Privilege escalation via XBL.method.eval — Mozilla

Using the eval associated with methods of an XBL binding it was possible to create JavaScript functions that would get compiled with the wrong privileges, allowing the attacker to run code of their choice with the full permission of the user running the browser. This could be used to install...

linux/x86 - portbind port 64713 86 bytes

linux/x86 portbind port 64713 86 bytes. Shellcode exploit for linx86 platform / linux-x86-portbind.c - portbind shellcode 86 bytes for Linux/x86 Copyright c 2006 Gotfault Security portbind shellcode that bind's a shell on port 64713/tcp / char shellcode = / socketAFINET, SOCKSTREAM, 0 / "\x6a\x66...

linux/x86 portbind (port 64713) 86 bytes

Exploit for linux/x86 platform in category shellcode ======================================== linux/x86 portbind port 64713 86 bytes ======================================== / linux-x86-portbind.c - portbind shellcode 86 bytes for Linux/x86 Copyright c 2006 Gotfault Security portbind shellcode th...

linux/x86 portbind (port 64713) 86 bytes

No description provided by source. / linux-x86-portbind.c - portbind shellcode 86 bytes for Linux/x86 Copyright c 2006 Gotfault Security [email protected] portbind shellcode that bind's a shell on port 64713/tcp / char shellcode = / socketAFINET, SOCKSTREAM, 0 / "\x6a\x66" // push $0x66 "\x58" //...

crossfire-server <= 1.9.0 SetUp() Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================ crossfire-server include include include include include include include include define PORT 13327 // default port define SCPORT 33333 // default shellcode port define SCHOST...

Safari archive metadata command execution

Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...

Safari archive metadata command execution

Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...

Safari archive metadata command execution

Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...

Safari archive metadata command execution

Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...

OpenVMPSd 1.3 - Remote Format String

/ gexp-openvmpsd.c OpenVMPSd v1.3 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-openvmpsd.c / include include include include include include include include include include...

CVE-2006-0496

CVE-2006-0496 is an XSS in Mozilla-based browsers (Mozilla 1.7.12+, Firefox 1.0.7+, Netscape 8.x) due to a flaw in the -moz-binding CSS property that can bypass origin checks. Exploitation could allow execution of arbitrary script in a user’s browser, evidenced by the LiveJournal account compromi...

[Full-disclosure] -moz-binding CSS property: more XSS fun

Hm, I haven't seen this posted here ... Firefox now supports the -moz-binding CSS property, which associate XBL1 with an element. The same origin policy is not applied. This is a problem because XBL may contain JavaScript and it runs with full access to content. There is a bug report2 filed, but ...

Use Radmin and comay within the network of the secondary trial the domain of remote control LAN computer-vulnerability warning-the black bar safety net

Before then Always wanted to use a software to remote access internal LAN computers, but some of the reverse connection remote control software not not very good, is not powerful enough to. Radmin in the remote control software inside can be said that various aspects are relatively good, but he h...

security flaw

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to spoof DOM objects via an XBL control that implements an internal XPCOM interface...

Solaris SPARC / x86 Local Socket Hijack Exploit

Exploit for solaris platform in category local exploits =============================================== Solaris SPARC / x86 Local Socket Hijack Exploit =============================================== / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug...

Golden FTP Server Pro 2.52 - Remote Buffer Overflow (3)

/ \ golden ftp 2.52.0.0 remote r00t exploit / \ remote r00t exploit binds 4444 port on remote machine. / tested on: winxp sp0 rus \ / simple stack overflow in golden ftpd. \ if retaddr isn't right, ftpd will crash, and admin will be in big shit / 'coz ftpd won't start later ; \ / code to be...

[SA14428] Symantec Firewall Devices SMTP Binding Configuration Bypass

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

SMTP Binding Configuration Settings Bypassed

SUMMARY Symantec responded to a potential vulnerability identified in the SMTP binding function of the entry-level Symantec Gateway Security appliances with the ISP load-balancing capabilities. In certain firmware versions, the SMTP outbound email traffic would be load-balanced regardless of the...

DEBIAN-CVE-2004-1224

Off-by-one error in the mtrcurseskeyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator...

IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow

!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...