XM Easy Professional FTP Server 5.8.0 - Denial of Service

XM Easy Professional FTP Server 5.8.0 - Denial of Service I discovered a denial-of-service vulnerability on XM Easy Professional FTP Server product. After successfuly logged-in, when you send "HELP AAAA...4074 times", ftp daemon crashes. ----------------------- Exploit Title: XM Easy Professional...

XM Easy Professional FTP Server 5.8.0 Denial Of Service

No description provided by source. I discovered a denial-of-service vulnerability on XM Easy Professional FTP Server product. After successfuly logged-in, when you send "HELP AAAA...4074 times", ftp daemon crashes. ----------------------- Exploit Title: XM Easy Professional FTP Server 5.8.0 Denia...

XM Easy Professional FTP Server 5.8.0 Denial Of Service

Exploit for unknown platform in category dos / poc ======================================================= XM Easy Professional FTP Server 5.8.0 Denial Of Service ======================================================= Title: XM Easy Professional FTP Server 5.8.0 Denial Of Service CVE-ID: OSVDB-I...

mIRC <= 6.34 PRIVMSG Handling Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'mIRC %q This module exploits a...

Talkative IRC v0.4.4.16 Response Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ class Metasploit3 'Talkative IRC v0.4.4.16...

Microsoft DirectShow (msvidctl.dll) MPEG-2 Memory Corruption

msvidctlmpeg2.rb Microsoft DirectShow msvidctl.dll MPEG-2 Memory Corruption exploit for the Metasploit Framework Tested successfully on the following platforms fully patched 06/07/09: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 Original exploit was found in-the-wil...

CA BrightStor ARCserve Backup AddColumn() ActiveX Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightStor...

Belkin Bulldog Plus Web Service Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Belkin Bulldog Pl...

HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX HTTP server. By sending a specially crafted HTTP request containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via FTP. Module...

AwingSoft Winds3D Player 3.5 SceneURL Download and Execute

This module exploits an untrusted program execution vulnerability within the Winds3D Player from AwingSoft. The Winds3D Player is a browser plugin for IE ActiveX, Opera DLL and Firefox XPI. By setting the 'SceneURL' parameter to the URL to an executable, an attacker can execute arbitrary code...

Sun Java JRE AWT setDiffICM Buffer Overflow

This module exploits a flaw in the setDiffICM function in the Sun JVM. The payload is serialized and passed to the applet via PARAM tags. It must be a native payload. The effected Java versions are JDK and JRE 6 Update 16 and earlier, JDK and JRE 5.0 Update 21 and earlier, SDK and JRE 1.4.223 and...

Xion Audio Player 1.0 121 .m3u file Buffer Overflow

No description provided by source. Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code...

Xion Audio Player 1.0 121 - .m3u Remote Buffer Overflow (1)

Xion Audio Player 1.0 121 - .m3u Remote Buffer Overflow 1 Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type ...

Xion Audio Player 1.0 121 .m3u file Buffer Overflow

Exploit for unknown platform in category remote exploits =================================================== Xion Audio Player 1.0 121 .m3u file Buffer Overflow =================================================== Title: Xion Audio Player 1.0 121 .m3u file Buffer Overflow CVE-ID: OSVDB-ID: Author:...

Xion Audio Player Local Buffer Overflow

Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code execution OS : Windows Product :...

Xion Audio Player 1.0 121 - '.m3u' Remote Buffer Overflow (1)

Vulnerability : Xion Audio Player Local BOF Discovered by : Dragon Rider http://securityreason.com/exploitalert/7392 drag0n.riderathotmail.com Sploit written by : corelanc0d3r corelanc0d3ratgmaildotcom Sploit released : nov 3rd, 2009 Type : local and remote code execution OS : Windows Product :...

PHP IRC Bot pbot eval() Remote Code Execution

This module allows remote command execution on the PHP IRC bot pbot by abusing the usage of eval in the implementation of the .php command. In order to work, the data to connect to the IRC server and channel where find pbot must be provided. The module has been successfully tested on the version ...

Eureka Email 2.2q ERR Remote Buffer Overflow

This module exploits a buffer overflow in the Eureka Email 2.2q client that is triggered through an excessively long ERR message. NOTE: this exploit isn't very reliable. Unfortunately reaching the vulnerable code can only be done when manually checking mail Ctrl-M. Checking at startup will not...

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download...

South River Technologies WebDrive 9.02 build 2232 - Local Privilege Escalation

South River Technologies WebDrive Service Bad Security Descriptor Local Elevation Of Privileges by Nine:Situations:Group::bellick site: http://retrogod.altervista.org/ Software site: http://www.webdrive.com/ Download location: http://www.webdrive.com/download/index.html Tested against: South Rive...