5492 matches found
CVE-2007-0035: Improper Input Validation
Word or Word Viewer in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly handle data in a certain array, which allows user-assisted remote attackers to execute arbitrary code, aka the "Word Array Overflow Vulnerability."...
Analysis of the server-u site chmod vulnerability-vulnerability warning-the black bar safety net
author:wujianqiang 18/2/2004 email :[email protected] homepage:http://wujianqiang. 5 3 3. net Q:groomer when? A:Play exp... In fact, this procedure is not difficult, is the shellcode requires a little bit of trouble; Start dimming from each command to start the tone, the trouble might ...
PHP 5.2.1 with PECL phpDOC local buffer overflow
?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC" die"you need the phpDOC extension loaded."; $scode=...
php521_phpdoc_bof.txt
original url: http://retrogod.altervista.org/php521phpdocbof.html...
PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit
No description provided by source. ?php //PHP 5.2.1 with PECL phpDOC confirmphpdoccompiled local buffer overflow poc exploit //WIN 2K SP3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"phpDOC"...
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow
PHP 5.2.1 with PECL PHPDOC - Local Buffer Overflow milw0rm.com 2007-03-25...
PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================== PHP 5.2.1 with PECL phpDOC Local Buffer Overflow Exploit ======================================================== 0day.today 2018-03-14...
Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)
Exploit for unknown platform in category remote exploits ================================================================ Mercur Messaging 2005 import os import sys import time import socket import struct Place our w00tw00t egghunter in nop heaven shellcode = "\x90" 92 shellcode...
Mercur Messaging 2005 < SP4 - IMAP Remote (Egghunter)
!/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the offset of the EIP overwrite was a few...
D-Link TFTP 1.0 Long Filename Buffer Overflow
This module exploits a stack buffer overflow in D-Link TFTP 1.0. By sending a request for an overly long file name, an attacker could overflow a buffer and execute arbitrary code. For best results, use bind payloads with nonx No NX. Module Options msf use exploit/windows/tftp/dlink/longfilename m...
php_446_crack_opendict_local_bof.txt
original url: http://retrogod.altervista.org/php446crackopendictlocalbof.html...
PHP 4.4.6 crack_opendict() local buffer overflow poc exploit
?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded."; $scode= "xebx1b". "x5b". "x31xc0"...
PHP 4.4.6 crack_opendict() Local Buffer Overflow Exploit PoC
No description provided by source. ?php //PHP 4.4.6 crackopendict local buffer overflow poc exploit //win2k sp3 version / seh overwrite method //to be launched from the cli // by rgod // site: http://retrogod.altervista.org if !extensionloaded"crack" die"you need the crack extension loaded.";...
PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass
?php // PHP = 4.4.6 mssqlconnect & mssqlpconnect local buffer overflow // poc exploit and safemode bypass // windows 2000 sp3 en / seh overwrite // by rgod // site: http://retrogod.altervista.org // u can easily adjust for php5 // this as my little contribute to MOPB $scode= "xebx1b". "x5b"...
PHP 4.4.6 - mssql_[p]connect() Local Buffer Overflow
PHP 4.4.6 - mssqlpconnect Local Buffer Overflow milw0rm.com 2007-03-05...
CVE-2007-0209: Improper Control of Generation of Code
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption...
CVE-2006-1311: Undefined Security Weakness
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an R...
CVE-2007-0208: Improper Input Validation
Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code...
Novell NetWare 6.5 SP2-SP7 LSASS CIFS.NLM Overflow
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow (Metasploit)
Novell NetWare 6.5 SP2-SP7 - LSASS CIFS.NLM Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...