Microsoft Excel 2000/2003 (French) - Hlink Local Buffer Overflow

/ -/\NSRocket/- presents Microsoft Excel 2000 and 2003 exploit for WinXP SP2 french with shellcode source integrated Description: Microsoft Excel is prone to a remote code execution issue which may be triggered when a malformed Excel document is opened. The issue is due to an error in Excel while...

WinRAR 3.60 Beta 6 - SFX Path Local Stack Overflow

WinRAR 3.60 Beta 6 - SFX Path Local Stack Overflow """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts """ import os, sys...

Microsoft Excel 2003 Hlink Stack/SEH Buffer Overflow Exploit

No description provided by source. !perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Manuel Santamarina Suarez The vulnerability was discovered by 'kcope'. First click on the link and then on the "Yes" button to cause the stack overflow. fixed shellcode location !! Must...

CesarFTP099g-py.txt

!/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe "\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Pico Zip 4.01 - 'Filename' Local Buffer Overflow

!/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a boundary error within the "zipinfo.dll"...

CVE-2006-2371: Undefined Security Weakness

Buffer overflow in the Remote Access Connection Manager service RASMAN service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to...

CVE-2006-2373: Undefined Security Weakness

The Server Message Block SMB driver MRXSMB.SYS in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHODNEITHER method flag and an arbitrary address, possibly f...

CVE-2006-0022: Undefined Security Weakness

Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruptio...

CVE-2006-2379: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing...

CVE-2006-2370: Undefined Security Weakness

Buffer overflow in the Routing and Remote Access service RRAS in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corrupti...

CesarFTP 0.99g - MKD Remote Buffer Overflow

CesarFTP 0.99g - MKD Remote Buffer Overflow !/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe...

CesarFTP 0.99g (MKD) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits =================================================== CesarFTP 0.99g MKD Remote Buffer Overflow Exploit =================================================== !/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested...

CesarFTP 0.99g (MKD) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe metasploit.com...

CesarFTP 0.99g - 'MKD' Remote Buffer Overflow

!/usr/bin/python CesarFtp 0.99g 0day Exploit Proof of Concept: execute calc.exe Tested on XP sp2 polish Bug found by h07 [email protected] Date: 10.06.2006 from socket import shellcode = execute calc.exe "\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"...

CVE-2006-2492: Buffer Copy without Checking Size of Input

Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack...

PuTTy.exe <= 0.53 (validation) Remote Buffer Overflow Expl (meta)

Exploit for unknown platform in category remote exploits ==================================================================== PuTTy.exe 'PuTTy.exe '$Revision: 1.1 $', 'Authors' = 'y0 at w00t-shell.net' , 'Description' = Pex::Text::Freeformqq This module exploits a buffer overflow in the PuTTY SSH...

CVE-2006-2334: Undefined Security Weakness

The RtlDosPathNameToNtPathNameU API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or...

Windows 2003 or XP SP2 VPN Detection

Binary data 3564.prm...

Code injection

Microsoft Distributed Transaction Coordinator MSDTC for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service crash via a BuildContextW request with a large 1 UuidString or 2 GuidIn of a certain length, which causes an out-of-range memory...