4362 matches found
linux/x86 /bin/sh sysenter Opcode Array Payload 23 Bytes
No description provided by source. / lnxbinsh4.c - v1 - 23 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex [email protected] Copyrightc 2005 BaCkSpAcE [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes
linux/x86 /bin/sh sysenter Opcode Array Payload 27 Bytes. Shellcode exploit for linx86 platform / lnxbinsh3.c - v1 - 27 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex Copyrightc 2005 amnesia This program is free software; you can redistribute it and/or modify it under the terms...
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes. Shellcode exploit for linx86 platform / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload Copyrightc 2005 c0ntex This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Publ...
linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes
Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh sysenter Opcode Array Payload 45 bytes ======================================================== / lnxbinsh2.c - v1 - 45 Byte /bin/sh sysenter Opcode Array Payload...
pservBad.txt
Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, From...
x_aix5_bellmail.pl.txt
-bash-2.05b$ -bash-2.05b$ cat xaix5bellmail.pl !/usr/bin/perl FileName: xaix5bellmail.pl Exploit "Race condition vulnerability BUGTRAQ ID: 8805" of /usr/bin/bellmail command on Aix5 to change any file owner to current user. Usage : xaix5bellmail.pl aimfile aimfile : then file wich you want to cho...
CVE-2002-2039
In QNX RTOS versions 4.25 and 6.1.0, /bin/su allows local users to read sensitive information from core dump files by sending SIGSERV (invalid memory reference); impact is partial confidentiality. The description notes the local privilege/impact but does not provide exploitable details, affected ...
CVE-2001-1508
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...
CVE-2001-1508: Undefined Security Weakness
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument...
Slackware 8.1 / 9.0 / 9.1 / current : lha update in bin package (SSA:2004-125-01)
New bin- packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix buffer overflows and directory traversal vulnerabilities in the 'lha' archive utility. Sites using 'lha' should upgrade to the new bin package right away. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2005-2136
Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...
CVE-2005-2136: Incorrect Authorization
Raritan Dominion SX DSX Console Servers DSX16, DSX32, DSX4, DSX8, and DSXA-48 set 1 world-readable permissions for /etc/shadow and 2 world-writable permissions for /bin/busybox, which allows local users to obtain hashed passwords or execute arbitrary code as other users...
CVE-2000-1225
CVE-2000-1225 affects Xitami 2.5b where the installer places testcgi.exe by default in the cgi-bin. Accessing this program can disclose sensitive web server configuration information to remote attackers. The accompanying metrics indicate a network-exposed, low-complexity vector with partial confi...
ViRobot Advanced Server 2.0 - addschup Remote Cookie
ViRobot Advanced Server 2.0 - addschup Remote Cookie !/usr/bin/perl ViRobot 2.0 remote cookie exploit - ala addschup copyright Kevin Finisterre kflistsatdigitalmunitiondotcom jdam:/home/kfinisterre ls -al /var/spool/cron/root ls: /var/spool/cron/root: No such file or directory...
SCO OpenServer Unix utilities format string bugs
Format string vulnerabilities in different utilities including sgid lp /usr/lib/nucrt/bin/nwprint...
CVE-2005-1680: Undefined Security Weakness
D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication 1 if their IP address already exists in /var/tmp/fwip or 2 if their request is the first, which causes /var/tmp/fwip to be created and contain their IP addre...
[Full-disclosure] Pico Server (pServ) Remote Command Injection
Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably too...
[Full-disclosure] Pico Server (pServ) Information Disclosure Of CGI Sources
Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably t...
CVE-2005-1366: Undefined Security Weakness
Pico Server pServ 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL...
pserv 3.2 - Directory Traversal
pserv 3.2 - Directory Traversal source: https://www.securityfocus.com/bid/13642/info pServ is prone to a directory traversal vulnerability. This occurs because the application does not implement a proper method for filtering directory traversal sequences from URIs. Since this can be done from the...