BlueBorne BlueTooth buffer overflow proof of concept exploit that causes a denial of service vulnerability on Linux kernels prior to 4.13.1.
8fe062e0b377bb75c70ddb9e02781792Proof of concept exploit for a Microsoft Windows .NET Framework remote code execution vulnerability. It spawns mspaint.
d6acb1333fa78b74fd573adf48276c84MessengerScan version 1.05 Hostname / IP field SEH / EIP overwrite proof of concept exploit.
d01b51ff6d93ca2535ac08f25c5e60adMS05-039 Scan version 1.0 hostname / IP field local buffer overflow proof of concept exploit.
220466729f7d646f04bfa6d4f96f833aMyDoomScanner version 1.00 Hostname / IP field SEH overwrite proof of concept exploit.
edddd4e7dc4902da8543a8f7ae8f9949DSScan version 1.0 Hostname / IP field SEH overwrite proof of concept exploit.
f87d80f851cc2e46db1143906609c748MS05-039 Scan version 1.0 Hostname / IP field local buffer overflow proof of concept exploit.
394e9ea4b3eb977bf9e15c2d5d678161The included proof of concept file causes the traits of an ActionScript object to be accessed out of bounds in Adobe Flash. This can probably lead to exploitable type confusion.
89963b5c1486fe1be37d6ac1b5c9eec1FreeBSD jail incompletely protects the access to the IPC primitives. The 'allow.sysvipc' setting only affects IPC queues, leaving other IPC objects unprotected, making them reachable system-wide independently of the system configuration. Versions 7.0 through 10.3 are affected. Proof of concept included.
e7bb338f4932b0dcb05045dbf728194cBitcoin Core Wallet version 0.14.2 proof of concept crash exploit discovered while fuzzing.
38651d8c18a430e9febe00800a5f7136Apache Struts 2.3.x Showcase remote code execution proof of concept exploit.
b127e7bfe5e4cb4867bb2f3d6c8b1d64FreeBSD setrlimit stack clash proof of concept exploit.
6eba2939821ab24edba2b623a0df6a80FreeBSD FGPE stack clash proof of concept exploit.
a5bf5e251c7b1182eb8d9d86a7cba5ecFreeBSD FGPU stack clash proof of concept exploit.
4df3d0a41e548c26a0c180b85a467afbNetBSD stack clash proof of concept exploit.
f78861cc6c2ae85e792c15a03ab7d4a6This proof of concept code shows how manager functionality can be abused in ModX CMS to upload a shell.
4a9e82ae99c6a9dbf9554d110145a1a4This proof of concept code shows how administrator functionality can be abused in Joomla to upload a shell.
5342f1f41088abee2af959b87cbce235This proof of concept code shows how administrative functionality can be abused in DokuWiki to upload a shell.
729d40f68a98bc4c5c3dc2afec215396This proof of concept code shows how functionality can be abused in Concrete5 to upload a shell.
9745e0705ed0168941e97981a8f2ab5bOpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dm_bp_transition docbase method with a user-created dm_procedure object, as demonstrated by use of a backspace character in an injected string. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2513. This code is a proof of concept exploit.
ed0b1a8a36df7ddba8be8a3ed4dee545OpenText Documentum Content Server suffers from a privilege evaluation issue using crafted RPC save commands. Two proof of concepts included.
26b6a71c9dc0176316872546a0152528Microsoft RTF CVE-2017-0199 proof of concept exploit.
11916c46b31efd35dcb2b963e50c23caThis article documents practical exploitation of CVE-2017-0199 and includes a proof of concept.
b03e34017c4b989f9ac59f7b459a5cfeMicrosoft Word RTF remote code execution proof of concept exploit.
f937dc70e4f902d07449912a173ea332Easy MOV Converter version 1.4.24 Enter User Name field SEH overwrite proof of concept denial of service exploit.
9f56ccd31bb6f69142c7f6a5f7db7227
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed