iShopCart - 'vGetPost()' Remote Buffer Overflow (CGI)

/ Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: ishopcart-cgi-bof.c include include include include include include include include define PORT 80 define CBPORT 31337 define IPOFFSET 33 + 13 define PORTOFFSET 39 + 13 // + 13 to these for the new forking mod added to cb define...

iShopCart - vGetPost() Remote Buffer Overflow (CGI)

iShopCart - vGetPost Remote Buffer Overflow CGI / Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: ishopcart-cgi-bof.c include include include include include include include include define PORT 80 define CBPORT 31337 define IPOFFSET 33 + 13 define PORTOFFSET 39 + 13 // + 13 to the...

netbsd/x86 callback shellcode (port 6666) 83 bytes

Exploit for netbsd/x86 platform in category shellcode ================================================== netbsd/x86 callback shellcode port 6666 83 bytes ================================================== / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, callback shellcode port 6666; /...

netbsd/x86 callback shellcode (port 6666) 83 bytes

No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, callback shellcode port 6666; / include sys/types.h include stdio.h include string.h char scode = "\x31\xc0" // xor %eax,%eax "\x31\xc9" // xor %ecx,%ecx "\x50" // push %eax "\x40" // inc %eax "\x50" //...

netbsd/x86 callback shellcode port 6666 83 bytes

netbsd/x86 callback shellcode port 6666 83 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, callback shellcode port 6666; / include include include char scode = "\x31\xc0" // xor %eax,%eax "\x31\xc9" // xor %ecx,%ecx "\x50" // push %eax...

AFS client version

This detects the AFS client version by connecting to the AFS callback port and processing the buffer received. SPDX-FileCopyrightText: 2005 CERN Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mandrake Linux Security Advisory : apache2 (MDKSA-2005:129)

Marc Stern reported an off-by-one overflow in the modssl CRL verification callback which can only be exploited if the Apache server is configured to use a malicious certificate revocation list CVE-2005-1268. Watchfire reported a flaw that occured when using the Apache server as a HTTP proxy. A...

security flaw

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...

CVE-2005-2263

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...

CVE-2005-2263

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...

CVE-2005-2263

The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a callback function in the context of another domain by forcing a page navigation after the install method has been called, which causes the callback to be run in the context of t...

CVE-2005-2263

CVE-2005-2263 affects Firefox (before 1.0.5) and Mozilla (before 1.7.9). The issue arises in InstallTrigger.install: forcing a page navigation after the install method is called causes a callback to be executed in the context of the new page, resulting in a same-origin violation. This means a rem...

firefox & mozilla -- multiple vulnerabilities

The Mozilla Foundation reports of multiple security vulnerabilities in Firefox and Mozilla: MFSA 2005-56 Code execution through shared function objects MFSA 2005-55 XHTML node spoofing MFSA 2005-54 Javascript prompt origin spoofing MFSA 2005-53 Standalone applications can run arbitrary code throu...

Same-origin violation with InstallTrigger callback — Mozilla

The InstallTrigger.install method for launching an install accepts a callback function that will be called with the final success or error status. By forcing a page navigation immediately after calling the install method this callback function can end up running in the context of the new page...

Immunity Canvas: MS05_021

Name| ms05021 ---|--- CVE| CVE-2005-0560 Exploit Pack| CANVAS Description| MS Exchange 2000 MS05-021 X-LINK2STATE heap overflow Notes| CVE Name: CVE-2005-0560 VENDOR: Microsoft MSADV: MS05-021 CVSS: 7.5 CVE Url: https://vulners.com/cve/CVE-2005-0560 Notes: This exploit is reliable over and over...

CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

CVE-2004-1389

Summary: CVE-2004-1389 describes an unknown vulnerability in the Veritas NetBackup Administrative Assistant interfaces across multiple NetBackup products (BusinesServer 3.4/3.4.1/4.5, DataCenter 3.4/3.4.1/4.5, Enterprise Server 5.1, NetBackup Server 5.0/5.1) that allows arbitrary command executio...

CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

Windows 2000 Network Connection Manager privelege escalation

Callback function is called with system priveleges...

Formatting string bug on cyrus-sasl library

This issue may be already have been on list. I assume that the moderator this case rejects this mail. On last non-beta version of cyrus-sasl library have formatting string bug on default logging callback. Default cyrys sasl logging callback is static int saslsyslogvoid context attributeunused, in...