HP OpenView Network Node Manager (OV NNM) 7.53 - ovwebsnmpsrv.exe Local Buffer Overflow (SEH)

HP OpenView Network Node Manager OV NNM 7.53 - ovwebsnmpsrv.exe Local Buffer Overflow SEH Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author: bitform Software Link: hp.com Version: 7.53 Tested on: Windows XP SP2 CVE: CVE-2010-1964 Exploit: C:\Program Files\HP...

GSM SIM Utility 5.15 - Direct RET Overflow

GSM SIM Utility 5.15 - Direct RET Overflow Exploit Title : GSM SIM Utility Local Exploit Direct Ret ver. Date : July 07, 2010 Author : chap0 www.seek-truth.net Download Link : http://download.cnet.com/GSM-SIM-Utility/3000-185084-10396246.html?tag=mncol Version : 5.15 OS : Windows XP SP3 Greetz to...

GSM SIM Utility Local Exploit Direct Ret ver

Exploit for windows platform in category local exploits ============================================ GSM SIM Utility Local Exploit Direct Ret ver ============================================ Exploit Title : GSM SIM Utility Local Exploit Direct Ret ver. Date : July 07, 2010 Author : chap0...

HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ================================================== HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH ================================================== Exploit Title: HP NNM 7.53 ovwebsnmpsrv.exe Buffer Overflow SEH Date: 07/06/2010 Author:...

Microsoft IIS - ISAPI 'w3who.dll' Query String Overflow (Metasploit)

$Id: w3whoquery.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

LILDBI Shell Upload Vulnerability

Exploit for php platform in category web applications ================================= LILDBI Shell Upload Vulnerability ================================= Author: EraGoN Version: 1.0 Tested on: Windows XP sp2/sp3 & Linux Ubuntu Code : Dark Hackers Team Dork : allinurl:"/lildbi/ The shell upload...

SasCam 2.7 - ActiveX Head Buffer Overflow

SasCam 2.7 - ActiveX Head Buffer Overflow Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow Date: July 4, 2010 Author: Blake Software Link:http://download.cnet.com/SasCam-Webcam-Server/3000-23484-10491197.html Version: 2.7 Tested on: Windows XP SP3 / IE6 and 7 'for debugging/custom prolog...

EasyFTP Server LIST Command Stack Buffer Overflow

This module exploits a stack-based buffer overflow in EasyFTP Server 1.7.0.11. credit goes to Karn Ganeshan. NOTE: Although, this is likely to exploit the same vulnerability as the 'easyftpcwdfixret' exploit, it uses a slightly different vector. Module Options msf use...

SasCam 2.7 ActiveX Head Buffer Overflow

Exploit for windows platform in category local exploits ======================================= SasCam 2.7 ActiveX Head Buffer Overflow ======================================= Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow Author: Blake Software Link:...

SasCam 2.7 - ActiveX Head Buffer Overflow

Exploit Title: SasCam 2.7 ActiveX Head Buffer Overflow Date: July 4, 2010 Author: Blake Software Link:http://download.cnet.com/SasCam-Webcam-Server/3000-23484-10491197.html Version: 2.7 Tested on: Windows XP SP3 / IE6 and 7 'for debugging/custom prolog 'targetFile = "C:\Program...

Registry OCX 1.5 - ActiveX Buffer Overflow

Registry OCX 1.5 - ActiveX Buffer Overflow Tested on: Windows XP SP3 IE6/7 ' Registry OCX Remote Buffer Overflow ' Written by Blake buffer = String2008, "A" eip = unescape"%f3%30%9d%7c" 'eip 7C9D30F3 JMP ESP - SHELL32 nops = String20, unescape"%90" ' nop sled junk = String804, "D" ' bind shell po...

Registry OCX v1.5 ActiveX Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================= Registry OCX v1.5 ActiveX Buffer Overflow Exploit ================================================= Tested on: Windows XP SP3 IE6/7 ' Registry OCX Remote Buffer Overflow ' Written by Blake...

Registry OCX 1.5 - ActiveX Buffer Overflow

Tested on: Windows XP SP3 IE6/7 ' Registry OCX Remote Buffer Overflow ' Written by Blake buffer = String2008, "A" eip = unescape"%f3%30%9d%7c" 'eip 7C9D30F3 JMP ESP - SHELL32 nops = String20, unescape"%90" ' nop sled junk = String804, "D" ' bind shell port 4444 sc =...

SasCam WebCam Server 2.6.5 Active-X SEH Overwrite

'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop buffer = String8349, "A" nseh =...

SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)

'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop buffer = String8349, "A" nseh =...

ASX To MP3 Converter 3.1.2.1 Buffer Overflow

Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ‎2010-03-30 Tested on: xp sp3 my $shellcode=...

SasCam WebCam Server 2.6.5 - ActiveX Overwrite (SEH)

SasCam WebCam Server 2.6.5 - ActiveX Overwrite SEH 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in virtualbox '$ nc 192.168.1.155 4444 'Microsoft Windows XP Version 5.1.2600 'C Copyright 1985-2001 Microsoft Corp. ' 'C:\Documents and Settings\blake\Desktop...

Microsoft LSASS Service - DsRolerUpgradeDownlevelServer Overflow (MS04-011) (Metasploit)

$Id: ms04011lsass.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Internet Explorer - WebViewFolderIcon setSlice() Overflow (MS06-057) (Metasploit) (2)

$Id: ms06057webviewsetslice.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

NCTAudioFile2 2.x - ActiveX Control 'SetFormatLikeSample()' Remote Buffer Overflow (Metasploit)

$Id: nctaudiofile2setformatlikesample.rb 9668 2010-07-03 01:38:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...