3286 matches found
crossfire-server <= 1.9.0 SetUp() Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ================================================================ crossfire-server include include include include include include include include define PORT 13327 // default port define SCPORT 33333 // default shellcode port define SCHOST...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
OpenVMPSd 1.3 - Remote Format String
/ gexp-openvmpsd.c OpenVMPSd v1.3 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-openvmpsd.c / include include include include include include include include include include...
CVE-2006-0496
CVE-2006-0496 is an XSS in Mozilla-based browsers (Mozilla 1.7.12+, Firefox 1.0.7+, Netscape 8.x) due to a flaw in the -moz-binding CSS property that can bypass origin checks. Exploitation could allow execution of arbitrary script in a user’s browser, evidenced by the LiveJournal account compromi...
[Full-disclosure] -moz-binding CSS property: more XSS fun
Hm, I haven't seen this posted here ... Firefox now supports the -moz-binding CSS property, which associate XBL1 with an element. The same origin policy is not applied. This is a problem because XBL may contain JavaScript and it runs with full access to content. There is a bug report2 filed, but ...
Use Radmin and comay within the network of the secondary trial the domain of remote control LAN computer-vulnerability warning-the black bar safety net
Before then Always wanted to use a software to remote access internal LAN computers, but some of the reverse connection remote control software not not very good, is not powerful enough to. Radmin in the remote control software inside can be said that various aspects are relatively good, but he h...
security flaw
Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface...
Solaris SPARC / x86 Local Socket Hijack Exploit
Exploit for solaris platform in category local exploits =============================================== Solaris SPARC / x86 Local Socket Hijack Exploit =============================================== / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug...
Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)
/ \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't start later ; \ / code to be...
[SA14428] Symantec Firewall Devices SMTP Binding Configuration Bypass
---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...
SMTP Binding Configuration Settings Bypassed
SUMMARY Symantec responded to a potential vulnerability identified in the SMTP binding function of the entry-level Symantec Gateway Security appliances with the ISP load-balancing capabilities. In certain firmware versions, the SMTP outbound email traffic would be load-balanced regardless of the...
DEBIAN-CVE-2004-1224
Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...
IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow
!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...
[Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
Since nobody else posted an exploit I figured I might aswell slap the BoF together with my default exploit JavaScript for the scriptkiddies to rejoice and the sysadmins to worry about. TECHNICAL The JavaScript creates a large amount of heap-blocks filled with 0x0D byte nopslides followed by the...
ShixxNOTE 6.net - Remote Buffer Overflow
ShixxNOTE 6.net - Remote Buffer Overflow / ShixxNote 6.net buffer overflow exploit v0.1 Public exploit overflows only Win2K systems, else crashs. Exploit code by class101 at DFind.kd-team.com Bind a shellcode to the port 101. Thanx to Luigi Auriemmaaluigi at altervista org for the bug discovery...
Microsoft Windows - JPEG GDI+ BindReverseAdminFile Download
Microsoft Windows - JPEG GDI+ BindReverseAdminFile Download / Exploit Name: ============= JpegOfDeath.M.c v0.6.a All in one Bind/Reverse/Admin/FileDownload ============= Tweaked Exploit By M4Z3R For GSO All Credits & Greetings Go To: ========== FoToZ, Nick DeBaggis, MicroSoft, Anthony Rocha,...
bsd/x86 portbind port random 143 bytes
Exploit for bsd/x86 platform in category shellcode ====================================== bsd/x86 portbind port random 143 bytes ====================================== Here is a BSD remote shellcode. Tested on NetBSD . SHould work on FreeBSD and OpenBSD . by MayheM ExileCrew www.exile2k.org / 143...