Telnet-Ftp Service Server 1.0 Directory Traversal

Exploit Title: Telnet-Ftp Service Server v1.0 Directory Traversal Vulnerability Date Published: 2013/6/18 Exploit Author: Chako Software Link: http://telnet-ftp-server.en.softonic.com/ Version: v1.0 Build 1.218 Tested on: Windows Xp SP3 English Description: ===================== A vulnerability h...

Novell Client 4.91 SP4 - 'nwfs.sys' Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

MediaCoder .M3U Buffer Overflow

This module exploits a buffer overflow in MediaCoder 0.8.22. The vulnerability occurs when adding an .m3u, allowing arbitrary code execution under the context of the user. DEP bypass via ROP is supported on Windows 7, since the MediaCoder runs with DEP. This module has been tested successfully on...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This Metasploit module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space. The corruption occurs while handling ioctl requests with code 0x1438BB, where a 0x00000009 dword is written to an arbitrary address. An entry within the HalDispatchTable is overwritten in order to...

Sami FTP Server 2.0.1 RETR Denial Of Service

Sami FTP server version 2.0.1 RETR denial of service exploit. !/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Sami FTP Server 2.0.1 RETR Denial Of Service

!/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP SP3 Description: A bug discovered in Sami FTP Server allows an...

Novell Client 4.91 SP4 nwfs.sys Local Privilege Escalation

This module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space. The corruption occurs while handling ioctl requests with code 0x1438BB, where a 0x00000009 dword is written to an arbitrary address. An entry within the HalDispatchTable is overwritten in order to execute...

MusicBee 2.0.4663 - .m3u Denial of Service

MusicBee 2.0.4663 - .m3u Denial of Service !/usr/bin/perl Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit Date: 2013/6/19 Exploit Author: Chako Vendor Homepage: http://getmusicbee.com/ Version: v2.0.4663 Tested on: Windows XP SP3 English $HEADER = "http://"; $BOF = "\x41" x 3740;...

MusicBee 2.0.4663 Denial Of Service

!/usr/bin/perl Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit Date: 2013/6/19 Exploit Author: Chako Vendor Homepage: http://getmusicbee.com/ Version: v2.0.4663 Tested on: Windows XP SP3 English $HEADER = "http://"; $BOF = "\x41" x 3740; $BOF = "\x41" x 5000; openmyfile, ' MusicB...

Syslog Server 1.2.3 - Crash (PoC)

Syslog Server 1.2.3 - Crash PoC !/usr/bin/python Exploit Title: Syslog Server 1.2.3 Date: 12th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Vendor Homepage: http://sourceforge.net/users/ghuysmans Software Link:...

WinRadius 2.11 Denial Of Service

!/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/ Vendor Homepage: ADVERT HOLDING PAGE...

WinRadius 2.11 - Denial of Service Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/...

WinRadius 2.11 - Denial of Service

!/usr/bin/python Exploit Title: WinRadius 2.11 DoS Date: 10th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up: http://www.iodigitalsec.com/blog/fuzz-to-denial-of-service-winradius-2-11/ Vendor Homepage: ADVERT HOLDING PAGE...

Sami FTP Server 2.0.1 - RETR Denial of Service

!/usr/bin/python Exploit Title: Sami FTP Server RETR Denial Of Service Date: 2013/6/09 Exploit Author: Chako Vendor Homepage: http://www.karjasoft.com/old.php Software Link: Version: V2.0.1 Doesn't work on V2.0.2 Tested on: Windows XP SP3 Description: A bug discovered in Sami FTP Server allows an...

Synactis PDF In-The-Box ConnectToSynactic Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

Microsoft Internet Explorer - textNode Use-After-Free (MS13-037) (Metasploit)

Microsoft Internet Explorer - textNode Use-After-Free MS13-037 Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Quick TFTP Server Pro 2.2 - Denial of Service

Quick TFTP Server Pro 2.2 - Denial of Service !/usr/bin/python Exploit Title: Quick TFTP Server 2.2 DoS Date: 6th June 2013 Exploit Author: npn Exploit Author Homepage: http://www.iodigitalsec.com/ Exploit Author Write Up:...

Lianja SQL 1.0.0RC5.1 db_netserver Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...

Lianja SQL 1.0.0RC5.1 - db_netserver Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Lianja SQL 1.0.0RC5.1 dbnetserver Sta...