CVE-2008-1147

CVE-2008-1147 describes a weakness in a PRNG that uses XOR and 2-bit random hops (Algorithm X2) used in OpenBSD 2.6–3.4, macOS 10–10.5.1, FreeBSD 4.4–7.0, and DragonFlyBSD 1.0–1.10.1. The vulnerability allows remote attackers to infer sensitive values such as IP fragmentation IDs by observing a s...

Windows 9x/NT/2k/XP PEB method 35 bytes

No description provided by source. /This is a 35 byte C implementation of the use of the PEB method to get the kernel32 base address on Windows. This is generic code designed to run on both Windows 9x and NT based systems. The code has been optimized to not have any 00h bytes so that you wont hav...

linux/x86 cat /dev/urandom > /dev/console, just for kicks - 63 bytes

No description provided by source. / linux/x86 cat /dev/urandom /dev/console, no real profit just for kicks - 63 bytes - izik [email protected] / char shellcode = "\x31\xc9" // xor %ecx,%ecx "\x51" // push %ecx "\x68\x6e\x64\x6f\x6d" // push $0x6d6f646e "\x68\x2f\x75\x72\x61" // push $0x6172752f...

NetScaler Web Management Interface Cookie Credentials Encryption Weakness

The version of the Citrix NetScaler web management interface on the remote host uses weak encryption for protecting the HTTP cookie content by XORing sensitive values, including the username and password, with a fixed key stream. %NASLMINLEVEL 70300 netscalerwebcookiecrypto.nasl GPLv2 History:...

CVE-2007-5460: Use of a Broken or Risky Cryptographic Algorithm

Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption XOR obfuscation with a fixed key when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by 1 sniffing or 2...

CVE-2007-4150

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

Design/Logic Flaw

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

CVE-2007-4150

The CVE-2007-4150 issue affects Visionsoft Audit 12.4.0.0 (Visionsoft Audit) where weak cryptography (XOR) is used for passwords: during transmission over the network (passwords can be sniffed) and in the configuration file (local read access can reveal passwords). No further exploit details are ...

CVE-2007-4150: Use of a Broken or Risky Cryptographic Algorithm

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 uses weak cryptography XOR when 1 transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and 2 storing passwords in the configuration file, which allows local users to...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

Exploit for unknown platform in category remote exploits =================================================== IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit =================================================== !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windo...

Crack*. mdb currently all versions of the password-vulnerability warning-the black bar safety net

On the Access97 password hack, in a lot of sites and magazines have been introduced. Here I simply repeat it. In the mdb file the 0x42 Byte 1-3 byte, respectively, with 0x86,0xfb,0xec,0x37,0x5d,0x44,0x9c,0xfa,0xc6,0x5e,0x28,0xe6,0x13 XOR can be obtained after the database password. But in Access ...

ActualAnalyzer688.txt

======================================================================================= XOR Crew :: Security Advisory 4/10/2006 ======================================================================================= ActualAnalyzer Pro v6.88 - Remote Command Execution Vulnerability...

ISPConfig.txt

======================================================================================= XOR Crew :: Security Advisory 5/6/2006 ======================================================================================= ISPConfig = 2.2.2 - Remote Command Execution Vulnerability...

[SA19952] Albinator File Inclusion and Cross-Site Scripting Vulnerabilities

TITLE: Albinator File Inclusion and Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19952 VERIFY ADVISORY: http://secunia.com/advisories/19952/ CRITICAL: Highly critical IMPACT: Cross Site Scripting, System access WHERE: From remote REVISION: 1.1 originally posted 2006-05-04 SOFTWARE:...

AlbinatorPro208.txt

=========================================================================== XOR Crew :: Security Advisory 0day GIVE AWAY date? 2/20/2006 =========================================================================== Albinator Pro = 2.0.8 - Remote Command Execution Vulnerability...

Ultr@VNC weak encryption

Weak ecnryption algorithm XOR while transmitting on wire...

CVE-2006-2206: Undefined Security Weakness

The MS-Logon authentication scheme in UltraVNC aka Ultr@VNC 1.0.1 uses weak encryption XOR for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes...

linux/x86 - xor-encoded Connect Back Shellcode 371 bytes

linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

No description provided by source. linux/x86 xor-encoded Connect Back Shellcode 371 bytes http://www.milw0rm.com/sploits/black-RXenc-con-back.tar.gz milw0rm.com 2006-04-18...