bosnews40-direct.txt

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

MiniHTTPServer Web Forum绕过认证添加用户漏洞

Web Forum & File Sharing Server允许用户在Internet上创建自己的论坛。 Web Forum & File Server在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权操作论坛。 Web Forum & File Server的join.asp文件没有正确验证frmMailBox参数数据的输入，允许攻击者未经授权便以PowerUser的权限添加新的论坛用户。 Mini HTTP Server Web Forum & File Sharing Server 4.0...

linux/x86 Adduser without Password to /etc/passwd 59 bytes

Exploit for linux/x86 platform in category shellcode ========================================================== linux/x86 Adduser without Password to /etc/passwd 59 bytes ========================================================== / linux/x86 adds user 'xtz' without password to /etc/passwd - 59...

Ethereal <= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit

Exploit for linux platform in category remote exploits =============================================================== Ethereal include include include include include unsigned char sipheader = "\x4f\x50\x54\x49\x4f\x4e\x53\x20\x73\x69\x70\x3a\x68\x61\x63"...

Ethereal &lt;= 0.10.10 (SIP) Protocol Dissector Remote BoF Exploit

No description provided by source. / tetherealsip.c now quite functional Ethereal 0.10.0 to 0.10.10 SIP Dissector remote root exploit Advisory: http://www.ethereal.com/appnotes/enpa-sa-00019.html produced by Team W00dp3ck3r: frauk\x41iser mag00n s00n thorben Notes: tested on Debian Sarge Linux...

openbsd/x86 add user w00w00 112 bytes

openbsd/x86 add user w00w00 112 bytes. Shellcode exploit for openbsdx86 platform include char shell= "\xeb\x2b\x5e\x31\xc0\x88\x46\x0b" "\x88\x46\x29\x50\xb0\x09\x50\x31" "\xc0\x56\x50\xb0\x05\xcd\x80\x89" "\xc3\x6a\x1d\x8d\x46\x0c\x50\x53" "\x50\x31\xc0\xb0\x04\xcd\x80\x31"...

linux/x86 add user t00r 82 bytes

linux/x86 add user t00r 82 bytes. Shellcode exploit for linx86 platform / [email protected] 0x14abril0x7d2 82 bytes Agrega la linea "t00r::0:0::/:/bin/sh" en /etc/passwd Encriptada en http://www.shellcode.com.ar/linux/lnx-t00r-cr1.c / include // Shellcode // Asm Code char shellcode=...

Applied Watch protection bypass

It's possible to add new users or IDS rules without authentication...

Poster 2.0 - Unauthorized Privileged User Access

source: https://www.securityfocus.com/bid/8426/info A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access this variable to add additional adminstrator users...

DoS and forced user addition to ICQ

ICQ register appllication/x-icq MIME type .uin for files. This files allows to add user to contact list without notice. It's also possible to cause DoS against ICQ via .hpf files...

CGI - mailnews.cgi vulnerability...

Hello BuGReaders... Script: mailnews.cgi Introduction: cat from source CGI-Script MAILNEWS 1.3 This script helps you to maintain a mailinglist. /cat Tested Version: 1.1, 1.3 Author dont parse some characters and he use very stupid "password protection". We can add or delete users from maillist...

Дырка в News Publisher CGI

Из-за недостаточной проверки ввода пользователя есть возможность добавлять пользователей...

linux/x86 add user 70 bytes

linux/x86 add user 70 bytes. Shellcode exploit for linx86 platform / Linux/x86 Appends the line "z::0:0:::\n" to /etc/passwd. quite old, could be optimized further / include char c0de = / main: / "\xeb\x29" / jmp callz / / start: / "\x5e" / popl %esi / "\x29\xc0" / subl %eax, %eax / "\x88\x46\x0b...