2136 matches found
serendipity SQL Injection vulnerability
ADZ Security Team =================== Info Program: serentdipity web blog system Version: 0.8beta4 Module: exit.php Bug type: SQL Injection Vendor site: http://www.s9y.org/ Vendor Informed: Yes =================== Bug Info // code start //....... $links = serendipitydbquery"SELECT link FROM...
DeluxeFtp 6.x Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits =============================================== DeluxeFtp 6.x Local Password Disclosure Exploit =============================================== / DeluxeFtp 6.x Local Password Disclosure Exploit by Kozan Application: DeluxeFtp 6.x and probabl...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...
BitComet 0.57 Local Proxy Password Disclosure Exploit
No description provided by source. / BitComet 0.57 Local Proxy Password Disclosure Exploit by Kozan Application: BitComet 0.57 and probably prior versions Vendor:www.bitcomet.com Vulnerable Description: BitComet 0.57 discloses proxy passwords to local users. Discovered & Coded by: Kozan Credits t...
Microsoft Internet Explorer DHTML objects contain a race condition
Overview A race condition in the way that Internet Explorer handles DHTML objects may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft:Dynamic HTML DHTML is built on an object model that extends the traditional static HTML document which...
Microsoft Jet Database - 'msjet40.dll' Reverse Shell (1)
See-security Technologies ltd. http://www.see-security.com Microsoft Jet msjet40.dll Reverse Shell Exploit coded by Tal zeltzer Based on the exploit written by S.Pearson import sys import struct Addresses are compatible with Windows XP Service Pack 1 ReturnAddress = 0x77F51B93 Address of "jmp edx...
Microsoft Jet Database - msjet40.dll DB File Buffer Overflow
Microsoft Jet Database - msjet40.dll DB File Buffer Overflow / -------------------------------------- Microsoft Jet msjet40.dll Exploit -------------------------------------- Author: ---------- S.Pearson Computer Terrorism UK www.computerterrorism.com 11/04/2005 Credits: ---------- Hexview origin...
Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index Privilege Escalation (1)
Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index Privilege Escalation 1 / EDB Note: Update can be found here https://www.exploit-db.com/exploits/926/ source: https://www.securityfocus.com/bid/12911/info A local signed-buffer-index vulnerability affects the Linux kernel because it fails to...
sash 3.7 - Local Buffer Overflow
sash 3.7 - Local Buffer Overflow / sash-3.7 buffer overflow in c argyment written by lammat for practice purposes http://grpower.ath.cx [email protected] gdb r -c perl -e 'print "A"x10256' The program being debugged has been started already. Start it from the beginning? y or n y Starting program:...
WebWasher CSM 4.4.1 Build 752 Conf Script - Cross-Site Scripting
source: https://www.securityfocus.com/bid/13037/info It is reported that the WebWasher 'conf' script is prone to a cross-site scripting vulnerability. A remote attacker may exploit this issue to have arbitrary script and HTML code executed in the browser of a target user. Code execution would occ...
Linux Kernel PPC64/IA64 (AIO) Local Denial of Service Exploit
Exploit for linux platform in category dos / poc ============================================================= Linux Kernel PPC64/IA64 AIO Local Denial of Service Exploit ============================================================= // // Proof of Concept by Daniel McNeil // compile using cc -o...
ArGoSoft FTP Server <= 1.4.2.8 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ======================================================== ArGoSoft FTP Server = 1.4.2.8 Denial of Service Exploit ======================================================== / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi"...
ArGoSoft FTP Server <= 1.4.2.8 Denial of Service Exploit
No description provided by source. / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address : argosoft.com the bug...
ArGoSoft FTP Server 1.4.2.8 - Denial of Service
ArGoSoft FTP Server 1.4.2.8 - Denial of Service / ArGoSoft Ftp Server remote overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : ArGoSoft 1.4.2.29 and prior advisory : packetstormsecurity.nl/0503-advisories/argosoftFTP1428.txt company address :...
Linux Kernel <= 2.6.10 Local Denial of Service Exploit
Exploit for linux platform in category dos / poc ====================================================== Linux Kernel include include include include include include include include include include include define SIZE 0x80004242 syscall5int, llseek, uint, fd, ulong, hi, ulong, lo, lofft , res, uin...
SPECTral Personal SMTP Server <= 0.4.2 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ================================================================ SPECTral Personal SMTP Server port \n"; print " Coded by GreenwooD Network Security Team \n\n";...
Apple QuickTime 6.5.1 - PictureViewer Buffer Overflow
Apple QuickTime 6.5.1 - PictureViewer Buffer Overflow source: https://www.securityfocus.com/bid/12905/info Apple QuickTime is reportedly prone to a buffer overflow when viewing malformed image files. This issue was reported to exist in QuickTime 6.5.1 for Windows. Other versions may also be...
phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)
Exploit for unknown platform in category web applications ================================================================= phpBB include include //Taken from VeNoMouS's love cow code char searchandreplace char text, char find, char replace char found,newtext; int...
Linux Kernel 2.4.x2.6.x - uselib() Local Privilege Escalation (3)
Linux Kernel 2.4.x2.6.x - uselib Local Privilege Escalation 3 / pwned.c - linux 2.4 and 2.6 sysuselib local root exploit. PRIVATE. it's not the best one, the ldt approach is definitively better. discovered may 2004. no longer private because lorian/cliph/ihaquer can lick my balls. c 2004 sd...
PlatinumFTP 1.0.18 - Multiple Remote Denial of Service Vulnerabilities
!/usr/bin/perl pftpdos-ai1.pl - Remote DoS against PlatinumFTP 10.1.18 Details:http://seclists.org/lists/bugtraq/2005/Mar/0222.html If you don't get the server down try to change/play a little bit with the Timeout ports at securityforest dot com | greetings to muts, barabas, s|33py, revised and a...