linux/x86 unlink/etc/passwd & exit 35 bytes

linux/x86 unlink/etc/passwd & exit 35 bytes. Shellcode exploit for linux platform Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman /...

Mozilla Firefox临时文件下载可预测路径名漏洞

CVE ID: CVE-2009-3274 Firefox是一款流行的开源WEB浏览器。 运行在Linux平台上的Firefox对从“下载”窗口所选择的文件使用了可预测的/tmp路径名，本地用户可以在下载之前在/tmp位置放置文件来替换下载文件，之后用户可能受骗打开已被替换了的文件。 Mozilla Firefox 3.6 a1 Mozilla Firefox 3.5.2 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...

linux/x86 setreuid(geteuid(),geteuid()),execve("/bin/sh",0,0) 34 bytes

Exploit for linux/x86 platform in category shellcode ====================================================================== linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes ====================================================================== / linux/x86...

Core Security Technologies Advisory 2009.0114

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HTTP Response Splitting vulnerability in Sun Delegated Administrator 1. Advisory Information Title: HTTP Response Splitting vulnerability in Sun Delegated Administrat...

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions...

Sun xVM VirtualBox 2.0/2.1 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions for the Linux platform are vulnerable: Sun xVM...

Race condition

Niels Provos Systrace 1.6f and earlier on the x8664 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes...

CVE-2009-0343

Niels Provos Systrace 1.6f and earlier on the x8664 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes...

Linux/x86-64 - Bind TCP (Random TCP Port) Shell + Null-Free Shellcode (57 bytes)

Linux/x86-64 - Bind TCP Random TCP Port Shell + Null-Free Shellcode 57 bytes. Shellcode exploit for Linuxx86-64 platform / Shell Bind TCP Random Port Shellcode - C Language - Linux/x8664 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free...

CVE-2008-5177

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Stack overflow

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Linux Command Shell, Find Port Inline

Spawn a shell on an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 171 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends include...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...

eCryptfs工具ecryptfs-setup-private口令泄露漏洞

BUGTRAQ ID: 31906 eCryptfs是Linux平台下的企业级加密文件系统。 eCryptfs工具的ecryptfs-setup-private程序在通过命令行调用ecryptfs-wrap-passphrase和ecryptfs-add-passphrase程序时，命令行参数包含有用户的已有登录口令和新创建的口令。本地攻击者可以在进程表中查看到这些口令。 eCryptfs eCryptfs -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ecryptfs.sourceforge.net/...

Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================== Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit meta ================================================================== This file is part of the Metasploit...

lrcf-inject.txt

-=--------------------ADVISORY-------------------=- Link Request Contact Form v3.4 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Link Request Contact Form -=+ Version: 3.4 -=+ Vendor's URL:...

smefilemailer-sql.txt

-=--------------------ADVISORY-------------------=- SmE FileMailer 1.21 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: SmE FileMailer -=+ Version: 1.21 -=+ Vendor's URL: http://www.scriptme.com/down/13 -=+ Platform: Windows\Linux\Unix -=+ Bu...

flog112-disclose.txt

-=--------------------ADVISORY-------------------=- FLog 1.1.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: FLog -=+ Version: 1.1.2 -=+ Vendor's URL: http://www.fluffington.com/index.php?page=flog -=+ Platform: Windows\Linux\Unix -=+ Bug...

logahead UNU edition 1.0 - Arbitrary File Upload Code Execution

logahead UNU edition 1.0 - Arbitrary File Upload Code Execution -=--------------------ADVISORY-------------------=- logahead UNU edition 1.0 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: logahead UNU edition -=+ Version: 1.0 -=+ Vendor's UR...

Broadcom Wireless Driver Probe Response SSID Overflow Exploit (meta)

No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::BroadcomWiFiSSID Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'Broadcom Wireless Driver Probe Response SSID Overflow',...