3949 matches found
Unfixed XSS vulnerability at notjustfood.com
Security researcher Uber0n, has submitted on 25/01/2009 a cross-site-scripting XSS vulnerability affecting notjustfood.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is currently...
Unfixed XSS vulnerability at www.avocat-stefanescu.ro
Security researcher Kestor, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting www.avocat-stefanescu.ro, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/10/2010. It is...
Unfixed XSS vulnerability at www.ourdream.com
Security researcher Mystick, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting www.ourdream.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/01/2009. It is currently...
DNS Server Dynamic Update Record Injection
It was possible to add a record into a zone using the DNS dynamic update protocol, as described by RFC 2136. This protocol can be used by DHCP clients to enter their host names into the DNS maps, but it could be subverted by malicious users to redirect network traffic. C Tenable Network Security,...
CVE-2008-5869: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID...
Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ======================================================= Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit ======================================================= Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day...
Rosoft Media Player 4.2.1 - Local Buffer Overflow
Rosoft Media Player 4.2.1 - Local Buffer Overflow Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the...
Rosoft Media Player 4.2.1 - Local Buffer Overflow
Rosoft Media Player 4.2.1 Local Buffer Overflow Exploit0-day By:Encrypt3d.M!nd Well,There is a buffer overflow in the program were all the supported types are Affectedm3u,rml,txt,Also Rosoft Media Player treat all the other types as txt so all the types are affected :,and also all the versions ar...
Unfixed XSS vulnerability at www.blumerio.ch
Security researcher Ehl-i Beyt, has submitted on 01/05/2009 a cross-site-scripting XSS vulnerability affecting www.blumerio.ch, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currently...
webSPELL 4.01.02 - 'id' Remote Edit Topics
+=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos - stakerathotmaildotit | magic quotes 0 | |...
Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)
Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...
Linux/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (67 bytes)
Linux/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 67 bytes. Shellcode exploit for Linuxx86 platform / The shellcode sets uid == 0 and loads the kernel module from /tmp/o.o size = 67 bytes OS = Linux i386 written by /rootteam/dev0id rootteam.void.ru [email protected] BITS 32 jmp shor...
OpenBSD/x86 - setuid(0) + Load Kernel Module (/tmp/o.o) Shellcode (74 bytes)
OpenBSD/x86 - setuid0 + Load Kernel Module /tmp/o.o Shellcode 74 bytes. Shellcode exploit for OpenBSDx86 platform / The modload shellcode setuid0 loads /tmp/o.o module very usefull if you have rootkit as kernel module in the /tmp dir Size 74 bytes OS OpenBSD /rootteam/dev0id rootteam.void.ru...
Linux/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)
Linux/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / This shellcode writes to /etc/passwd the string for the user with uid&gid == 0; written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: nerf w00w00 BITS 32 jmp shor...
Linux/x86 - setreuid() + /sbin/iptables -F + exit(0) Shellcode (76 bytes)
Linux/x86 - setreuid + /sbin/iptables -F + exit0 Shellcode 76 bytes. Shellcode exploit for Linuxx86 platform / Author: Sh3llc0d3 Environment: Linux/x86 Developed from: GNU ASM AT&T Syntax Purpose: setreuid - /sbin/iptables -F - exit0 Size: 76 bytes Website: root-exploit.com / char code =...
FreeBSD 6x/7 protosw kernel Local Privledge Escalation Exploit
No description provided by source. / This is a quick and very dirty exploit for the FreeBSD protosw vulnerability defined here: http://security.freebsd.org/advisories/FreeBSD-SA-08:13.protosw.asc This will overwrite your credential structure in the kernel. This will affect more than just the...
IntelliTamper 2.072.08 - .map Local Overwrite (SEH)
IntelliTamper 2.072.08 - .map Local Overwrite SEH !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc Here's the debugger output like what u see, the...
IntelliTamper 2.07/2.08 (MAP File) 0-day Local SEH Overwrite Exploit
Hi webmaster, A nice Bug . . !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux [email protected] Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc metasploit.com Here's the debugger output like wha...
Unfixed XSS vulnerability at www.ckyfca.org
Security researcher Mystick, has submitted on 24/12/2008 a cross-site-scripting XSS vulnerability affecting www.ckyfca.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2008. It is currently...