381 matches found
Green open terminal simple method-vulnerability warning-the black bar safety net
The presentation today of this open terminal, green, environmental protection, no pollution Not required to upload any files on the terminal the method is suitable for win2k,xp,2 0 0 3. This article premise is already through some method to get to the other side of a SYSTEM the permissions of the...
cmd to view the current logged in user-bug warning-the black bar safety net
cmd to view the current login user The terminal,naturally you can use quser this command. But in others, such as Professional Edition 2k under how to view the online user? C:\Documents and Settings\Administratornet config workstation Computer name \\RICH The full computer name rich User name...
asp. the dll is parsed into a system elevation of privilege-vulnerability warning-the black bar safety net
Network uploaded system to enhance the asp permissions for the system in two ways: 1. Graphical under the default site----home directory---application protection set to low,so you can put the asp permissions set for the system. But this upgrade method is very easy to be found,so the network there...
How much more simple to stay your webshell Backdoor-vulnerability warning-the black bar safety net
Get website the webshell, if the administrator found, then your horse is useless, deleted! So we have to hide our SHELL,administrators are also not exists eat! 1. Here's a dish method, the ASP insertion method, not easy to be found In our to tricks of the ASP file added the following contents % ...
Invincible hidden MDB back-door techniques-vulnerability warning-the black bar safety net
Scored system permissions later Editing the registry HKEYLOCALMACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines "SandBoxMode"=dword:0 0 0 0 0 0 0 0 Without This item, add it yourself Then in the asp webshell, even his MDB data to any virtual host of the database to perform select shell"net user" Limit...
Five ways to evade firewall control system-vulnerability warning-the black bar safety net
As Trojan, Backdoor non-stop development, the firewall itself is also in constant development, which is a spear and shield and relationships, know how to escape through the firewall for the control of a system is very important. Due to the firewall of development, today, many firewalls are based ...
Apple Mac OS X多个安全漏洞
Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...
Apple Mac OS X AFP server stores reconnect keys in a world-readable file
Overview A vulnerability in Apple Mac OS X AFP server may allow an authenticated local user to access files or folders with the credentials of another user. Description The AFP Apple Filing Protocol service allows Apple Mac OS clients to remotely access files from a server. In Apple's Mac OS X...
CVE-2006-3209
The Task scheduler at.exe on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon...
CVE-2006-3209
The Task scheduler at.exe on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. NOTE: this issue has been disputed by third parties, who state that the Task scheduler is limited to the Administrators group by default upon...
PT-2006-4104 · Microsoft · Windows Xp
Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP Description: The Task scheduler at.exe on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain privileges. Note that this issue has been disputed by third parties, w...
5 ways to escape a firewall control system of research-vulnerability warning-the black bar safety net
As Trojan, Backdoor non-stop development, the firewall itself is also in constant development, which is a spear and shield and relationships, know how to escape through the firewall for the control of a system is very important. Due to the firewall of development, today, many firewalls are based ...
ARPSniffer get the highest permissions-bug warning-the black bar safety net
Suppose you want to attack the host IP is:61.139.1.79 The same subnet the next, we have the right to limit the host IP is:61.139.1. 8 8 and 3 3 8 9 landing The first step: tracert 61.139.1.1 C:\WIN2000\system32tracert 61.139.1.1 Tracing route to HACK-4FJ7EARC 61.139.1.1 over a maximum of 3 0 hops...
WEBSHELL hidden-vulnerability warning-the black bar safety net
1 % if request"shell"="dongxie" then % % end if % Inadded at your shell code Access when you do the hands and feet of the ASP files back plus? shell=dongxie For example:www. dongxie. cn/index. asp? action=dongxie You can tune out the webshell, does not affect the normal browsing. 2 The script is...
Low: Red Hat Security Advisory: cvs security update
Updated cvs packages closing a vulnerability that could allow cvs to attempt to create files and directories in the root file system are now available. CVS is a version control system frequently used to manage source code repositories. A flaw was found in versions of CVS prior to 1.11.10 where a...
MS Windows XP Workstation Service Remote Exploit (MS03-049)
漏洞描述：Microsoft DCE/RPC服务可以提供网络管理功能，这些功能提供管理用户帐户和网络资源管理的功能。部分网络管理功能在Windows目录下的"debug"子目录会生成调试日志文件。Microsoft Workstation服务在处理日志记录时缺少充分的边界缓冲区检查，远程攻击者可以利用这个漏洞提供超长参数触发缓冲区溢出，以SYSTEM权限在系统上执行任意指令。 日志功能中使用vsprintf在日志文件中生成字符串，日志文件名为"NetSetup.LOG"，其保存在Windows "debug"目录中。...
OpenVMS POP server local vulnerability
Akita Security Advisory 27/09/2002 OpenVMS UCX$POPSERVER.EXE vulnerability Advisory: http://www.akita-security.co.uk/VMS/ucxpopserver.txt VMS security tool http://www.akita-security.co.uk/stoat Overview ======== UCX is the main TCP/IP stack for OpenVMS. Akita Security have discovered a...
QNX RTOS 2.4 - File Disclosure
source: https://www.securityfocus.com/bid/6751/info A vulnerability has been discovered in QNX Real-Time Operating System. It has been reported that an unauthorized user may access arbitrary files. This is possible by requesting the file through the location that the FAT partition is mounted to...
CVE-1999-0581
CVE-1999-0581 concerns improper permissions on the HKEY_CLASSES_ROOT key in Windows NT. The connected documents consistently describe the root cause as inappropriate, system‑critical permissions on this registry hive, affecting Windows NT systems. The materials do not specify exact vulnerable pro...