2538 matches found
CVE-2007-5190
Multiple cross-site scripting XSS vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the action parameter to php-bin/Webclient.php or 2 the Langue parameter to the default URI...
Apple iOS Command Shell, Reverse TCP Inline
Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Payload::Osx include...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the 1 DD or 2 DU parameter...
CVE-2007-4822
Cross-site request forgery CSRF vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as...
Ourspace 2.0.9 (uploadmedia.cgi) Remote File Upload Vulnerability
Exploit for cgi platform in category web applications ================================================================= Ourspace 2.0.9 uploadmedia.cgi Remote File Upload Vulnerability ================================================================= ++++++++++++++++++++++++++++++++++++ | Discover...
Debian DSA-1350-1 : tetex-bin - integer overflow
It was discovered that an integer overflow in the xpdf PDF viewer may lead to the execution of arbitrary code if a malformed PDF file is opened. tetex-bin includes a copy of the xpdf code and required an update as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Design/Logic Flaw
AIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users with bin or possibly printq privileges to gain root privileges by modifying pioinit...
[SECURITY] [DSA 1350-1] New tetex-bin packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1350-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff August 6th, 2007 http://www.debian.org/security/faq -...
DSA-1350-1 tetex-bin
Bulletin has no description...
Solaris 8 (x86) : 114670-04
SunOS 5.8x86: /usr/bin/rcp patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-3417
Multiple cross-site scripting XSS vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the 1 processsearch or 2...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in cgi-bin/cgi-lib/search.pl in web-app.org WebAPP before 0.9.9.7 allow remote attackers to inject arbitrary web script or HTML via a search string, which is not sanitized when an HREF attribute is printed by the 1 processsearch or 2...
CVE-2007-3364
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
PT-2007-4294 · Salescart · Salescart Shopping Cart
Name of the Vulnerable Software and Affected Versions: SalesCart Shopping Cart affected versions not specified Description: The issue concerns SQL injection vulnerabilities in the cgi-bin/reorder2.asp file of SalesCart Shopping Cart, allowing remote attackers to execute arbitrary SQL commands via...
ultra-noob.txt
/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow Exploit 2
No description provided by source. ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ==================================================================== UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode...
UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (1)
/ Date : May 28th 2007. UltraISO executes calc.Don't forget you need to have the bin and cue file in the same Directory special thanks to Thomas Pollet also. / include include //Calc shellcode unsigned char shellcode = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...
UltraISO 8.6.2.2011 - '.cue/'.bin' Local Buffer Overflow (2)
ultra iso exploit thomas . pollet @ gmail . com import struct scode=metasploit calc.exe shellcode "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49" "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36" "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34...
UltraISO <= 8.6.2.2011 (Cue/Bin Files) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl Credit:To n00b for finding this bug and writing poc. Ultra ISO stack over flow poc code. Ultra iso is exploitable via opening a specially crafted Cue file..There is A limitation that the user must have the bin file in the same dir as the cue file...