4362 matches found
CVE-2008-5394
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry...
issetugid() + rsh + libmalloc OS X Local Root Exploit
The default root-suid binary /usr/bin/rsh on Mac OS X uses execv in an insecure manner. /usr/bin/rsh will invoke /usr/bin/rlogin if launched with only a host argument, without dropping privileges or clearing the environment. This exploit will pass "MallocLogFile" to /usr/bin/rsh, which is then...
PT-2015-3057
Name of the Vulnerable Software and Affected Versions Endian Firewall versions prior to 3.0 Description The issue is related to the lack of input validation in the Endian Firewall. It allows a remote attacker to execute arbitrary commands by passing metacharacters through the NEW PASSWORD 1 or NE...
Android Shellcode Telnetd with Parameters
/ Title: Android/ARM - telnetd with three parameters and an environment variable Date: 2015-07-31 Tested on: Android Emulator and Samsung Note 10.1 Android version 4.1.2 Author: Steven Padilla - email: email protected Organization: Tresys LLC Vendor HomePage: www.tresys.com Version: 1.0 Android A...
Android Shellcode Telnetd with Parameters
Android Shellcode Telnetd with Parameters. Shellcode exploit for android platform / Title: Android/ARM - telnetd with three parameters and an environment variable Date: 2015-07-31 Tested on: Android Emulator and Samsung Note 10.1 Android version 4.1.2 Author: Steven Padilla - email:...
Linux x86_64 - /bin/sh
Linux x8664 - /bin/sh. Shellcode exploit for linx86-64 platform Exploit Title: Shellcode /bin/sh for Linux x8664 different approach Date: 2015-09-10 Exploit Author: Fanda Uchytil Version: 1 Tested on: Linux 3.16.0-4-amd64 Debian, 2.6.32-openvz-042stab093.5-amd64 Centos/RHEL based, 2.6.32-5-amd64...
Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL
Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL. Shellcode exploit for linx86 platform / --------------------------------------------------------------------------------------------------- Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL - 75 bytes Tested in Zorin OS 10...
linux/x86 - execve("/bin/cat", ["/bin/cat", "/etc/passwd"], NULL
/ --------------------------------------------------------------------------------------------------- Linux/x86 - execve"/bin/cat", "/bin/cat", "/etc/passwd", NULL - 75 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Ma...
Linux/x86 - execve/bin/bash - 31 bytes
Linux/x86 - execve/bin/bash - 31 bytes. Shellcode exploit for linx86 platform / --------------------------------------------------------------------------------------------------- Linux/x86 - execve/bin/bash - 31 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa...
linux/x86 - execve(/bin/bash) - 31 bytes
/ --------------------------------------------------------------------------------------------------- Linux/x86 - execve/bin/bash - 31 bytes Ajith Kp @ajithkp560 http://www.terminalcoders.blogspot.com Om Asato Maa Sad-Gamaya | Tamaso Maa Jyotir-Gamaya | Mrtyor-Maa Amrtam Gamaya | Om Shaantih...
CVE-2014-6616
Cross-site scripting XSS vulnerability in Softing FG-100 PROFIBUS Single Channel FG-100-PB with firmware FG-x00-PBV2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICENAME parameter to cgi-bin/CFGhttp/...
PT-2015-3910
Name of the Vulnerable Software and Affected Versions Softing FG-100 PROFIBUS Single Channel FG-100-PB with firmware FG-x00-PB V2.02.0.00 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the DEVICE NAME parameter to the...
CVE-2014-6616: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Softing FG-100 PROFIBUS Single Channel FG-100-PB with firmware FG-x00-PBV2.02.0.00 allows remote attackers to inject arbitrary web script or HTML via the DEVICENAME parameter to cgi-bin/CFGhttp/...
PT-2015-3318
Name of the Vulnerable Software and Affected Versions picocom versions prior to 2.0 Description The issue is related to a command injection vulnerability in the 'send and receive file' command. This vulnerability arises because the command line is executed by /bin/sh unsafely, allowing an attacke...
python: CGIHTTPServer module does not properly handle URL-encoded path separators in URLs
It was discovered that the CGIHTTPServer module incorrectly handled URL encoded paths. A remote attacker could use this flaw to execute scripts outside of the cgi-bin directory, or disclose source of scripts in the cgi-bin directory...
linux/x86 exec('/bin/dash') - shellcode 45 bytes
/ Title: Linux/x86 exec'/bin/dash' - shellcode 45 bytes Platform: linux/x8664 Date: 2015-06-15 Author: Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp FaceBook :...
CVE-2015-1159
Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...
CVE-2015-1159: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the cgiputs function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/...
Multiple AirTies Air product stack buffer overflow vulnerability
Airties Air 6372 and others are wireless modem products from Airties Turkey. Multiple AirTies Air products contain a cgi-bin/login that fails to properly handle extra-long strings in the 'redirect' parameter, allowing remote attackers to exploit the vulnerability by submitting a special request...
Stack overflow
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login...