Microsoft Excel 2000/2003 (French) - Hlink Local Buffer Overflow

/ -/\NSRocket/- presents Microsoft Excel 2000 and 2003 exploit for WinXP SP2 french with shellcode source integrated Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed Excel document is opened. The issue is due to an error in Excel while...

Microsoft Excel 2003 (Italian) - Hlink Local Buffer Overflow

!perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Giuseppe Gottardi aka oveRet [email protected] Note: This exploit was originaly written by Manuel Santamarina Suarez, but it was working by clicking on the link and then on the "Yes" button. In this version of explo...

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft...

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

/ Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process to run arbitrary code. / include include const char...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit (c code)

Exploit for linux platform in category local exploits ========================================================== Xmame 0.102 -lang Local Buffer Overflow Exploit c code ========================================================== / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit (c code)

No description provided by source. / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix [email protected] 0x11 @EFNET icq : 234263 0x11.org Advisory : http://kerneltrap.org/node/6055 e.g: Qnix ./exploit /usr/games/bin/xmame.x11 Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qn...

Xmame 0.102 - -lang Local Buffer Overflow

Xmame 0.102 - -lang Local Buffer Overflow !/usr/bin/ruby One of the PoC code for xmame "-lang" options. Advisory is base on : http://kerneltrap.org/node/6055 by xwings at mysec dot org url : http://www.mysec.org , new website Tested on : Linux debian24 2.4.27-2-386 1 Mon May 16 16:47:51 JST 2005...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit

Exploit for linux platform in category local exploits ================================================= Xmame 0.102 -lang Local Buffer Overflow Exploit ================================================= !/usr/bin/ruby One of the PoC code for xmame "-lang" options. Advisory is base on :...

PHP 4.4.0 - mysql_connect function Local Buffer Overflow

PHP 4.4.0 - mysqlconnect function Local Buffer Overflow ?php / This exploit was designed to work with PHP versions 4.3.10 and 4.4.0 under Windows XP SP 1. If another operating system is used, the replacement EIP must be changed. The replacement EIP is written 261 bytes into our string. For this...

PHP <= 4.4.0 (mysql_connect function) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =================================================================== PHP = 4.4.0 mysqlconnect function Local Buffer Overflow Exploit =================================================================== ?php / This exploit was designed to work...

WinRAR 3.30 - Filename Local Buffer Overflow (2)

WinRAR 3.30 - Filename Local Buffer Overflow 2 / IHS public source code WinRAR 3.3.0 and below local BOF exploit author : c0d3r , kaveh razavi advisory : http://www.securityfocus.com/archive/1/420679 tnx to alpha who reported the vulnerability workaround: use the lastest version special tnx to Lo...

dBpowerAMPv11.5.txt

dBpowerAMP Music Converter v11.5 and priors Local Buffer Overflow Issue Original: http://secubox.shadock.net/dBpowerAMPMusicConverterv11.5LocalBufferOverflowIssue.html VULNERABLE PRODUCT ----------------------------------- Software: dBpowerAMP Music Converter Corporation: Illustrate Release: 11.5...

QNX RTOS 6.3.0 (phgrafx) Local Buffer Overflow Exploit (x86)

Exploit for QNX platform in category local exploits ============================================================ QNX RTOS 6.3.0 phgrafx Local Buffer Overflow Exploit x86 ============================================================ / email protected c 2005, all rights reserved. sample exploit for...

Apache <= 1.3.33 htpasswd local overflow

The remote host appears to be running Apache 1.3.33 or older. There is a local buffer overflow in the 'htpasswd' command in these versions that may allow a local user to gain elevated privileges if 'htpasswd' is run setuid or a remote user to run arbitrary commands remotely if the script is...

XMail 1.21 - '-t' Command Line Option Local Buffer Overflow / Local Privilege Escalation

/ XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET "/var/MailRoot/bin/sendmail" define NM "nm" define GREP "grep" define MKDIR "mkdir" define TMP "/tmp"...

IBM AIX 5.x - Invscout Local Buffer Overflow

IBM AIX 5.x - Invscout Local Buffer Overflow source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line...

IBM AIX 5.x - 'Invscout' Local Buffer Overflow

source: https://www.securityfocus.com/bid/13909/info invscout is prone to a local buffer overflow vulnerability. This issue presents itself because the application fails to carry out boundary checks on user-supplied data from the command line. /usr/sbin/invscout perl -e 'print "A" x 1024;'...

WinZip 8.1 - Command Line Local Buffer Overflow

WinZip 8.1 - Command Line Local Buffer Overflow / WinZip Command Line Local Buffer Overflow http://securitytracker.com/alerts/2004/Sep/1011132.html http://www.winzip.com/wz90sr1.htm Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected] Credit to kozan / /...

Linux Kernel 2.2.x/2.3.x/2.4.x/2.5.x/2.6.x - ELF Core Dump Local Buffer Overflow (PoC)

/ source: https://www.securityfocus.com/bid/13589/info The Linux kernel is susceptible to a local buffer-overflow vulnerability when attempting to create ELF coredumps. This issue is due to an integer-overflow flaw that results in a kernel buffer overflow during a 'copyfromuser' call. To exploit...

BitchX 1.0c20 - Local Buffer Overflow

/ Tested on BitchX-1.0c19 /str0ke / / P.o.C Exploit Code for BitchX made for Version BitchX-1.0c20cvs -- Date 20020325 C 2004. GroundZero Security Research and Software Development http://www.groundzero-security.com released under the GNU GPL - http://www.gnu.org/licenses/gpl.txt -- background...