4362 matches found
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes
No description provided by source. / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46 raptor Exp $ reusage-linux.c - re-use of "/bin/sh" string in .rodata Copyright c 2003 Marco Ivaldi [email protected] Short local shellcode for /bin/sh execve. It re-uses the "/bin/sh" string stored in the...
linux/x86 stdin re-open and /bin/sh exec shellcode
No description provided by source. / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Local shellcode for stdin re-open and /bin/sh exec. It closes stdin descriptor and re-opens...
Debian DSA-937-1 : tetex-bin - buffer overflows
'infamous41md' and Chris Evans discovered several heap based buffer overflows in xpdf, the Portable Document Format PDF suite, which is also present in tetex-bin, the binary files of teTeX, and which can lead to a denial of service by crashing the application or possibly to the execution of...
Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit
Exploit for macOS platform in category local exploits ============================================================= Mac OS X include include include extern booleant excservermachmsgheadert , machmsgheade...
CVE-2006-5018: Undefined Security Weakness
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI...
AIX 5.1 : IY27270
The remote host is missing AIX Critical Security Patch number IY27270 SECURITY: Buffer overflow in /usr/bin/cu. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
Apache for Windows script source code leak
It's possible to access script code if cgi-bin is within DocumentRoot...
CVE-2006-4000: Undefined Security Weakness
Directory traversal vulnerability in cgi-bin/previewemail.cgi in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter...
linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes
Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes ================================================================ / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46...
linux/x86 stdin re-open and /bin/sh exec shellcode
linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...
CVE-2006-3373: Undefined Security Weakness
Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root...
D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln
No description provided by source. ADVISORY/0206 - D-Link Wireless Access-Point DWL-2100ap INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ , http://www.intruders.org.br/ Making a HTTP request to the /cgi-bin/ directory, the Web server will return error 404 Page not...
Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory Name Open-Xchange defaultuser with /bin/bash Vendor Open-Xchange Inc. Product Open-Xchange Version 0.8.2 Author Cemil Degirmenci Risk high o Description: ======================= The OPEN-XCHANGE Collaboration and Integration Server Environmen...
Open Exchange default account
mailadmin/secret LDAP account is created during installation with /bin/bash login shell...
linux/x86 - execve/bin/sh 24 bytes
linux/x86 execve/bin/sh 24 bytes. Shellcode exploit for linx86 platform / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68"...
openbsd/x86 execve(/bin/sh) 23 bytes
Exploit for openbsd/x86 platform in category shellcode ==================================== openbsd/x86 execve/bin/sh 23 bytes ==================================== / OpenBSD/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 23 bytes / include include include include include include include...
linux/x86 execve(/bin/sh) 24 bytes
No description provided by source. / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68" // push $0x68732f6e...
os-x/ppc execve(/bin/sh), exit() 72 bytes
Exploit for os-x/ppc platform in category shellcode ========================================= os-x/ppc execve/bin/sh, exit 72 bytes ========================================= / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes / include include char shellcode =...
linux/x86 execve(/bin/sh) 24 bytes
Exploit for linux/x86 platform in category shellcode ================================== linux/x86 execve/bin/sh 24 bytes ================================== / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode =...
[Full-disclosure] WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability
WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability By Sowhat of Nevis Labs Date: 2006.04.28 http://www.nevisnetworks.com http://secway.org/advisory/AD20060428.txt CVE: N/A Vendor WinISO Computing Inc. EZB Systems, Inc. MagicISO Inc. PowerISO Computing, Inc. Affected Software WinI...