os-x/PPC execve /usr/X11R6/bin/xterm 141 bytes

Exploit for os-x/ppc platform in category shellcode ============================================== os-x/PPC execve /usr/X11R6/bin/xterm 141 bytes ============================================== / PPC OSX/Darwin Shellcode by B-r00t. 2003. Does execve/usr/X11R6/bin/xterm -display 192.168.0.10:0 exit...

Cross Site Scripting in XOOPS Version 2.x Dictionary module

-------------------------------------------------------------------------- Cross Site Scripting in XOOPS Version 2.x Dictionary module -------------------------------------------------------------------------- Type: Cross Site Scripting XSS Titule: Xoops Dictionary module by nagl Date: August 28,...

PHPX < 3.26 - Multiple Vulnerabilities

PHPX Multiple Vulnerabilities Vendor: PHPX Product: PHPX Version: ","","",""; foreach$checkArray as $c if substrcount$SERVER"REQUESTURI", $c...

CGI bugs

No description provided...

PLD Software Ebola 0.1.4 - Remote Buffer Overflow

PLD Software Ebola 0.1.4 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/9156/info It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf to...

XSS in Tek-Tips Forum

hello 3APA3A ZUD SECURITY TEAM PRESENT bug found by nimber Email : [email protected] Site: www.zudteam.org HomePage: www.nimber.plux.ru 11.08.2003 Name: Tek-Tips Forum Web Site: www.tek-tips.com Bug: XSS Vulnerability. Exploitexaple:...

CVE-2002-1155: Undefined Security Weakness

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument...

kon2 buffer overflow

Buffer overflow in /usr/bin/kon on oversized -Coding parameter...

Microsoft IIS 5.0 5.1 - Remote Denial of Service

Microsoft IIS 5.0 5.1 - Remote Denial of Service / Microsoft IIS versions 5.0 and 5.1 remote denial of service exploit that makes use of the vulnerability recently published by SPI dynamics Published on 31.05.2003 / include include include pragma comment lib,"ws232" void graphitte printf"\n ";...

IkonBoard v3.1.1: arbitrary command execution

============================================================================ Vulnerable: IkonBoard 3.1.1 and probably earlier Category: Perl/CGI coding errors Impact: Arbitrary command execution Date: 1st April 2003 Vendor: The Jarvis Group Homepage: http://www.ikonboard.com/ Vendor Status: First...

Privilege Escalation Vulnerability In phpBB 2.0.0

Privilege Escalation Vulnerability In phpBB 2.0.0 ------------------------------------------------- Rootsecure.net recently found a privilege escalation vulnerability in "phpBB 2.0.0" which allows any person with a "user" level account to escalate their privileges to that of "administrator" level...

@&#40;#&#41;Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL.

//@ Mordred Labs advisory 0x0004 Release data: 20/08/02 Name: Two buffer overflows in PostgreSQL Versions affected: all versions Conditions: multibyte support Risk: average -- Description: I guess all of you already hear about the PostgreSQL. If not, try to visit...

mantisbt security flaw

Hi, Mantis is php/MySQL/web based bug tracking system, available at http://mantisbt.sourceforge.net/. It currently suffers from a classical PHP bad coding practice altough i would bet on distraction for this particular situation , that may result on remote command execution via a include file...

Advisory: ArGoSoft Mail Server Pro 1.8.1.7 DoS

Author: Stan Bubrouski Date: August 4, 2002 Product: ArGoSoft Mail Server Pro Versions affected: 1.8.17 current and previous Severity: A malicious user or users could mount a DoS using mail forwarding and automatic responses to render the adminstrative console unresponsive and raise CPU usage to...

solaris lpd thing

I'm going through a rough period in my life -- I don't know what to do. Attached below is a shitty remote that I leaked to the kids last year. Now is a good time to submit it to Bugtraq. It's incredibly lame code, but why not get it working, and then go hack some stuff... Originally it was writte...

PostNuke Bugged

Hi everyone, this post is 4 weeks after the original information was made available to the developers, allowing time for many effected users to patch and also the developers to fix / check newer versions. --------- rookidd found another set of vulnerabilities in postnuke, this time in version 7.0...

Four More ScriptEase MiniWeb Server v0.95 DoS Attacks

The following are four more Server Denial of Service Attacks against ScriptEase MiniWeb Server 0.95. These attacks do not make the server point to an invalid memory address like the previous post. I believe the first two attacks I describe are internal server problems due to either coding errors ...

rsync <= 2.5.1 Remote Exploit (2)

No description provided by source. / 7350rsync - rsync include include include include include include include include include include define MAXPATHLEN 4096 define VERSION "@RSYNCD: 26\n" define PORT 873 define NULLOFFSET -48 define STARTNULLBRUTE -44 define ENDNULLBRUTE -56 define BRUTEBASE...

Cisco IOS and CatOS fail to properly validate ARP packets thereby overwriting device's MAC address in ARP table

Overview There is a denial-of-service vulnerability in specific versions of Cisco IOS or CatOS. Description A denial-of-service vulnerability exists in specific versions of Cisco IOS or CatOS. This vulnerability can cause the device to crash or become unavailable if specially crafted arp packets...

phpBB 1.4.2, Remote user is able to modify SQL query.

Hi, there is a a potential security problem in the current version 1.4.2 and previous versions of phpBB http://www.phpbb.com. A remote user is able to modify a string passed as a SQL query to the MySQL database. The problem exists in the file bbmemberlist.php. A string called $sortby is supplied...