !!! Tested:Win xp sp2 eng Vendor url:http://xbmc.org/ Release date:April the 1st 2009 versions affected: Linux windows tested other versions are also possibly affecte...