887 matches found
VERITAS NetBackup Agent Detection
The remote host is running the VERITAS NetBackup Java Console service. This service is used by the NetBackup Java Console GUI to manage the backup server. A user, authorized to connect to this service, can use it as a remote shell with system privileges by sending 'commandEXECLIST' messages...
dwhttpd format string
The remote web server is vulnerable to a format string attack. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Helix RealServer Buffer Overrun
RealServer 8.0 and earlier and Helix Server 9.0 is vulnerable to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2003 Montgomery County Maryland Government Security Team Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
snmpXdmid overflow
The remote RPC service 100249 snmpXdmid is vulnerable to a heap overflow which allows any user to obtain a root shell on this host. SPDX-FileCopyrightText: 2001 Intranode Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
NNTP password overflow
The scanner was able to crash the remote NNTP server by sending a too long password. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced source...
Veritas NetBackup 6.0 (OSX) - 'bpjava-msvc' Remote Command Execution
!/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX BINDSHELLCODE PORT=5557 NO-0x0 /...
RealPlayer/Helix Player Remote Format String Exploit (linux)
Exploit for linux platform in category remote exploits ============================================================ RealPlayer/Helix Player Remote Format String Exploit linux ============================================================ / $ An open security advisory 13 - RealPlayer and Helix Playe...
phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit
No description provided by source. ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1 possibly prior versions shell inject by rgod site: http://rgod.altervista.org make these changes in your php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...
phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit
Exploit for unknown platform in category web applications ============================================================= phpMyFAQ = 1.5.1 User-Agent Remote Shell Injection Exploit ============================================================= ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1...
phpMyFAQ 1.5.1 - 'User-Agent' Remote Shell Injection
?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1 possibly prior versions shell inject by rgod site: http://rgod.altervista.org make these changes in your php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on usage: launch this script from...
phpMyFAQ 1.5.1 - User-Agent Remote Shell Injection
phpMyFAQ 1.5.1 - User-Agent Remote Shell Injection ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1 possibly prior versions shell inject by rgod site: http://rgod.altervista.org make these changes in your php.ini if you have troubles to launch this script: allowcalltimepassreference = on...
Cacti 0.8.6d - Remote Command Execution
Note: This exploit contains backdoor shell code that is not located on this server. /str0ke !/usr/bin/perl Remote Command Execution Exploit for Cacti http://www.example.com/cacti/graphimage.php?localgraphid=validvalue&graphstart=%0acommand%0a Patch: download the last version...
[Full-disclosure] Portcullis Security Advisory 05-013 - VoIP - Asterisk Stack Overflow
Portcullis Security Advisory Wade Alcorn [email protected] - www.portcullis-security.com/advisory/advisory-05-013.txt [email protected] - www.bindshell.net/voip/advisory-05-013.txt Vulnerable System: This vulnerability affects Asterisk 1.0.7 and the development Asterisk branch known as...
GNU Mailutils imap4d 0.5 0.6.90 - Remote Format String
GNU Mailutils imap4d 0.5 0.6.90 - Remote Format String / gun-imapd.c """"""""""" gnu mailutils-0.5 - include include include include include include include include include include include // to be modified define GOT 0x080573fc static char bindshell= //by pr1 bind to :4096 "\x31\xc0" // xor...
GNU Mailutils imap4d 0.5 < 0.6.90 - Remote Format String
/ gun-imapd.c """"""""""" gnu mailutils-0.5 - include include include include include include include include include include include // to be modified define GOT 0x080573fc static char bindshell= //by pr1 bind to :4096 "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\x40" // inc %eax "\x89\xc3"...
FlatNuke 2.5.x - referer.php Crafted Referer Arbitrary PHP Code Execution
FlatNuke 2.5.x - referer.php Crafted Referer Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior ...
Zeroboard 4.1 preg_replace Remote nobody Shell Exploit
Exploit for unknown platform in category web applications ====================================================== Zeroboard 4.1 pregreplace Remote nobody Shell Exploit ====================================================== /...
ZeroBoard 4.1 - 'preg_replace' Remote Nobody Shell
/ ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected] date : 2005/5/29 the bug Origina...
ZeroBoard 4.1 - preg_replace Remote Nobody Shell
ZeroBoard 4.1 - pregreplace Remote Nobody Shell / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada...
Zeroboard 4.1 preg_replace Remote nobody Shell Exploit
No description provided by source. / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected]...