DNS Reverse Download and Exec Shellcode

No description provided by source. Shellcode: download and execute file via reverse DNS channel Features: Windows 7 tested UAC without work svchost.exe makes requests via getaddrinfo Firewall/Router/Nat/Proxy bypass reverse connection like dnscat do, but without sockets and stable! NO SOCKET DNS...

Dexter (CasinoLoader) Panel - SQL Injection

No description provided by source. Exploit Title: Dexter CasinoLoader Panel SQLi Date: Feb, 13, 2014 Exploit Author: Brian Wallace @botnethunter Version: CasinoLoader Tested on: Windows 7, Ubuntu, Debian import pycurl import urllib import cStringIO import base64 import argparse import sys import...

MS13-009 Microsoft Internet Explorer COALineDashStyleArray Integer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Tiny Server <= 1.1.9 HTTP HEAD DoS

No description provided by source. !/usr/bin/python Overflow exploiting a vulnerability in Tiny Server =1.1.9 HTTP HEAD request. Date of Discovery: 3/19/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://tinyserver.sourceforge.net/tinyserverfull.zip Software Version: =1.1.9 Target...

TeraCopy 2.3 (default.mo) Language File Integer Overflow Vulnerability

No description provided by source. ?!J:\Perl\bin\perl.exe TeraCopy 2.3 default.mo Language File Integer Overflow Vulnerability Vendor: Code Sector Product web page: http://www.codesector.com Affected version: 2.27 and 2.3 beta 2 Summary: TeraCopy is designed to copy and move files at the maximum...

Internet Explorer 8, 9 & 10 - CInput Use-After-Free (MS14-035) - Crash PoC

No description provided by source. !-- Exploit Title: MS14-035 Internet Explorer CInput Use-after-free POC Product: Internet Explorer Vulnerable version: 8,9,10 Date: 23.06.2014 Exploit Author: Drozdova Liudmila, ITDefensor Vulnerability Research Team http://itdefensor.ru/ Vendor Homepage:...

xeams email server 4.4 build 5720 - Stored XSS

No description provided by source. !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Xeams Email Server Version: 4.4 Build 5720 Vendor Site: http://www.xeams.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with disclosure dat...

MediaHuman Music Converter 1.0.1 .wav and .mp3 Denial of Service Vulnerability

No description provided by source. Exploit Title: MediaHuman Music Converter 1.0.1 .wav and .mp3 Denial of Service Date: September 17, 2010 Author: modpr0be Software Link: http://www.mediahuman.com/download.html Version: 1.0.1 Tested on: Windows 7 CVE : How it works? Go to Add Files... -- Choose...

Write-to-file Shellcode (Win32)

No description provided by source. ; Write-to-file Shellcode ; ; This shellcode was used in the exploit for: CVE-2010-0425 ; Supported: Windows 2000, WinXP, Server 2003, Server 2008, Vista, Windows 7 ; ; Size: 278 bytes ;...

AdobeCollabSync Buffer Overflow Adobe Reader X Sandbox Bypass

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020000 Buffer Overflow

No description provided by source. $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Adobe Flash Player Type Confusion Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::BrowserExploitServer def...

MS14-017 Microsoft Word RTF Object Confusion

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initializeinfo =...

Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overflow

No description provided by source. Sony PC Companion 2.1 Load Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion i...

Audacious Player 3.4.2/3.4.1 - (.mp3) Crash PoC

No description provided by source. Exploit Title: Audacious Player 3.4.2/3.4.1 Windows .mp3 - Crash POC Date: 26.11.2013 Exploit Author: Akin Tosunlar Software Link3.4.2: http://distfiles.audacious-media-player.org/audacious-3.4.2-win32.zip Software Link3.4.1:...

NCH Software Express Burn Plus 4.68 (.EBP) Project File Buffer Overflow

No description provided by source. ?!/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.68 Summary: Express Burn is a program that allows you to create and copy...

Webkit (Safari 4.0.5) - Blink Tag Stack Exhaustion DoS

No description provided by source. html script loop1; var a = blink; function loop1 document.writea; setIntervalloop2,0; function loop2 document.writea; setIntervalloop1,0; /script body Webkit Safari Stack Exhaustion DoS Found By: DrIDE Credit To: Mattias Karlsson Reference:...

GOM Media Player (GOMMP) 2.2.56.5183 - Memory Corruption PoC

No description provided by source. !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOMMP 2.2.56.5183 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://player.gomlab.com/eng/ + Friendly Sites: na3il.com,th3-creative.com +...

SIEMENS Solid Edge ST4/ST5 SEListCtrlX ActiveX - SetItemReadOnly Arbitrary Memory Rewrite RCE

SIEMENS Solid Edge ST4 SEListCtrlX ActiveX Control SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution Vulnerability SEListCtrlX ActiveX 安装与西门子 Solid Edge 产品此模块功绩。此漏洞存在几个 api 提供的控制，在那里用户提供的输入处理作为内存的指针，而不进行适当的验证，允许攻击者读取和损坏从目标进程的内存。本模块滥用方法 NumChildren 和 DeleteItem 分别达到内存信息泄漏及远程执行代码。本模块对...

ArGoSoft FTP Server .NET 1.0.2.1 - Directory Traversal Vulnerability

No description provided by source. Exploit Title: ArGoSoft FTP Server .NET v.1.0.2.1 directory traversal Date: 16.03.2010 Author: dmnt Software Link: http://www.argosoft.com/files/apps/FtpServerSetup.msi Version: ArGoSoft FTP Server .NET v.1.0.2.1 Tested on: Windows 7 Code : CWD ... 250 Requested...