MS Windows 2003 Token Kidnapping Local Exploit PoC

No description provided by source. From http://nomoreroot.blogspot.com/2008/10/windows-2003-poc-exploit-for-token.html It has been a long time since Token Kidnapping presentation http://www.argeniss.com/research/TokenKidnapping.pdf was published so I decided to release a PoC exploit for Win2k3 th...

Oracle 11g/10g Installation Vulnerability

Oracle Database Server是一款商业性质的数据库服务程序。 Oracle Database Server安装过程存在设计问题，远程攻击者可以利用漏洞绕过安全在一定过程中访问数据库。 Oracle 11g和10g在安装过程中包含了SYS和SYSTEM帐户，其包含默认密码并最安装最后密码才更改，这就提供了攻击者在安装过程中登录数据库服务器的机会。导致未授权访问系统。 Oracle Oracle11g Standard Edition One 11.1 6 Oracle Oracle11g Standard Edition 11.1 6 Oracle Oracle11g...

[Full-disclosure] OpenSSH - System Account Enumeration if S/Key is used

Note to the Moderator: Sorry I send ya a Beta in the first mail : / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author: Rembrandt Date: Known since somewhere ...

Oracle for Windows privilege escalation

Weak permissions for memories sections and named pipes inside oracle process allow code execution with local system account...

DSA-1203-1 libpam-ldap

Bulletin has no description...

Hidden system accounts Madona-vulnerability warning-the black bar safety net

When hacking a host, will find ways to protect their“fruits of Labor”, and therefore in the broiler on the left all sorts of backdoors for a long time was the control broiler,of which the most used is the account hidden technique. In broilers on the establishment of a hidden account, to prepare f...

ISS BlackICE / ISS RealSecure intrusion prevention systems privilege escalation

Help subsystem is launched under Local System account...

M4 Project enigma-suite unauthorized access

"enigma-client" / "nominal" system account is created dusring installation...

On WEBSHELL to elevate privileges to the point of experience-vulnerability warning-the black bar safety net

| --- | Many newcomers in the use of servu elevation of Privilege will encounter many problems, such as the default local administrator Password changed, ws, etc. the cmd is disabled, or the site root directory there is no permission to run! Many Novices will be sent to the discard, Oh, actually...

CVE-2001-1514

ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to 1 child processes created with and 2 child processes that call the CreateProcess function and are executed with or end with the CFX extension...

CVE-2001-1514

CVE-2001-1514 affects ColdFusion 4.5 and 5 on Windows when the advanced security sandbox type is set to operating system. The issue is that security context is not properly passed to child processes created with or to those that call CreateProcess and are run via or end with the CFX extension, ...

Microsoft Windows - Improper Token Validation Privilege Escalation

Microsoft Windows - Improper Token Validation Privilege Escalation / Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLin...

MS Windows Improper Token Validation Local Exploit (working)

Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...

Microsoft Windows - Improper Token Validation Privilege Escalation

/ Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint argc, char argv HANDLE hToken,hThread; HMODULE hMsi ...

Protector System 1.15 - blocker_query.php Multiple Cross-Site Scripting Vulnerabilities

Protector System 1.15 - blockerquery.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10206/info Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection...

ISS multiple products SMB parsing buffer overflow

Remote buffer overflow during SMB parsing leads to system account compromise...

CVE-2003-0998

Unknown "potential system security vulnerability" in Computer Associates CA Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account...

Symantec pcAnywhere privelege escalation

It's possible to obtains system account privileges via help...

Buffer overflow in MySQL

Product : MySQL Date : 10/09/2003 Author : Frank Denis [email protected] ------------------------ Product description ------------------------ From the web site : MySQL is the world's most popular open source database, recognized for its speed and reliability. Today MySQL is the most popular open...

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation (1)

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation 1 // source: https://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain...