ProSSHD v1.2 20090726 Buffer Overflow Exploit

No description provided by source. Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII "BBBBBBBBBBBBBBBBBB..." EBP 0012F3DC ASCII "BBBBBBBBBBBBBBBBBB..." ESI 7C81DD9A...

Microsoft Windows内核双重释放本地权限提升漏洞（MS10-015）

BUGTRAQ ID: 38044 CVECAN ID: CVE-2010-0233 Microsoft Windows是微软发布的非常流行的操作系统。 当释放内存时，Windows内核没有正确地重置指针，导致内核中出现双重释放的情况。成功利用此漏洞的攻击者可以运行任意内核态代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Winamp 5.57 - 'Browser' IE Denial of Service

From: Indonesia Tested Win xpsp2 Greetz: no thanks : Usage: change your winamp skin with bento, to open browser press ALT + X drag or load file to browser and keep smile : +---------------------------------------------------------------------------------+ Proud to be Muslim --...

Microsoft Windows CSRSS本地权限提升漏洞（MS10-011）

BUGTRAQ ID: 38098 CVE ID: CVE-2010-0023 Microsoft Windows是微软发布的非常流行的操作系统。 当用户注销时Windows客户端/服务器运行时环境子系统（CSRSS）没有正确的终止用户进程，这可能允许本地用户以其他用户的权限执行任意代码。 如果要利用这个漏洞，攻击者首先要登录到系统，之后启动在注销后仍可继续运行的应用程序。当新的用户以自己的凭据登录后，攻击者的进程就可以监控新登录用户所执行的所有操作。如果该用户为管理员，攻击者就可以利用监控到的信息进一步入侵系统。 Microsoft Windows XP SP3 Microsoft...

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224...

Apple iTunes 9.0.1 - '.pls' Handling Buffer Overflow

Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224 JMPBUF = 0x8fe31290 STRDUP = 0x92EED110 8fe24459 jmp...

Netscape Navigator 9 Remote Local DOS exploit

Exploit for unknown platform in category dos / poc ============================================= Netscape Navigator 9 Remote Local DOS exploit ============================================= \n" File.write"\n" Bof = 'A'66666 File.write"alert'"+Bof+"'\n" File.write"\n" File.write"" File.close --...

Wireshark 1.2.5 LWRES getaddrbyname Buffer Overflow

Exploit Title: Wireshark 1.2.5 LWRES getaddrbyname BOF - Calc.exe Date: 2-14-2010 Author: Nullthreat and Pure|Hate Software Link: http://media-2.cacetech.com/wireshark/win32/wireshark-win32-1.2.5.exe Version: 1.2.5 Tested on: Windows XP SP2 CVE : 2010-0304 OSVDB-ID: 61987 Code : !/usr/bin/env...

Win32 Shellcode (cmd.exe) for XP SP2 Turkish 26 Bytes

Exploit for win32 platform in category shellcode ===================================================== Win32 Shellcode cmd.exe for XP SP2 Turkish 26 Bytes ===================================================== / 26 Bytes Win32 Shellcode cmd.exe for XP SP2 Turkish Author: Hellcode Research || TCC T...

Win32 Shellcode cmd.exe for XP SP2 Turkish 26 Bytes

Win32 Shellcode cmd.exe for XP SP2 Turkish 26 Bytes. Shellcode exploit for win32 platform / 26 Bytes Win32 Shellcode cmd.exe for XP SP2 Turkish Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from...

Opera Denial Of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

P2GChinchilla HTTP Server v1.1.1 Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== P2GChinchilla HTTP Server v1.1.1 Denial Of Service Exploit ========================================================== !/usr/bin/perl File Name :P2GChinchillaTM HTTP Server Vuln : Remote...

SOMPL Player 1.0 - Local Buffer Overflow

Exploit Title : SOMPL Player Buffer Overflow Date : 20 January 2010 Author : Rick2600 ricks2600atgmaildotcom Bug found by : Rick2600 ricks2600atgmaildotcom Software Link : http://www.softpedia.com/progDownload/SOMPL-Download-144999.html Version : 1.0 Issue fixed in: ??? OS : Windows Tested on : X...

Win32 Shellcode XP SP2 FR (calc) 19 bytes

No description provided by source. view source print? / Author: SkuLL-HacKeR Big Thx To : my brothers : Pr0F.SELLiM - ThE X-HaCkEr - Jiko - My friends in Morocco H0ME : Geeksec.com & No-exploiT Email : [email protected] & [email protected] // Win32 Shellcode Collection calc 19 bytes // Shellcode...

Win32 Shellcode XP SP2 FR calc 19 bytes

Win32 Shellcode XP SP2 FR calc 19 bytes. Shellcode exploit for win32 platform / Author: SkuLL-HacKeR Big Thx To : my brothers : Pr0F.SELLiM - ThE X-HaCkEr - Jiko - My friends in Morocco H0ME : Geeksec.com & No-exploiT Email : [email protected] & [email protected] // Win32 Shellcode Collection ca...

win32 Shellcode XP SP2 FR (calc) 19 bytes

Exploit for win32 platform in category shellcode ========================================= Win32 Shellcode XP SP2 FR calc 19 bytes ========================================= / Author: SkuLL-HacKeR // Win32 Shellcode Collection calc 19 bytes // Shellcode Exec Calc.exe // Tested on XP SP2 FR include...

Windows Media Player 11 ActiveX launchURL() files download

No description provided by source. !------- This is a vulnerability into Windows Media Player ActiveX launchURL function which someone can download what ever file into the vulnerable machine !!! Discovered and written by Jacky! Tested version: 11.0.5358.4827 Tested machine: Windows XP SP3 & Windo...

Audiotran v1.4.1 direct RET BOF

Exploit for unknown platform in category local exploits =============================== Audiotran v1.4.1 direct RET BOF =============================== Exploit Title: Audiotran v1.4.1 direct RET BOF Date: 2010-1-16 Author: Jacky Software Link: http://www.e-soft.co.uk/Audiotran.htm Version: 1.4.1...

VideoLAN VLC Media Player 0.8.6 abcd (Win32 Universal) - .ass Local Buffer Overflow

VideoLAN VLC Media Player 0.8.6 abcd Win32 Universal - .ass Local Buffer Overflow /%VLC vs 0.6.8 bcda .ASS file buffer overflow exploitwin32 universal %Works every time,works on any win32 OS,tested on Windows xp sp2. %My doctor said that I have seriuouse problems ,but I think he's full of it...

Microsoft Internet Explorer 6 - Aurora Memory Corruption (MS10-002)

Microsoft Internet Explorer 6 - Aurora Memory Corruption MS10-002 Author : Ahmed Obied [email protected] This program acts as a web server that generates an exploit to target a vulnerability CVE-2010-0249 in Internet Explorer. The exploit was tested using Internet Explorer 6 on Windows XP SP2...