NetTransport Download Manager 2.90.510 - Remote Overflow (SEH)

!/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe root@BT4VM: ./netxfer.py 192.168.1.8 31491 import socket,sys...

VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow

VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatecha...

VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)

Exploit for unknown platform in category dos / poc ============================================================ VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day ============================================================ Title: VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day...

NetTransport Download Manager 2.90.510 - Remote Overflow (SEH)

NetTransport Download Manager 2.90.510 - Remote Overflow SEH !/usr/bin/python NetTransport Download Manager version:2.90.510 0day Discovered by Lincoln Tested on Windows XP SP3 eMule file sharing protocol SEH overwrite, leaves only 60 or so bytes after p/p/r egghunter is used to find sc calc.exe...

VSO Medoa Player 1.0.2.2 - Local Denial of Service (PoC)

!usr/bin/perl Exploits title :VSO Medoa Player Version 1.0.2.2 Local Denial Of Services poc Date : 2010/01/02 Aouther : SarBoT511 downloads :www.vso-software.fr tested on :win xp sp2 VSO Medoa Player Version 1.0.2.2 $file="SarBoT511.ape"; $boom="A" x 2000; openmyfile,"$file"; print myfile $boom;...

VirtualDJ Trial 6.0.6 'New Year Edition' - '.m3u' Local Overflow

/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...

Switch Sound File Converter - '.mpga' Buffer Overflow (Denial of Service) (PoC)

Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van Eeckhoutte !!! When you create a file tha...

NetTransport Download Manager version:2.90.510 0day

Exploit for unknown platform in category remote exploits =================================================== NetTransport Download Manager version:2.90.510 0day =================================================== Title: NetTransport Download Manager version:2.90.510 0day CVE-ID: OSVDB-ID: Author:...

Switch Sound File Converter .mpga BOF DOS

Exploit for unknown platform in category dos / poc ========================================= Switch Sound File Converter .mpga BOF DOS ========================================= Title: Switch Sound File Converter .mpga BOF DOS CVE-ID: OSVDB-ID: Author: Jacky Published: 2010-01-01 Verified: yes vie...

Switch Sound File Converter - .mpga Buffer Overflow (Denial of Service) (PoC)

Switch Sound File Converter - .mpga Buffer Overflow Denial of Service PoC Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Gree...

SimplePlayer v0.2 0day (.wav) overflow DOS Exploit

Exploit for unknown platform in category dos / poc ================================================== SimplePlayer v0.2 0day .wav overflow DOS Exploit ================================================== Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit CVE-ID: OSVDB-ID: Author: mrme Publishe...

Xenorate 2.50(.xpl) universal Local Buffer Overflow Exploit (SEH)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Xenorate 2.50.xpl...

SimplePlayer v0.2 0day (.wav) overflow DOS Exploit

No description provided by source. !/usr/bin/python Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit Found by: mrme seeleymagic at hotmail dot com Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT Tested on: Windows XP SP3 Happy New Year! POC: crash = "x41" 36000;...

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec Altiris...

gAlan 0.2.1 Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'gAlan 0.2.1 Buffe...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

HTTPDX tolog() Function Format String Vulnerability

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HTTPDX tolog...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Computer Associat...

SafeNet SoftRemote GROUPNAME Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'SafeNet...

Mini-Stream 3.0.1.1 Buffer Overflow Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mini-Stream 3.0.1...