1236 matches found
Total Video Player - 'vcen.dll' Remote Off-by-One Crash
Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any supplied file for a reconized header even if the...
ms08_067_netapi.rb.txt
$Id:$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...
Writeup by Amit Klein (Trusteer): Address Bar Spoofing for IE6
Address Bar Spoofing Attacks against Microsoft Internet Explorer 6 Amit Klein, Trusteer Summary ======= IE6 is the second most popular web browser after IE7, with market share of around 25 according to recent surveys e.g. http://marketshare.hitslink.com/report.aspx?qprid=2. This write-up presents...
powertcpftp-overflow.txt
!-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my own expl with HeapSpray technique ,...
PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)
No description provided by source. !-- PowerTCP FTP module Multiple Technique Exploit SEH Overwrite + HeapSpray bug originally found by : Intel http://www.milw0rm.com/exploits/6793 I use Intel's exploit , but IE change unASCII bytes and it doesn't work! my system is XP SP2 IE7 . then I wrote my o...
Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability.
Advisory: Google Chrome OnbeforeUload and OnUnload Null Check Vulnerability. Version Affected: Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is susceptible to stringent behavior while handling "onbeforeunload" and "onunload" event in body tags. The malicious...
PowerTCP FTP module Multiple Technique Exploit (SEH/HeapSpray)
Exploit for unknown platform in category remote exploits ============================================================== PowerTCP FTP module Multiple Technique Exploit SEH/HeapSpray ============================================================== !-- PowerTCP FTP module Multiple Technique Exploit SE...
VLC Media Player TY File Stack Based Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================ VLC Media Player TY File Stack Based Buffer Overflow Exploit ============================================================ !/usr/bin/perl 10/21/2008 ksOSe use warnings; use strict;...
MS06-013 Microsoft Internet Explorer createTextRange() Code Execution
This module exploits a code execution vulnerability in Microsoft Internet Explorer. Both IE6 and IE7 Beta 2 are vulnerable. It will corrupt memory in a way, which, under certain circumstances, can lead to an invalid/corrupt table pointer dereference. EIP will point to a very remote, non-existent...
Quick FTP Pro 2.1 Transfer-Mode Overflow
This module exploits a stack buffer overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit by Mati "muts" Aharoni. This module requires Metasploit: https://metasploit.com/download Curre...
Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC
No description provided by source. !/usr/bin/perl Eserv/3.x FTP Server ABOR Remote Stack Overflow PoC Summary: Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server -...
Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC
Exploit for unknown platform in category dos / poc ===================================================== Eserv 3.x FTP Server ABOR Remote Stack Overflow PoC ===================================================== !/usr/bin/perl Eserv/3.x FTP Server ABOR Remote Stack Overflow PoC Summary: Eserv/3.x ...
MS Windows GDI+ Proof of Concept (MS08-052) #2
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
Microsoft Windows - GDI+ (PoC) (MS08-052) (2)
Microsoft Windows - GDI+ PoC MS08-052 2 ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
MS Windows GDI+ Proof of Concept (MS08-052) #2
Exploit for unknown platform in category dos / poc ============================================== MS Windows GDI+ Proof of Concept MS08-052 2 ============================================== ------------------------------------------------------------------------------------------------------------...
Microsoft Windows - GDI+ (PoC) (MS08-052) (2)
------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference: http://www.sweetscape.com/010editor/templates/files/GIFTemplate.bt PoC...
IE GDI+ Proof of Concept (MS08-0 5 2)-vulnerability warning-the black bar safety net
MS Internet Explorer GDI+ Proof of Concept MS08-0 5 2 html head STYLE ef: behavior: urldefaultVML; /STYLE /head body pre ================================================ MS08-0 5 2: GDI+ Vulnerability ------------------------------------------------ Operating System: XP SP2 Internet Explorer...
AyeView 2.20 (malformed gif image) Local Crash Exploit
No description provided by source. Name : AyeView v2.20 malformed gif image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.ayeview.com/downloads.htm Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders...
AyeView 2.20 - '.GIF' Image Local Crash
Name : AyeView v2.20 malformed gif image DoS Exploit Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download: : http://www.ayeview.com/downloads.htm Greetz : Luigi Auriemma, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Katharsis, all from dark-coders and others; PoC: !/usr/local/bin/pe...
GdPicture Pro ActiveX (gdpicture4s.ocx) File Overwrite / Exec Exploit
Exploit for unknown platform in category remote exploits ===================================================================== GdPicture Pro ActiveX gdpicture4s.ocx File Overwrite / Exec Exploit ===================================================================== object...