HP Data Protector Cell Request Service Buffer Overflow

This module exploits a stack-based buffer overflow in the Hewlett-Packard Data Protector product. The vulnerability, due to the insecure usage of swprintf, exists at the Cell Request Service crs.exe when parsing packets with opcode 211. This module has been tested successfully on HP Data Protecto...

BOINC Manager (SETI at Home) version 7.0.64 Field stack based BOF

BOINC Manager SETI at Home version 7.0.64 Field stack based buffer overflow exploit. Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: email protected Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link:...

BOINC Manager (Seti@home) 7.0.64 - Field Buffer Overflow (SEH)

Exploit Title: BOINC Manager 7.0.64 Field stack based buffer overflow Date: 26.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://boinc.berkeley.edu/ Software Link: http://boinc.berkeley.edu/dl/boinc7.0.64windowsintelx86.exe Version: 7.0.64 for Windows Tested on: Windows XP SP3...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow Vulnerability

This Metasploit module exploits a stack buffer overflow in the dbnetserver process which is spawned by the Lianja SQL server. The issue is fixed in Lianja SQL 1.0.0RC5.2. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...

Lianja SQL 1.0.0RC5.1 - db_netserver Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...

Intrasrv Simple Web Server 1.0 Code Execution

Exploit Title: Intrasrv Simple Web Server 1.0 SEH based Remote Code Execution BOF Date: 29.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.leighb.com/intrasrv.htm Software Link: http://www.leighb.com/intrasrv.zip Version: 1.0 Tested on: Windows XP SP3 Eng...

Intrasrv Simple Web Server 1.0 - Remote Code Execution (SEH)

Exploit Title: Intrasrv Simple Web Server 1.0 SEH based Remote Code Execution BOF Date: 29.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.leighb.com/intrasrv.htm Software Link: http://www.leighb.com/intrasrv.zip Version: 1.0 Tested on: Windows XP SP3 Eng...

Intrasrv Simple Web Server 1.0 - Remote Code Execution (SEH)

Intrasrv Simple Web Server 1.0 - Remote Code Execution SEH Exploit Title: Intrasrv Simple Web Server 1.0 SEH based Remote Code Execution BOF Date: 29.05.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.leighb.com/intrasrv.htm Software Link: http://www.leighb.com/intrasrv.zip...

Logic Print 2013 - Stack Overflow (vTable Overwrite)

Exploit for windows platform in category remote exploits var rop = ""; var shellcode = ""; var junk1 = ''; var junk2 = ''; function theMagicalMysteryTour rop = unescape"%u2230%u2030" + ///////////////////////////////////////////// /// STACK PIVOT /// /////////////////////////////////////////////...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CompatUI ActiveX Control <= Remote Command Execution

Exploit for windows platform in category remote exploits Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm The Black Devils member from Inj3ct0r Team 1 1 0...

IBM SPSS SamplePower C1Tab ActiveX Heap Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

PEStudio 3.69 - Denial of Service

Exploit for windows platform in category remote exploits Title: PEStudio Version 3.69 Denial of Service Date: 5th June 2013 Author: Debasish Mandal https://twitter.com/debasishm89 Blog : http://www.debasish.in/ Software Homepage: http://www.winitor.com/ Version: PEStudio Version 3.69 Tested on:...

SIEMENS Solid Edge ST4/ST5 WebPartHelper - ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution

SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control RFMSsvs!JShellExecuteEx Remote Command Execution Tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft Windows XP sp3 Microsoft Windows 7 Internet Explorer 8 Software description: http://en.wikipedia.org/wiki/SolidEdge vendor site:...

Siemens Solid Edge ST4 SEListCtrlX ActiveX Remote Code Execution

This module exploits the SEListCtrlX ActiveX installed with the Siemens Solid Edge product. The vulnerability exists on several APIs provided by the control, where user supplied input is handled as a memory pointer without proper validation, allowing an attacker to read and corrupt memory from th...

SIEMENS Solid Edge ST4ST5 SEListCtrlX - ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution

SIEMENS Solid Edge ST4ST5 SEListCtrlX - ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution SIEMENS Solid Edge ST4/ST5 SEListCtrlX ActiveX Control SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2...

SIEMENS Solid Edge ST4ST5 WebPartHelper - ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution

SIEMENS Solid Edge ST4ST5 WebPartHelper - ActiveX RFMSsvs!JShellExecuteEx Remote Code Execution SIEMENS Solid Edge ST4/ST5 WebPartHelper ActiveX Control RFMSsvs!JShellExecuteEx Remote Command Execution Tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft Windows XP sp3 Microsoft Windows...

SIEMENS Solid Edge ST4/ST5 SEListCtrlX - ActiveX SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution

SIEMENS Solid Edge ST4/ST5 SEListCtrlX ActiveX Control SetItemReadOnly Arbitrary Memory Rewrite Remote Code Execution Vulnerability tested against: Microsoft Windows Server 2003 r2 sp2 Microsoft Windows XP sp3 Microsoft Windows 7 Internet Explorer 7/8 software description:...

CVE-2013-3661

The EPATHOBJ::bFlatten function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not check whether linked-list traversal is continually accessing th...