17219 matches found
Mozilla Firefox <= 1.5.0.4 - Javascript Navigator Object Code Execution PoC
No description provided by source. !-- Firefox = 1.5.0.4 Javascript navigator Object Code Execution PoC http://browserfun.blogspot.com/ The following bug mfsa2006-45 was tested on the Firefox 1.5.0.4 running on Windows 2000 SP4, Windows XP SP4, and a recently updated Gentoo Linux system. This bug...
Microsoft Windows XP HCP URI Handler Abuse Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5478/info Microsoft Internet Explorer on Windows XP comes equipped with a protocol handler for the 'Help and Support Center' application. The protocol handler may be specified in links, and when such a link is submitted b...
VLC 2.1.2 - (.asf file) Crash PoC
No description provided by source. !/usr/bin/python VLC Media Player up to 2.1.2 DOS POC Integer Division By zero in ASF Demuxer VLC Media Player is prone to DOS utilizing a division by zero error if minimium data packet size is equal to zero. this was tested on windows XP sp3 and affects all...
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/python SUMMARY: AT-TFTP Server is a Freeware TFTP server for Windows 9x/NT/XP. http://www.alliedtelesyn.co.uk/en-gb/support/downloads/tools.asp It provides an implementation of the TFTPv2 protocol. A vulnerability has been identified in TFTP Server...
Serva 2.0.0 - HTTP Server GET Remote Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: Serva v2.0.0 HTTP Server GET Remote Denial of Service Vulnerability Version: v2.0.0 Date: 2013-01-14 Author: Julien Ahrens @MrTuxracer Homepage: www.inshell.net Software Link: http://www.vercot.com Tested on: Windows XP SP3...
Easy FTP Server 1.7.0.2 - CWD Remote BoF (MSF Module)
No description provided by source. Exploit Title: EasyFTP Date: March 9, 2010 Author: Blake Version: 1.7.0.2 Tested on: Windows XP SP3 CVE : require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit::Remote::Ftp def initializeinfo = superupdateinfoinfo,...
MyMarket 1.71 (index.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: MyMarket version 1.71index.php sql Injection Google Dork: allinurl:mymarket/shopping/index.php Date: 7-2-2011 Author: ahmadso Version: 1.71 Tested on: win xp sp2 ====================================================...
ACDSee FotoSlate PLP File id Parameter Overflow
No description provided by source. $Id: acdseefotoslatestring.rb 13853 2011-10-10 16:47:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Static HTTP Server 1.0 - SEH Overflow
No description provided by source. !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...
McKesson ActiveX File/Environmental Variable Enumeration
No description provided by source. html !-- McKesson ActiveX File/Environmental Variable Enumeration Vendor: McKesson Version: 11.0.10.38 Tested on: Windows XP SP3 / IE Download: N/A Author: Blake Additional Details: This activex control is packaged with the Horizon Rad Station software used by...
Switch Sound File Converter .mpga BOF DoS
No description provided by source. Exploit Title: Switch Sound File Converter .mpga BOF DOS Date: 2009-1-1 Author: Jacky Version: 0.0.0.0 Tested on: Windows XP SP2 Switch Sound File Converter .mpga BOF POS Vulnerability Discovered and written by : Jacky Greetz to Corelan team and Peter Van...
AudioCoder (.lst) - Buffer Overflow (msf)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT include Msf::Exploit::Seh def initializeinfo = superupdateinfoinfo, 'Name' = 'AudioCoder .lst Buffer Overflow', 'Description' = %q This module exploit...
SAPID 1.2.3 Stable Remote File Inclusion Vulnerability
No description provided by source. Exploit Title: SAPID Stable RFI Google Dork: tanyakan pada dan pemula :D Date: January 08 2011 Author: Opa Yong Software Link: http://sourceforge.net/projects/sapid/files/sapid-cms/ Version: SAPID 1.2.3 Stable Tested on: Windows XP Home Edition SP2 @POC:...
GOM player 2.1.9 - Local crash PoC
No description provided by source. !usr/bin/perl Exploits title :GOM player V 2.1.9 Local crash poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://en.kioskea.net/telecharger/download-2141-gom-player tested on :win xp sp2 GOM player V 2.1.9 $file=SarBoT511.asx; $boom=A x 2000;...
Microsoft Windows XP/95/98/2000/NT 4 Riched20.dll Attribute Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6874/info The riched20.dll is vulnerable to a buffer overflow that results in the application calling the library to fail. By creating a Rich Text Format RTF file with more than 65536 bytes of data in an attribute, the...
PIPL <= 2.5.0 (.m3u File) Universal Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/python PIPL = 2.5.0 .m3u File Universal bof exploit SEH Coded by: Steven Seeley aka mrme email: info At net-ninja d0t net Download: http://www.programmedintegration.com/files/pipl.exe Tested on Wind0ws XP sp3 & Vist@ SEH overwrite, just for kicks...
Windows NDPROXY - 本地权限提升漏洞(MS14-002)
漏洞成因 这是一个windows内核漏洞，漏洞的触发需要开启Routing and Remote Access服务，影响 windowsxp，windows2003. 先上 poc c include include int main HANDLE hDev = CreateFile"\\.\NDProxy", GENERICREAD | GENERICWRITE, FILESHAREREAD | FILESHAREWRITE, NULL, OPENEXISTING , 0, NULL; ifhDev==INVALIDHANDLEVALUE printf"CreateFile...
AT-TFTP Server 2.0 - Stack Based Buffer Overflow DoS
No description provided by source. Exploit Title: AT-TFTP 2.0 long filename stack based buffer overflow - DOS Date: 12.04.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.alliedtelesis.com/ Software Link:...
Easy LAN Folder Share 3.2.0.100 - Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi- Original Bug Found By:...
Destiny Media Player 1.61 - PLS .M3U Buffer Overflow
No description provided by source. $Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...