Barcodewiz Barcode ActiveX Control 3.29 - Remote HeapSpray (Internet Explorer 6/7)

// Payload is win32exec - calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

BarCodeWiz BarCode ActiveX 3.29 PoC

Exploit for php platform in category web applications =================================== BarCodeWiz BarCode ActiveX 3.29 PoC =================================== BarCodeWiz Barcode ActiveX Control 3.29 PoC SEH Bug found: 24th July 2010 Found by: loneferret Software: http://www.barcodewiz.com/...

Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)

Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow SEH BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP...

Barcodewiz Barcode ActiveX Control 3.29 - Remote Buffer Overflow (SEH)

BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 with Internet Explorer 6 Needs adjustment for Intern...

Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)

Barcodewiz BarCode ActiveX 3.29 - Denial of Service PoC BarCodeWiz Barcode ActiveX Control 3.29 PoC SEH Bug found: 24th July 2010 Found by: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professiona...

Barcodewiz BarCode ActiveX 3.29 - Denial of Service (PoC)

BarCodeWiz Barcode ActiveX Control 3.29 PoC SEH Bug found: 24th July 2010 Found by: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 & Windows XP Home SP3 Internet Explorer 6 & Intern...

Windows live msn (V 2009 build 14.0.8117.416) ActiveX ADD & delete user

Exploit for windows platform in category remote exploits ======================================================================= Windows live msn V 2009 build 14.0.8117.416 ActiveX ADD & delete user ======================================================================= In The Name Of Allah The...

Internet Explorer 6/7 Denial Of Service

Exploit Title: IE6 / 7 Remote Dos vulnerability Date: 27/07/2010 Author: Richard leahy Version: 6 / 7 Tested on: Windows Xp Sp3 category Remote Dos, might lead to code execution. The vulnerability is caused due to specifying a large value integer or string to the frame.frameBorder causing a dos a...

WM Downloader 3.1.2.2 2010.04.15 - Local Buffer Overflow (SEH)

WM Downloader 3.1.2.2 2010.04.15 - Local Buffer Overflow SEH !/usr/bin/python Exploit Title: WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow SEH Date: 2010-07-28 Author: @fdiskyou e-mail: rui at deniable.org Version: 3.1.2.2 2010.04.15 Tested on Windows XP SP3 en payload = "\x41" 43485 payload +...

UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

UPlusFTP Server 1.7.1.01 - Authenticated HTTP Remote Buffer Overflow !/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remot...

UPlusFTP Server 1.7.1.01 - (Authenticated) HTTP Remote Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

UPlusFTP Server v1.7.1.01 HTTP Remote Buffer Overflow Post Auth

Exploit for windows platform in category remote exploits =============================================================== UPlusFTP Server v1.7.1.01 HTTP Remote Buffer Overflow Post Auth =============================================================== !/usr/bin/python import socket,sys,base64 print...

WM Downloader 3.1.2.2 2010.04.15 - Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow SEH Date: 2010-07-28 Author: @fdiskyou e-mail: rui at deniable.org Version: 3.1.2.2 2010.04.15 Tested on Windows XP SP3 en payload = "\x41" 43485 payload += "\xeb\x16\x90\x90" jump payload += "\xb4\x15\xbb\x01" ppr -...

Hyleos ChemView ActiveX Control Stack Buffer Overflow

This module exploits a stack-based buffer overflow within version 1.9.5.1 of Hyleos ChemView HyleosChemView.ocx. By calling the 'SaveAsMolFile' or 'ReadMolFile' methods with an overly long first argument, an attacker can overrun a buffer and execute arbitrary code. This module requires Metasploit...

QQPlayer smi File Buffer Overflow Exploit

Exploit for windows platform in category local exploits ========================================= QQPlayer smi File Buffer Overflow Exploit ========================================= !/usr/bin/env python Title: QQPlayer smi File Buffer Overflow Exploit Author: Lufeng Li of Neusoft Corporation...

EasyFTP Server <= 1.7.0.11 LIST Command Stack Buffer Overflow

$Id: easyftplistfixret.rb 9935 2010-07-27 02:25:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IE6 / 7 Remote Dos vulnerability

No description provided by source. Exploit Title: IE6 / 7 Remote Dos vulnerability Date: 27/07/2010 Author: Richard leahy Version: 6 / 7 Tested on: Windows Xp Sp3 category Remote Dos, might lead to code execution. The vulnerability is caused due to specifying a large value integer or string to th...

IE6 / 7 Remote Dos vulnerability

Exploit for windows platform in category dos / poc ================================ IE6 / 7 Remote Dos vulnerability ================================ Exploit Title: IE6 / 7 Remote Dos vulnerability Date: 27/07/2010 Author: Richard leahy Version: 6 / 7 Tested on: Windows Xp Sp3 category Remote Dos...

EasyFTP Server <= 1.7.0.11 list.html path Stack Buffer Overflow

$Id: easyftplist.rb 9936 2010-07-27 03:14:46Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...