G Data TotalCare 2011 - Local Kernel

/ Exploit Title: G Data TotalCare 2011 0day Local Kernel Exploit Date: 2010-11-08 Author: Nikita Tarakanov CISS Research Team Software Link: http://www.gdata.de/ Version: up to date, version 21.1.0.5, MiniIcpt.sys version 1.0.8.9 Tested on: Win XP SP3 CVE : CVE-NO-MATCH Status : Unpatched / inclu...

SnackAmp 3.1.3B SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.3 Bet...

SnackAmp 3.1.3B - SMP Buffer Overflow (SEH) (DEP Bypass)

Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.3 Bet...

TFTP Daemon v1.9 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================== TFTP Daemon v1.9 Denial of Service Exploit ========================================== Title: TFTP Daemon v1.9 Denial of Service Exploit CVE-ID: OSVDB-ID: Author: Socket0x03 Published: 2009-12-22 Verified...

Cisco VPN Client - Integer Overflow Denial of Service

Cisco VPN Client - Integer Overflow Denial of Service / Cisco VPN client version 5.0.03.0560 Cisco VPN client Version 5.0.04.0300 Cisco VPN client Version 5.0.05.0290 Cisco VPN client Version 4.8.02.0010 / / Cisco VPN Client 0day Integer overflow DOS Proof Of Concept Code By Alex Hernandez aka...

MiniShare HTTP 1.5.5 BoF

No description provided by source. / MiniShare HTTP Server 1.5.5 Remote Buffer overflow Exploit by eMP3R0r TEAM This bug Expl0ited and Discovered by iM4n Sp Tnx2 : Shabgard & Aria Security FOrum The Crimson Idol / include winsock2.h include stdio.h include string.h include stdlib.h include dos.h...

HTML Creator And Sender 2.3 Buffer Overflow

!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...

HTML Creator & Sender 2.3 build 697 - Local Buffer Overflow (SEH)

!/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for From and To, Send Email. import stru...

MS Windows GDI (EMR_COLORMATCHTOTARGETW) Exploit MS08-021

No description provided by source. EMRCOLORMATCHTOTARGETW stack buffer overflow exploit By Ac!dDrop This is one of the 2 Vulnerabilities of MS08-021 Tested on Windows xp professional SP1 GDi32.dll 5.1.2600.1106 kernel32.dll 5.1.2600.1106 ws232.dll 5.1.2600.0 calc.zip--- executes calculator IE.zip...

CesarFTP Server Long Command Denial of Service Exploit

No description provided by source. / ----------------------------------------------------------------------- cesarftp.c - Cesar FTP Server Long Command DoS Exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : [email protected] : http://www.cnhonker.com Date : 2004-08-30...

Xitami Web Server v2.5c2 LRWP Processing Format String PoC

Exploit for unknown platform in category dos / poc ========================================================== Xitami Web Server v2.5c2 LRWP Processing Format String PoC ========================================================== / PoC exploit for Xitami Web Server v2.5c2 LRWP processing format...

win xp/2000/2003 Connect Back shellcode for Overflow exploit 275 bytes

No description provided by source. / ----------------------------------------------------------------------- connectbackv32.c - Connect Back shellcode for Overflow exploit Copyright C 2000-2004 HUC All Rights Reserved. Author : lion : [email protected]...

trendmicro-overflow.txt

/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Trend Micro ServerProtect eng50.dll Stack Overflow CVE-2007-1070 Description: A boundary error within a function in eng50.dll can be exploited to cause a stack-based buffer overflow via a specially crafted RPC request to the SpntSvc.exe service...

Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit

Exploit for unknown platform in category remote exploits =============================================================== Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit =============================================================== / Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote...

News Bin Pro 4.32 Article Grabbing Remote Unicode BoF Exploit

No description provided by source. / News Bin Pro 4.32 Article Grabbing Remote Unicode Buffer Overflow There is remote buffer overflow in News Bin Pro 4.32 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to...

WebMod 0.48 (Content-Length) Remote Buffer Overflow Exploit PoC

Exploit for unknown platform in category remote exploits =============================================================== WebMod 0.48 Content-Length Remote Buffer Overflow Exploit PoC =============================================================== / WebMod Stack Buffer Overflow by cybermind Kevin...

MS Windows (keybd_event) Local Privilege Elevation Exploit

No description provided by source. / Microsoft Windows keybdevent validation vulnerability. Local privilege elevation Credits: Andres Tarasco aT4r @ haxorcitos.com Iaki Lopez ilo @ reversing.org Platforms afected/tested: - Windows 2000 - Windows XP - Windows 2003 Original Advisory:...

Sami FTP Server 2.0.1 Remote Buffer Overflow Exploit (cpp)

No description provided by source. // Two includes. include fstream.h include winsock2.h // Project - Settings - Link Object/Library modules 'Ws232.lib' pragma commentlib, "ws232" char MyShellCode = // XOR by \x99\x99\x99\x99. "\xD9\xEE\xD9\x74\x24\xF4\x5B\x31\xC9\xB1\x59\x81\x73\x17\x99\x99"...

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...

Stoney FTPd - 'rxBot mods ftpd' Denial of Service

/ untested /str0ke / / rx-dos.c by D-oNe There exists a buffer overflow in Stoneys FTPd that most rxBot mod's use. The problem lies in how the code parses the PORT command and gives an opportunity for a buffer overflow. Problem is that the ftpd also uses select to handle multiple connections. So...