IrfanView 3.99 - .ani Local Buffer Overflow (1)

IrfanView 3.99 - .ani Local Buffer Overflow 1 / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Ha...

ipswitch505-overflow.txt

/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...

Microsoft Windows - Animated Cursor '.ani' Local Buffer Overflow

/ MS Windows .ANI File Local Buffer Overflow Credits go to Trirat Puttaraksa cause his PoC inspired this source. devcode's exploit didnt work for me, so I made my own. This exploit launches calc.exe on a lot of app Word, Winamp, etc.... Turn off DEP to get it work on Explorer. Tested against Win ...

IrfanView 3.99 - '.ani' Local Buffer Overflow (1)

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

irfanview-ani.txt

/ IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu Note: th...

IrfanView 3.99 (.ANI File) Local Buffer Overflow Exploit

No description provided by source. / IrfanView 3.99 .ANI File Buffer Overflow IrfanView is vulnerable to a buffer overflow when opening a crafted .ani file. The overflow occurs while it is creating a snapshot of the file. This exploit launches calc.exe. Tested against Win XP SP2 FR. Have Fun! Cod...

PHP 5.2.1 with PECL phpDOC local buffer overflow

?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC" die"you need the phpDOC extension loaded."; $scode=...

php521_phpdoc_bof.txt

original url: http://retrogod.altervista.org/php521phpdocbof.html...

PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit

No description provided by source. ?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC"...

PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit ======================================================== 0day.today 2018-03-14...

newsreactor-1.txt

/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 1 There is remote buffer overflow in NewsReactor 20070220 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to your ip:119 and ask him to...

NewsReactor 20070220 Article Grabbing Remote BoF Exploit (2)

Exploit for unknown platform in category remote exploits ============================================================ NewsReactor 20070220 Article Grabbing Remote BoF Exploit 2 ============================================================ / NewsReactor 20070220 Article Grabbing Remote Buffer...

News Bin Pro 4.32 Article Grabbing Remote Unicode BoF Exploit

No description provided by source. / News Bin Pro 4.32 Article Grabbing Remote Unicode Buffer Overflow There is remote buffer overflow in News Bin Pro 4.32 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to...

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (2)

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow 2 / NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 Check the other advisory for technical details. This exploit connects to your newsgroups provider and posts a crafted article. Ask your victim to grab it to...

News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow

News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow / News Bin Pro 4.32 Article Grabbing Remote Unicode Buffer Overflow There is remote buffer overflow in News Bin Pro 4.32 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someo...

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (2)

/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 2 Check the other advisory for technical details. This exploit connects to your newsgroups provider and posts a crafted article. Ask your victim to grab it to trigger the bug and execute calc.exe. Return address should work on...

TurboFTP 5.30 Build 572 (newline/LIST) Multiple Remote DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================== TurboFTP 5.30 Build 572 newline/LIST Multiple Remote DoS Exploit ================================================================== / TurboFTP 5.30 Build 572 Multiple Remote DoS...

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow (2)

QK SMTP 3.01 - RCPT TO Remote Buffer Overflow 2 !/bin/perl https://www.securityfocus.com/bid/20681 tested on winXp Pro SP0 English/winXp Pro SP2 Italian/win 2k SP4 Italian/English return address is universal bind a remote cmd.exe on target host on 4444 port; based on expanders original exploit...

PHP <= 4.4.3 / 5.1.4 (objIndex) Local Buffer Overflow Exploit PoC

No description provided by source. ?php / Author: Heintz Date: 4-th august 2006 Greets: Waraxe from www.waraxe.us All buds at www.plain-text.info Torufoorum ext/standard/scanf.c line 887 --- if numVars current = argsobjIndex++; --- objIndex points past the end of array in other format cases too...