Section: .. / 0910-exploits /
| /// File Name: |
linksys_apply_cgi.rb.txt |
Description:
|
This Metasploit module exploits a stack overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers. According to iDefense who discovered this vulnerability, all WRT54G versions prior to 4.20.7 and all WRT54GS version prior to 1.05.2 may be be affected.
| | Author: | Julien Tinnes,Raphael Rigo | | Related File: | 09.13.05-5.txt | | File Size: | 3277 | | Related OSVDB(s): | 19389 | | Related CVE(s): | CVE-2005-2799 | | Last Modified: | Oct 27 13:36:55 2009 |
| MD5 Checksum: | f46d36d7aa558c865de93b54fe9cb04b |
|
| /// File Name: |
loginext.rb.txt |
Description:
|
This Metasploit module exploits a stack overflow in the AppleFileServer service on MacOS X. This vulnerability was originally reported by Atstake and was actually one of the few useful advisories ever published by that company. You only have one chance to exploit this bug. This particular exploit uses a stack-based return address that will only work under optimal conditions.
| | Author: | H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 2545 | | Related OSVDB(s): | 5762 | | Related CVE(s): | CVE-2004-0430 | | Last Modified: | Oct 28 14:53:39 2009 |
| MD5 Checksum: | c5d220500644b606493b5cdc461b5bbd |
|
| /// File Name: |
lsa_transnames_heap.rb.txt |
Description:
|
This Metasploit module triggers a heap overflow in the LSA RPC service of the Samba daemon. This module uses the TALLOC chunk overwrite method (credit Ramon and Adriano), which only works with Samba versions 3.0.21-3.0.24. Additionally, this module will not work when the Samba "log level" parameter is higher than "2".
| | Author: | Adriano Lima | | Homepage: | http://www.risesecurity.org/ | | File Size: | 8185 | | Related OSVDB(s): | 34699 | | Related CVE(s): | CVE-2007-2446 | | Last Modified: | Oct 27 16:27:36 2009 |
| MD5 Checksum: | 8f84f393fa7096a43ae30b92fc8df61d |
|
| /// File Name: |
lsass_cifs.rb.txt |
Description:
|
This Metasploit module exploits a stack overflow in the NetWare CIFS.NLM driver. Since the driver runs in the kernel space, a failed exploit attempt can cause the OS to reboot.
| | Author: | toto | | File Size: | 3138 | | Related OSVDB(s): | 12790 | | Last Modified: | Oct 28 14:51:12 2009 |
| MD5 Checksum: | d4b13b929126920753288d33c74b948f |
|
| /// File Name: |
madwifi_giwscan_cb.rb.txt |
Description:
|
This Metasploit module exploits a stack-based buffer overflow in the Madwifi driver.
| | Author: | Julien Tinnes,Laurent Butti | | File Size: | 8932 | | Related OSVDB(s): | 31267 | | Related CVE(s): | CVE-2006-6332 | | Last Modified: | Oct 27 14:09:44 2009 |
| MD5 Checksum: | 08745c6fa50ec188b98852ec2891a8bd |
|
| /// File Name: |
mambo_cache_lite.rb.txt |
Description:
|
This Metasploit module exploits a remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier.
| | Author: | MC | | File Size: | 1983 | | Related CVE(s): | CVE-2008-2905 | | Last Modified: | Oct 30 14:31:46 2009 |
| MD5 Checksum: | 22e651699eccbe7326a64912218e25e4 |
|
| /// File Name: |
manyargs.rb.txt |
Description:
|
This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments.
| | Author: | I)ruid | | File Size: | 5171 | | Related OSVDB(s): | 690,691 | | Related CVE(s): | CVE-2001-0797 | | Last Modified: | Oct 27 11:38:16 2009 |
| MD5 Checksum: | 51afebbc895b33a74c8ba7e02248e61f |
|
| /// File Name: |
mckesson-passwd.txt |
Description:
|
McKesson Horizon Clinical Infrastructure, also know as McKesson HCI, utilizes hardcoded passwords for Oracle database access. This is very disturbing considering they claim to be installed in 70% of all hospitals in the United States. Versions 7.6, 7.8, 10.0, and 10.1 are all affected.
| | File Size: | 3179 | | Last Modified: | Oct 19 18:13:04 2009 |
| MD5 Checksum: | 295de0dcb4b14bae7523d8203022dec4 |
|
| /// File Name: |
memcorrupt.tgz |
Description:
|
Various reproduction code that demonstrates memory corruption when loading/unloading Adobe objects through an EMBED tag in Firefox.
| | Author: | SkyLined | | File Size: | 869 | | Related CVE(s): | CVE-2009-2983 | | Last Modified: | Oct 15 14:32:13 2009 |
| MD5 Checksum: | e46dbb863f26ab68d37f398a2bc2de61 |
|
| /// File Name: |
mercantec_softcart.rb.txt |
Description:
|
This is an exploit for an undisclosed buffer overflow in the SoftCart.exe CGI as shipped with Mercantec's shopping cart software. It is possible to execute arbitrary code by passing a malformed CGI parameter in an HTTP GET request. This issue is known to affect SoftCart version 4.00b.
| | Author: | trew,skape | | File Size: | 2336 | | Related OSVDB(s): | 9011 | | Related CVE(s): | CVE-2004-2221 | | Last Modified: | Oct 27 11:35:26 2009 |
| MD5 Checksum: | d90c8be4dea2e6e590bf5767c2ab4e57 |
|
| /// File Name: |
millennium_mp3_studio_2.0.pl.txt |
Description:
|
Millenium MP3 Studio version 2.0 .mpf file local stack overflow exploit.
| | Author: | dellnull | | File Size: | 3397 | | Last Modified: | Oct 14 19:33:43 2009 |
| MD5 Checksum: | 0d88d14c978a4d22c30eb02eba2e4a47 |
|
| /// File Name: |
millennium_mp3_studio_2.0_m3u_unive..> |
Description:
|
Millenium MP3 Studio version 2.0 local stack overflow universal exploit that creates a malicious .m3u file.
| | Author: | dellnull | | File Size: | 3676 | | Last Modified: | Oct 15 15:59:14 2009 |
| MD5 Checksum: | 71857812ae29ca4ac79e965f043926ed |
|
| /// File Name: |
minishare155-overflow.txt |
Description:
|
MiniShare HTTP server version 1.5.5 remote buffer overflow exploit that binds a shell to port 4444.
| | Author: | iM4n | | File Size: | 4120 | | Last Modified: | Oct 19 20:09:50 2009 |
| MD5 Checksum: | 246d187aa67e0473fd80dcc4c4d75347 |
|
| /// File Name: |
mongoose-disclose.txt |
Description:
|
Mongoose Web Server versions 2.8.0 and below suffer from a remote source disclosure vulnerability.
| | Author: | Dr_IDE | | File Size: | 679 | | Last Modified: | Oct 15 15:52:24 2009 |
| MD5 Checksum: | e45c1d7995171e847da6c87374403d09 |
|
| /// File Name: |
mongoose280-disclose.txt |
Description:
|
Mongoose Web Server versions 2.8.0 and below suffer from a remote source disclosure vulnerability.
| | Author: | Dr_IDE | | File Size: | 663 | | Last Modified: | Oct 23 13:44:02 2009 |
| MD5 Checksum: | 57c4ddacd4d567188c15081908ef7f87 |
|
| /// File Name: |
mozilla_compareto.rb.txt |
Description:
|
This Metasploit module exploits a code execution vulnerability in the Mozilla Suite, Mozilla Firefox, and Mozilla Thunderbird applications. This exploit module is a direct port of Aviv Raff's HTML PoC.
| | Author: | Aviv Raff,H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 5132 | | Related OSVDB(s): | 17968 | | Related CVE(s): | CVE-2005-2265 | | Last Modified: | Oct 27 17:01:03 2009 |
| MD5 Checksum: | 4d11bb8de765d259995301791ec60b38 |
|
| /// File Name: |
mozilla_navigatorjava.rb.txt |
Description:
|
This Metasploit module exploits a code execution vulnerability in the Mozilla Suite, Mozilla Firefox, and Mozilla Thunderbird applications. This exploit requires the Java plugin to be installed.
| | Author: | H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 3644 | | Related OSVDB(s): | 27559 | | Related CVE(s): | CVE-2006-3677 | | Last Modified: | Oct 27 17:05:07 2009 |
| MD5 Checksum: | 2804a3015f290bb20035327cbda16adf |
|
| /// File Name: |
msiedeflate-corrupt.txt |
Description:
|
Microsoft Internet Explorer suffers from a Content-Encoding: deflate memory corruption vulnerability.
| | Author: | SkyLined | | File Size: | 620 | | Related CVE(s): | CVE-2009-1547 | | Last Modified: | Oct 15 14:35:37 2009 |
| MD5 Checksum: | e2a3f882080bbfa378aec3962dbf2701 |
|
| /// File Name: |
mysql_yassl.rb.txt |
Description:
|
This Metasploit module exploits a stack overflow in the yaSSL (1.7.5 and earlier) implementation bundled with MySQL versions 6.0 and below. By sending a specially crafted Hello packet, an attacker may be able to execute arbitrary code.
| | Author: | MC | | File Size: | 2057 | | Related OSVDB(s): | 41195 | | Related CVE(s): | CVE-2008-0226 | | Last Modified: | Oct 27 16:20:12 2009 |
| MD5 Checksum: | 690b5fdd36e38c0b026a4e0fc9ad7a54 |
|
| /// File Name: |
nagios3_statuswml_ping.rb.txt |
Description:
|
This Metasploit module abuses a metacharacter injection vulnerability in the Nagios3 statuswml.cgi script. This flaw is triggered when shell metacharacters are present in the parameters to the ping and traceroute commands.
| | Author: | H D Moore | | Homepage: | http://www.metasploit.com | | File Size: | 2878 | | Related OSVDB(s): | 55281 | | Related CVE(s): | CVE-2009-2288 | | Last Modified: | Oct 30 14:33:33 2009 |
| MD5 Checksum: | 8369632633bc7915a367b2218ef452f3 |
|
| /// File Name: |
navicopa-disclose.txt |
Description:
|
NaviCOPA versions 3.0.1.2 and below suffer from a remote source disclosure vulnerability.
| | Author: | Dr_IDE | | File Size: | 635 | | Last Modified: | Oct 14 17:25:31 2009 |
| MD5 Checksum: | 7eb5724234bba50a2df67a4e33d43b21 |
|
| /// File Name: |
nginx-dos.txt |
Description:
|
nginx versions 0.7.0 through 0.7.61, 0.6.0 through 0.6.38, 0.5.0 through 0.5.37, and 0.4.0 through 0.4.14 suffer from a remote null pointer dereferencing vulnerability. Proof of concept code included.
| | Author: | zeus penguin | | File Size: | 4972 | | Last Modified: | Oct 23 13:55:00 2009 |
| MD5 Checksum: | 14adedcf029f6a34749e1f0d7b331821 |
|
| /// File Name: |
NGS00532.txt |
Description:
|
SharePoint Team Services suffers from a remote source code disclosure vulnerability in its download facility.
| | Author: | Daniel Martin | | File Size: | 4217 | | Last Modified: | Oct 26 19:37:17 2009 |
| MD5 Checksum: | b5a6103f707376e91e9192d422dd25ea |
|
| /// File Name: |
novelbof.txt |
Description:
|
Novell eDirectory version 8.8 SP5 for Windows proof of concept buffer overflow exploit.
| | Author: | karak0rsan,murderkey | | Homepage: | http://tcc.hellcode.net/ | | File Size: | 3268 | | Last Modified: | Oct 26 14:48:37 2009 |
| MD5 Checksum: | 453bca7988f2f24cb5de8234768537fb |
|
|
|
|
|