998 matches found
PHP.EXE / Apache Win32 Arbitrary File Reading Vulnerability
A configuration vulnerability exists for PHP.EXE cgi running on Apache for Win32 platforms. It is reported that the installation text recommends configuration options in httpd.conf that create a security vulnerability, allowing arbitrary files to be read from the host running PHP. Remote users ca...
Apache Remote Command Execution via .bat files
The Apache 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. An attacker can send a pipe character with commands appended as...
Platinum FTP Server
Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server: The 'dir' command can be used to examine the filesystem of the machine and gather further information about the hos...
Check for Apache Multiple / vulnerability
Certain versions of Apache for Win32 have a bug wherein remote users can list directory entries. Specifically, by appending multiple /'s to the HTTP GET command, the remote Apache server will list all files and subdirectories within the web root as defined in httpd.conf. OpenVAS Vulnerability Tes...
Apache HTTP Server Remote Command Execution via .bat files
The Apache HTTP Server 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. SPDX-FileCopyrightText: 2002 Matt Moore Some text...
Apache HTTP Server Multiple '/' Vulnerability - Active Check
Certain versions of Apache HTTP Server for Win32 have a bug wherein remote users can list directory entries. SPDX-FileCopyrightText: 2000 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHP.EXE / Apache HTTP Server Win32 Arbitrary File Reading Vulnerability - Active Check
A configuration vulnerability exists for PHP.EXE cgi running on Apache HTTP Server for Win32 platforms. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
snort_bo_overflow_win32.pm.txt
for educational purpose only by Kira package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version' = '$Revision: 1.0 $', 'Authors' = 'Trirat Puttaraksa Kira '...
Snort 2.4.2 - BackOrifice Remote Buffer Overflow (Metasploit)
Snort 2.4.2 - BackOrifice Remote Buffer Overflow Metasploit for educational purpose only by Kira package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice Preprocessor Overflow', 'Version'...
Snort <= 2.4.2 BackOrifice Remote Buffer Overflow Exploit (meta)
Exploit for unknown platform in category remote exploits ================================================================ Snort package Msf::Exploit::snortbooverflowwin32; use base 'Msf::Exploit'; use strict; use Pex::Text; my $holdrand; my $advanced = ; my $info = 'Name' = 'Snort Back Orifice...
VERITAS-Win32.pl.txt
!C:\Perl\bin\perl.exe -w Vertias Netbackup Win32 format string exploit Code By: johnhatdigitalmunitiondotcom & kfatdigitalmunitiondotcom For win2k/xp pre sp2 we overwrote PEBFastlock - rtlentercritical For win xp sp2 we overwrote SEH http://www.digitalmunition.com/ You may have to run this 2 time...
Windows NT/2k/XP useradd shellcode for russian systems 318 bytes
Windows NT/2k/XP useradd shellcode for russian systems 318 bytes. Shellcode exploit for win32 platform / \ win32 useradd shellcode for russian systems / by Darkeagle \ ExploiterZ Lab / http://exploiterz.org \ / // add user "slim" with password "shady" with admin prem. in Russian Systems unsigned...
[Recommended]to uncover the virus-the mystery of DLL remote inject technical explanation-vulnerability warning-the black bar safety net
DLL remote injection technology is currently the Win32 virus is a widely used technology. Using this technique the virus body is usually located in a DLL, At system startup, an EXE program will the DLL be loaded to some system processes 如 Explorer.exe in the run. As a result, the ordinary Process...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)
Exploit for unknown platform in category remote exploits ============================================================= Veritas NetBackup rtlentercritical For win xp sp2 we overwrote SEH http://www.digitalmunition.com/ You may have to run this 2 times. use IO::Socket; use Getopt::Std;...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (win32)
No description provided by source. !C:\Perl\bin\perl.exe -w Vertias Netbackup Win32 format string exploit Code By: johnhatdigitalmunitiondotcom & kfatdigitalmunitiondotcom For win2k/xp pre sp2 we overwrote PEBFastlock - rtlentercritical For win xp sp2 we overwrote SEH...
CA Unicenter 3.1 CAM log_security() Stack Overflow Exploit (meta)
No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...
CA Unicenter 3.1 CAM log_security() Stack Overflow Exploit (meta)
Exploit for unknown platform in category remote exploits ================================================================= CA Unicenter 3.1 CAM logsecurity Stack Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework a...
CA Unicenter 3.1 - CAM 'log_security()' Remote Stack Overflow (Metasploit)
This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...
bsod in win32k.sys(Multi-User Win32 Driver)
Hello vuln, OS: Microsoft Windows XP, SP2, other not tested VULNERABILITY: file : win32k.sys version : 5.1.2600.2180 xpspsp2rtm.040803-2158 description : Multi-User Win32 Driver author : 6star aka mg BUG DESCRIPTION: When you try HOW TO CHECK: 1. Click on Desktop to call Context Menu. 2. Then...
MultiTheftAuto 0.5 patch 1 - Server Crash MOTD Deletion
MultiTheftAuto 0.5 patch 1 - Server Crash MOTD Deletion / by Luigi Auriemma / include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...