CVE-2008-1910: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the database service ibserver.exe in Borland InterBase 2007 SP2 allows remote attackers to execute arbitrary code via a malformed opcode 0x52 request to TCP port 3050. NOTE: this might overlap CVE-2007-5243 or CVE-2007-5244...

Heap overflow

Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file...

CVE-2008-1023: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Clip opcode parsing in Apple QuickTime before 7.4.5 on Windows allows remote attackers to execute arbitrary code via a crafted PICT image file...

Quick FTP Pro 2.1 Transfer-Mode Overflow

This module exploits a stack buffer overflow in the Quick TFTP Pro server product. MS Update KB926436 screws up the opcode address being used in oledlg.dll resulting in a DoS. This is a port of a sploit by Mati "muts" Aharoni. Module Options msf use exploit/windows/tftp/quick/tftppromode msf...

Buffer overflow

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine regcomp.c in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode UTF characters in a regular expression...

DEBIAN-CVE-2007-5116

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine regcomp.c in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode UTF characters in a regular expression...

MaraDNS DoS

Dynamic memory leak on unsupported query class or opcode...

solaris/sparc connect-back (with XNOR encoded session) 600 bytes

No description provided by source. / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o is encoded using a simple NOT algo before being transmitted on the wire...

Microsoft Excel Opcode处理远程代码执行漏洞（MS07-002）

Microsoft Excel是微软Office套件中的电子表格工具。 Excel处理Opcode的方式存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击者可以通过诱骗用户打开包含Opcode的Excel文档来利用此漏洞，如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Excel Viewer 2003 Microsoft Excel v.X for Mac Microsof...

CVE-2007-0028

Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle certain opcodes, which allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file, which results in an "Improper Memory Access Vulnerability." NOTE: an...

Microsoft Office Excel畸形公式大小栈溢出漏洞（MS06-012）

Microsoft Office Excel是非常流行的电子表格办公软件。 Microsoft Office Excel在处理Excel文档中的畸形描述时存在漏洞，攻击者可能利用此漏洞在客户机器上执行任意代码。 Microsoft Excel对opcode 0x0218的管理存在栈溢出漏洞。如果提供了特别大的公式大小，攻击者就可以触发此漏洞，可能允许远程执行代码。 Microsoft Office XP SP3 Microsoft Office X for Mac Microsoft Office 2004 for Mac Microsoft Office 2003 Service Pa...

solaris/sparc connect-back with XNOR encoded session 600 bytes

solaris/sparc connect-back with XNOR encoded session 600 bytes. Shellcode exploit for solarissparc platform / black-RXenc-con-back-SOLARIS.c MIPS This is a relitivly small 600 byte shellcode that encodes all network trafic between the exploited process and the attacker. All clear-text shell i/o i...

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes. Shellcode exploit for linx86 platform / lnxbinsh4.c - v1 - 21 Byte /bin/sh Opcode Array Payload Copyrightc 2004 c0ntex This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licens...

linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes

linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes. Shellcode exploit for linx86 platform / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex Copyrightc 2005 BaCkSpAcE This program is free software; you can redistribute it and/or modify it under the ter...

linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes

linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes. Shellcode exploit for linx86 platform / lnxbinsh3.c - v1 - 27 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex Copyrightc 2005 amnesia This program is free software; you can redistribute it and/or modify it under the terms...

linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes

linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes. Shellcode exploit for linx86 platform / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Publ...

linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes

No description provided by source. / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free...

linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes ======================================================== / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload...

[Full-Disclosure] EEYE: Windows VDM #UD Local Privilege Escalation

Windows VDM UD Local Privilege Escalation Release Date: October 12, 2004 Date Reported: March 18, 2004 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 Windows 2000 Windows XP SP1 and earlier Windows Server 2003 Description: eEye Digital Security has discover...