Oracle Database Vault - ptrace(2) Local Privilege Escalation

Oracle Database Vault - ptrace2 Local Privilege Escalation / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested ...

No-IP DUC <= 2.1.7 Remote Code Execution Exploit-vulnerability warning-the black bar safety net

/ | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c noIPwn3r Exploit 0-day para el cliente...

No-IP DUC 2.1.7 - Remote Code Execution

No-IP DUC 2.1.7 - Remote Code Execution / | |/ / / |/ / / / | / / / / /|/ / / / / / / / / / / / / // / / / / // / // // / //|// //// //,//,/ xenomuta arroba phreaker punto net http://xenomuta.tuxfamily.org/ - Methylxantina 256mg Permlink: http://xenomuta.tuxfamily.org/exploits/noIPwn3r.c...

Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability

No description provided by source. Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset //...

Joomla! 1.5.x - 'Token' Remote Admin Change Password

Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...

sitexs-upload.txt

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

SiteXS CMS Remote File Upload Vulnerability

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

zkup-upload.txt

!/usr/bin/php Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we can use administration without being admin see ./admin/configuration/modifier.php Then, when we add an admin, it is save...

zkup-admin.txt

!/usr/bin/php Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit-1; $url = $argv1; $log = $argv2; $pas = $argv3; $postit =...

zKup CMS 2.0 2.3 - Arbitrary File Upload

zKup CMS 2.0 2.3 - Arbitrary File Upload !/usr/bin/php Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we can use administration without being admin see ./admin/configuration/modifier.p...

zKup CMS 2.0 2.3 - Remote Add Admin

zKup CMS 2.0 2.3 - Remote Add Admin !/usr/bin/php Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit-1; $url = $argv1; $log = $argv2; $pas = $argv...

zKup CMS 2.0 <= 2.3 Remote Add Admin Exploit

Exploit for unknown platform in category web applications ============================================ zKup CMS 2.0 Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/...

Thunder 5 and explosion vulnerability-vulnerability warning-the black bar safety net

According to a reliable tip-off, the thunder 5 and this time how much a word appears serious 0-Day vulnerability, virus authors can exploit the vulnerability to write malicious web pages, when used to browse these pages, you will be infected with the virus, then the virus can theft of user accoun...

Rosoft Media Player &lt;= 4.1.7 .M3U Stack Overflow Exploit

No description provided by source. / rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player = 4.1.7 .M3U Stack Overflow 0-DAY Description: A stack overflow occurs when parsing an .m3u file...

jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow Exploit

No description provided by source. !/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play...

Rosoft Media Player <= 4.1.7 .M3U Stack Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================== Rosoft Media Player include / Invalid chars: 0x1A 0xA 0xD 0x00 win32bind - EXITFUNC=thread LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char uszShellcode ...

Rosoft Media Player 4.1.7 - '.m3u' Local Stack Overflow

/ rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player include / Invalid chars: 0x1A 0xA 0xD 0x00 win32bind - EXITFUNC=thread LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char uszShellcode =...

Rosoft Media Player 4.1.7 - .m3u Local Stack Overflow

Rosoft Media Player 4.1.7 - .m3u Local Stack Overflow / rosoft-player-expl.c: 2007-12-18: Copyright c 2007 devcode ^^ D E V C O D E ^^ Rosoft Media Player include / Invalid chars: 0x1A 0xA 0xD 0x00 win32bind - EXITFUNC=thread LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com /...

jetAudio 7.0.5 COWON Media Center MP4 - Local Stack Overflow

!/bin/perl jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download the latest 3ivx codec from here: hxxp://www.3ivx.com/codec/3ivxMPEG-4501trialwin.exe - play the AVI file with COWON Media Cent...

Windows Media Player 6.4 MP4 File Stack Overflow PoC

No description provided by source. !/bin/perl Windows media player 6.4 MP4 Stack Overflow 0-day discovered and exploited by SYS 49152 Tested on win XP SP2 ENG Shell on port 49152 usage: - download this codec in order to manage MP4 content: http://www.3ivx.com/coral/3ivxd4451win.exe...