16583 matches found
RealPlayer .mp4 file handling memory corruption
No description provided by source. Application : RealPlayer mp4 file handling memory corruption Versions : = SP 1.1.4 Build 12.0.0.756 = v15 Date : 21/03/2012 Tested : Windows XP SP3 EN Auther : Senator of Pirates E-Mail : [email protected] FaceBook : /SenatorofPirates Bug : ----...
PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit
No description provided by source. ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this exploit, I used a CALL...
CommuniCrypt Mail 1.16 SMTP ActiveX Stack Buffer Overflow
No description provided by source. $Id: communicryptmailactivex.rb 9933 2010-07-26 19:30:02Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Yokogawa CENTUM CS 3000 BKBCopyD.exe Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Tcp def initializeinfo =...
MS13-080 Microsoft Internet Explorer CDisplayPointer Use-After-Free
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Plotwn 18 (.wp2) local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Exploit Title : Plotwn 18 .wp2 local Buffer Overflow Poc tested on windows xp SP 3 FR Author: MadjiX - Dz8atHotmaiLdotCoM download: http://math.exeter.edu/rparris/peanut/wpfr32z.exe Special Greets:Bibi-info , His0k4 where are you : EAX 0012F2F8 EC...
Windows Media Player 11.0.5721.5262 - Remote Denial of Service (DOS)
No description provided by source. import socket, binascii print \n print ---------------------------------------------------------------- print | WMP11 Remote Null Pointer | print | Level, Smash the Stack | print | Windows XP SP3 x86, Windows Media Player v11.0.5721.5262 | print | Windows 7 SP2...
Vermillion FTP Deamon 1.31 - Remote BOF Exploit
No description provided by source. Exploit Title: Vermillion FTP Deamon Remote BOF Exploit Date: 29/01/2010 Author: Dzattacker Software Link: http://www.softsea.com/download/Vermillion-FTP-Daemon.html Version: 1.31 Tested on: Windows xp sp3 Code : !/usr/bin/python + Original :...
Google Chrome Browser 0.2.149.27 - DoS Vulnerability
No description provided by source. --------------------------------------------------- Software: Google Chrome Browser 0.2.149.27 Tested: Windows XP Professional SP3 Result: Google Chrome Crashes with All Tabs Problem: An issue exists in how chrome behaves with undefined-handlers in chrome.dll...
Buffy 1.3 - Remote Directory Traversal Exploit
No description provided by source. ?php / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...
Winamp 5.572 - whatsnew.txt Stack Overflow PoC
No description provided by source. Author: Debug [email protected] Version: 5.572 Tested on: Windows xpsp2 !/usr/bin/perl Replace whatsnew.txt , open Winamp click Help-about winamp- version history. hacking.org.il. EAX 00000000 ECX 00000000 EDX 00661658 EBX 00000000 ESP 00B7EDE8 ASCII...
SimplePlayer 0.2 - (.wav) overflow DoS Exploit (0day)
No description provided by source. !/usr/bin/python Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit Found by: mrme seeleymagic at hotmail dot com Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT Tested on: Windows XP SP3 Happy New Year! POC: crash = x41 36000;...
Mediacoder (.lst) - SEH Buffer Overflow
No description provided by source. !/usr/bin/python import os import sys from struct import pack from time import sleep if os.name == nt: os.systemcls os.systemcolor 3f else: os.systemclear print +Exploit Title: All Mediacoder Product SEH Buffer Overflow +Download All Product:...
AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
NVR SP2 2.0 (nvUtility.dll 1.0.14.0) - DeleteXMLFile() Inscure Method
No description provided by source. ---------------------------------------------------------------------------------------------- NVR SP2 2.0 nvUtility.Utility.1 nvUtility.dll v. 1.0.14.0 DeleteXMLFile Inscure Method url: http://www.acti.com/index.asp author: shinnai mail: shinnaiatautisticidotor...
Steinberg MyMp3PRO 5.0 - Buffer Overflow/SEH Buffer Overflow/DEP Bypass with ROP
No description provided by source. !/usr/bin/ruby print ''' Steinberg MyMp3PRO v5.0 Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author: metacom Tested on:XP-Sp3-EN ''' sleep3 junk=\x41 1044 eip=0x7C86467B.pack'V'7C86467B FFE4 JMP ESP kernel32.dll nops=\x90 100 landi...
Skeletonz CMS Permanent XSS Vulnerability
No description provided by source. Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments Google Dork: Date: 27/11/10 Author: Jordan Diaz aka Jbyte Software Link: http://orangoo.com/skeletonz/ Version: 1.0 Tested on: Windows xp CVE : The follow xss is located in the section of...
Sysax Multi Server 5.50 Create Folder BOF
No description provided by source. !/usr/bin/python Title: Sysax Multi Server 5.50 Create Folder BOF Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bitNo DEP Date Discovered: January 13, 2012 Vendor Contacted: January 15, 2012 Vendor Response: January 16, 2012 Vendor...
MusicBee 2.0.4663 (.M3U) - Denial of Service Exploit
No description provided by source. !/usr/bin/perl Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit Date: 2013/6/19 Exploit Author: Chako Vendor Homepage: http://getmusicbee.com/ Version: v2.0.4663 Tested on: Windows XP SP3 English $HEADER = http://; $BOF = \x41 x 3740; $BOF = \x41...
RPM Select/Elite 5.0 - (.xml config parsing) Unicode Buffer Overflow PoC
No description provided by source. !/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...