73 matches found
Code injection
A lack of target address verification in the selfdestructs function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script...
CVE-2020-19767
CVE-2020-19767 affects 0xRACER v1.0: a lack of target address verification in the destroycontract() function enables an attacker to steal tokens from victim users via a crafted script. Root cause: input/target address validation gap in destroycontract(). Documents do not provide a confirmed fix o...
CVE-2020-19769
CVE-2020-19769 : A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script. Affected software: Rob The Bank 1.0 (BurnMe() function). Root cause: missing target address verification. Impact: token thef...
CVE-2017-17860
In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...
unsorted bin attack analysis-vulnerability warning-the black bar safety net
One, Foreword This is before that article overflow using the FILE structure of the follow-up article, mentioned earlier is for the Shanghai network security contest pwn450 of technology to write articles, a total of two techniques, one is the overflow using the FILE structure of the body, one is...
ezDatabase <= 2.0 (db_id) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ezDatabase Remote Command Execution Exploit based on advisory by Pridels Team Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id:...
Savant Web Server 3.1 - Buffer Overflow Exploit (Egghunter)
No description provided by source. !/usr/bin/python import socket targetaddress=10.10.10.129 targetport=80 buffer2 = R0cX + R0cX msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e x86/shikataganai -c 4 -t c buffer2 += \xbd\xec\x37\x93\x4b\xdb\xcf\xd9\x74\x24\xf4\x58\x31\xc9\xb1...
Repeated attempts to access a target site can trigger address field spoofing – Opera Security Advisories
The browser address field should always show the correct address for the page that is currently being displayed. By making repeated requests to load a target site in rapid succession, an attacking web site can cause Opera to display the target sites address while the attacking page is still being...
Web page dialogs can be used to to display the wrong address in the address field – Opera Security Advisories
The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site’s address instead of the correct address. This can allow an...
Imail 8.10-8.12 (RCPT TO) Remote Buffer Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same...
zenworks_desktop_agent.pm.txt
package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...
arkeia_type77_macos.pm
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
TinyWeb 1.9 Denial of Service Exploit
No description provided by source. TinyWeb version 1.9 DoS Exploit Coded bY ++Karak0rsan++ Usage:perl tiny.pl target Greetz:Phalaposher,r3db4r0n,Hurby,ZzagorR,L4M3R,zeronc,Atak,sloan,fox and all my friends w0rdz: cengiz g t ne sokam senin ehehheh bak exploit yay nlan rsa reziL olacan :D ama yay...