1638 matches found
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file...
Photoshop CS2/CS3 / Paint Shop Pro 11.20 .PNG File BoF Exploit
No description provided by source. / Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Pain...
Gimp 2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Exploit
No description provided by source. / Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap256...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
Exploit for unknown platform in category dos / poc ================================================================ UltraISO = 8.6.2.2011 Cue/Bin Files Local Buffer Overflow PoC ================================================================ !/usr/bin/perl Credit:To n00b for finding this bug and...
GAMSoft TelSrv 1.5 Username Buffer Overflow
This module exploits a username sprintf stack buffer overflow in GAMSoft TelSrv 1.5. Other versions may also be affected. The service terminates after exploitation, so you only get one chance! This module requires Metasploit: https://metasploit.com/download Current source:...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO query string in "every main page," as demonstrated by default.asp...
Adobe Photoshop CS2 / CS3 Unspecified . BMP File Buffer Overflow-vulnerability warning-the black bar safety net
Ghost boy note: with the last, like, CS3 under the test is successful, but the CS2 is not the test, I had previously been with the CS green version, too lazy to go to the next CS2 test. Source: Security vulnerabilities /\ Adobe Photoshop CS2 / CS3 Unspecified . BMP File Buffer Overflow There is a...
Winamp <= 5.34 .MP4 File Code Execution Exploit
No description provided by source. /\ Winamp = 5.34 .MP4 File Code Execution ...
gimp-overflow.txt
/\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow Gimp uses SUNRAS plugin to process .RAS file. But this module is vulnerable to a buffer overflow in setcolortable which leads to code execution. Vulnerable code, sunras.c:862 int ncols, j; guchar ColorMap2563; ncols = sunhdr-lrasmaplength / ...
photoshop-voverflow.txt
/\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3 -Photoshop Elements 5.0 -Corel Paint Shop Pro 11.20 This sploit runs...
irfanview-overflow.txt
/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
abcview-overflow.txt
/ ABC-View Manager 1.42 .PSP File Buffer Overflow ABC-View Manager is vulnerable to an unspecified buffer overflow when processing a crafted .TTF file. This exploit runs calc.exe or binds shell to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: Open that in...
Winamp <= 5.34 .MP4 File Code Execution Exploit
Exploit for unknown platform in category local exploits =============================================== Winamp = 5.34 .MP4 File Code Execution Exploit =============================================== /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional...
Winamp 5.34 - .mp4 Code Execution
Winamp 5.34 - .mp4 Code Execution /\ Winamp = 5.34 .MP4 File Code Execution Winamp MP4's plugin fails to handle exceptional conditions, which can lead to code execution. However exploitation is hard, firstly because of the return address. This code exploits a call eax, and it might be complicated...
RealPlayer 10 - '.ra' Remote Denial of Service
!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...
IrfanView <= 4.00 .IFF File Buffer Overflow Exploit
No description provided by source. / IrfanView = 4.00 .IFF File Buffer Overflow &nbs...
IrfanView 4.00 - .iff Local Buffer Overflow
IrfanView 4.00 - .iff Local Buffer Overflow / IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow
No description provided by source. /\ Gimp v2.2.14 .RAS File SUNRAS Plugin Buffer Overflow ...
IrfanView 4.00 - '.iff' Local Buffer Overflow
/ IrfanView / include "stdio.h" include "stdlib.h" / win32exec - EXITFUNC=process CMD=calc.exe Size=138 Encoder=PexFnstenvSub http://metasploit.com / unsigned char CalcShellcode = "\xfc\xe8\x44\x00\x00\x00\x8b\x45\x3c\x8b\x7c\x05\x78\x01\xef\x8b"...
Photoshop CS2CS3 Paint Shop Pro 11.20 - .png Local Buffer Overflow
Photoshop CS2CS3 Paint Shop Pro 11.20 - .png Local Buffer Overflow /\ Photoshop CS2/CS3, Paint Shop Pro 11.20 .PNG File Buffer Overflow Like bitmap files, PNG files can do great things =D. In french: "buffer overflow a gogo!" The generated .PNG file will work for: -Photoshop CS2 -Photoshop CS3...