Linux Kernel 2.4/2.6 sock_sendpage() Local Root Exploit (ppc)

No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

ILIAS LMS <= 3.9.9/3.10.7 Arbitrary Edition/Info Disclosure Vulns

Exploit for unknown platform in category web applications ================================================================= ILIAS LMS WEB: http://www.ilias.de/ | |--DOWNLOAD: http://www.ilias.de/docu/goto.php?target=st22935&clientid=docu | |--DEMO: http://www.demo.ilias-support.com/ | |--CATEGORY...

ProjectCMS 1.0b - 'index.php?sn' SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

debopenssh-auth.txt

/ Debian maybe other derivates |KUDUBUTUNTU| OpenSSH Remote -=Authenticated=- SELinux Privilege Elevation Fedora/RHEL Linux should be tested because it MAY contain the same vulnerability in it's OpenSSH patches in a time slice. Latest OpenSSH should not be vulnerable. Older Debian Releases may. O...

Yuhhu 2008 SuperStar (board) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Yuhhu 2008 SuperStar board Remote SQL Injection Exploit ========================================================= ."; $bul=pregmatch$ara,$tuttum,$rmx;...

Technical analysis:“the meat machine”on encounters of an unknown virus-vulnerability warning-the black bar safety net

5 month 1 3 day morning, the author in the online test MySQL Fun vulnerability, in fact, can not say that the vulnerability can only be said to be a technology only, use the MySQL Fun to overcome a Xeon host, inside, the want to do some testing, but stumbled across this station the host of the...

AppScan QA automated vulnerability testing tool buffer overflow

Buffer overflow on oversized HTTP server WWW-Authenticate header Realm parameter...

Recommendation:the Guangdong a University site detection notes(figure)-vulnerability warning-the black bar safety net

Recently by PPMM in a McDonald's cajoling, let me test out their school website, security how to,this thought can like our school like ten minutes away,I agreed, I did not expect...... The following start, in order not to cause unnecessary trouble, the removal of sensitive information. C:\ping...

DCP - portal XSS &amp; SQL attacks

Web Site: http://www.dcp-portal.org/ DCP Portal = v6 This script is possibly vulnerable to SQL Injection attacks AND Cross Site Scripting XSS attacks The script has been tested with these query variables: XSS : http://target/index.php?page=send&cid=scriptalertdocument.cookie;/script XSS - only PO...

Mozilla FireFox <= 1.0.1 Remote GIF Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================= Mozilla FireFox = 1.0.1 Remote GIF Heap Overflow Exploit ========================================================= / Mozilla FireFox = 1.0.1 Remote GIF Heap Overflow Exploit by...

Golden Ftp Server Pro - Directory Traversal Vuln

Product: Golden Ftp Server Pro Affected Versions : v2.52 Credit / Discovered by: Lachlan. H Date vendor notified: 02/05/2005 Patch Released: N/A Disclosure: 03/05/2005 External References: http://secunia.com/advisories/15175/ http://www.securityfocus.com/bid/13479/info/ Product Description: Golde...

SocialMPN - Arbitrary File Injection

!/usr/bin/perl -w Remote Testing SocialMPN Remote File Inclusion by y3dips for testing only Bug find by zer0-c00l , Bug published at http://waraxe.us/ftopic-542-0-days0-orderasc-.html print " Remote Testing File Inclusion for SocialMPN by y3dips \n"; require LWP::UserAgent; if@ARGV == 2 $target=...

typo3sql.txt

Here is a POC for the typo3 issue to test if you are vulnerable. This doesn't pull the password, just the username : http://path/?&action=getviewcategory&categoryuid=-99%20UNION%20SELECT%20use rname%20FROM%20beusers%20WHERE%20uid=1/ Also, it's easy to pull lists of data from the database using th...

Apache 2.0.52 Multiple Space Header Denial of Service Exploit (v2)

Exploit for unknown platform in category dos / poc ================================================================== Apache 2.0.52 Multiple Space Header Denial of Service Exploit v2 ================================================================== / Apache Squ1rt, Denial of Service Proof of...

[EXPL] BlackJumboDog Remote Buffer Overflow Exploit Code

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

MySQL 4.15.0 - Zero-Length Password Authentication Bypass

MySQL 4.15.0 - Zero-Length Password Authentication Bypass !/usr/bin/perl The script connects to MySQL and attempts to log in using a zero-length password Based on the vuln found by NGSSecurity The following Perl script can be used to test your version of MySQL. It will display the login packet se...

Unreal engine updates and Battle Mages advisory

I have an update about the methods used to test the format string vulnerability in the Unreal engine I reported yesterday. I have solved a problem in the windows version of my proof-of-concept unrfs-poc now version 0.1.1: http://aluigi.altervista.org/poc/unrfs-poc.zip The following instead is a...

gwebTraversal.txt

Donato Ferrante Application: GWeb HTTP Server http://freshmeat.net/projects/gweb/ Version: 0.6 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2...

Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator

/ Proof-of-concept exploit code for domremap 2 EDB Note: This is NOT to be confused with CVE-2003-0985 // https://www.exploit-db.com/exploits/141/, which would be "domremap 1". EDB Note: This will just "test" the vulnerability. A exploit version can be found here...

NFuse Cross Site Scripting vulnerability

Hi, NFuse provides several jsp or asp pages to make a portal. In one this page launch.jsp or launch.asp it's possible to use the method getLastError of the TemplateParser object in fact this method is inherited from the WebPNObject object. The CSS problem comes from the getLastError method. It do...