1462 matches found
SunOS <= 4.1.3 kmem setgid /etc/crash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash ! sh...
SSH2 3.0 Short Password Login Vulnerability
source: http://www.securityfocus.com/bid/3078/info An input validation error exists in version 3.0.0 of the SSH daemon sshd running on Unix platforms. It may be possible for remote users to log in to accounts for which there are two or less characters in the password field of the system password...
Solaris/x86 - SystemV killall command - 39 bytes
No description provided by source. / Title: Solaris/x86 - SystemV killall command - 39 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/jonathansalwan ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-0...
MusicDaemon <= 0.0.3 - Remote DoS and /etc/shadow Stealer (2)
No description provided by source. / MusicDaemon = 0.0.3 v2 Remote /etc/shadow Stealer / DoS Vulnerability discovered by: Tal0n 05-22-04 Exploit code by: Tal0n 05-22-04 Greets to: atomix, vile, ttl, foxtrot, uberuser, d4rkgr3y, blinded, wsxz, serinth, phreaked, h3x4gr4m, xaxisx, hex, phawnky,...
change mode 0777 of "/etc/shadow" with sys_chmod syscall
No description provided by source. / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...
Linux/x86 pwrite("/etc/shadow", hash, 32, 8) Shellcode 83
No description provided by source. / | Title: Linux/x86 pwrite/etc/shadow, hash, 32, 8 Shellcode 83 Bytes | Description: replace root's password with hash of agix in MD5 | Type: Shellcode | Author: agix | Platform: Linux X86 / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...
linux/x86 chmod("/etc/shadow",666) & exit(0) 30 bytes
No description provided by source. / Linux/x86 - chmod/etc/shadow,666 & exit0 Info reg ------------------ %eax = 15 %ebx = /etc/shadow %ecx = 666 %eax = 1 %ebx = 0 Shellcode 30 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Disassembly of section .text:...
Motorola SURFBoard Cable Modem Directory Traversal
No description provided by source. Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the...
linux/x86 chmod(/etc/shadow, 0666) + exit() 32 bytes
No description provided by source. / linux/x86 chmod/etc/shadow, 0666 + exit - 32 bytes - izik [email protected] / char shellcode = \x6a\x0f // push $0xf \x58 // pop %eax \x31\xc9 // xor %ecx,%ecx \x51 // push %ecx \x66\xb9\xb6\x01 // mov $0x1b6,%cx \x68\x61\x64\x6f\x77 // push $0x776f6461...
[Raspberry Pi] Linux/ARM - chmod("/etc/shadow", 0777) - 41 bytes
No description provided by source. / Title: Linux/ARM - chmod/etc/shadow, 0777 - 41 bytes Date: 2012-09-08 Tested on: ARM1176JZF-S v6l Author: midnitesnake 00008054 start: 8054: e28f6001 add r6, pc, 1 8058: e12fff16 bx r6 805c: 4678 mov r0, pc 805e: 3012 adds r0, 18 8060: 21ff movs r1, 255 ; 0xff...
SCO Unixware 7.1 pkginstall Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/853/info It is possible to view the entries in /etc/shadow through exploiting a buffer overflow in pkgcat and pkginstall. Though neither of these binaries are setuid, the dacread permissions which are granted in...
BSDI <= 4.0 tcpmux / inetd crash Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/66/info A vulnerability exists in inetd which allows a remote user to crash inetd if the tcpmux service is not commented out of /etc/inetd.conf. The tcpmux service is defined in RFC1078 $ nmap -p 1-64000 -i target host It...
X.Org xorg-x11-xfs <= 1.0.2-3.1 - Local Race Condition Exploit
No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...
solaris/x86 setuid(0), execve(/bin/cat, /etc/shadow), exit(0) 59 bytes
No description provided by source. / ; sm4x 2008 ; /bin/cat /etc/shadow ; 59 bytes ; SunOS sol01 5.11 snv86 i86pc i386 i86pc Solaris ; port to SunOS to pwn a b0x - thank god for that default unix CRYPTDEFAULT!!!! ; this is what happens when ur work takes away root pirv on a SunOS box :-/ global...
Help Center Live 2.1.2 Module.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19256/info Help Center Live is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files from the vulnerable...
Linux/ARM - polymorphic chmod("/etc/shadow", 0777) - 84 Bytes
No description provided by source. / | Title: Linux/ARM - polymorphic chmod/etc/shadow, 0777 - 84 Bytes | Type: Shellcode | Author: Florian Gaultier [email protected] | Platform: Linux ARM ARM926EJ-S rev 5 v51 | + http://www.shell-storm.org / include stdio.h char shellcode =...
Ubuntu PAM 1.1.0 MOTD - Local Root Exploit
No description provided by source. !/bin/bash Exploit Title: Ubuntu PAM MOTD local root Date: July 9, 2010 Author: Anonymous Software Link: http://packages.ubuntu.com/ Version: pam-1.1.0 Tested on: Ubuntu 9.10 Karmic Koala, Ubuntu 10.04 LTS Lucid Lynx CVE: CVE-2010-0832 Patch Instructions: sudo...
Linux pam_lib_smb < 1.1.6 /bin/login Remote Exploit
No description provided by source. / Linux pamlibsmb 1.1.6 /bin/login exploit by vertex Tested on Redhat 8.0, 9.0 Advisory at http://us2.samba.org/samba/ftp/pamsmb/ code based on : UClogin.c SunOS 5.6,5.7,5.8 remote /bin/login root exploit mikecc/unixclan...
slocate 2.5/2.6 - Local Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6676/info A vulnerability has been discovered in slocate. It has been reported that a buffer overrun occurs when running the slocate program with command line arguments of excessive length. Specifically, it is possible to...
Joomla Component wmi (com_wmi) LFI Vulnerability
No description provided by source. ================================================================================================ Title : Joomla Component wmi comwmi LFI Vulnerability Vendor : http://www.paysyspro.com/ Download : http://www.paysyspro.com/jotloader/files.download/3 Date : Sunday...