172 matches found
NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
NetSetMan 4.7.1 - Local Buffer Overflow SEH Unicode Exploit Title: NetSetMan 4.7.1 - Local Buffer Overflow SEH Unicode Exploit Author: Devin Casadey Discovery Date: 2019-03-11 Vendor Homepage: https://www.netsetman.com/ Software Link: https://www.netsetman.com/netsetman.exe Tested Version: 4.7.1...
NetSetMan 4.7.1 - Local Buffer Overflow (SEH Unicode)
Exploit Title: NetSetMan 4.7.1 - Local Buffer Overflow SEH Unicode Exploit Author: Devin Casadey Discovery Date: 2019-03-11 Vendor Homepage: https://www.netsetman.com/ Software Link: https://www.netsetman.com/netsetman.exe Tested Version: 4.7.1 Tested on: Windows XP SP3...
VX Search 10.2.14 - Proxy Buffer Overflow (SEH) Exploit
Exploit for windows platform in category local exploits !/usr/bin/env python Exploit Title : VXSearch v10.2.14 Local SEH Overflow Date : 11/16/2017 Exploit Author : wetw0rk Vendor Homepage : http://www.flexense.com/ Software link : http://www.vxsearch.com/setups/vxsearchentsetupv10.2.14.exe Versi...
Code injection
Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by 1 changing "PHPSESSID" to an array; 2 adding non-alphanumeric chars to "PHPSESSID"; 3 changing the image parameter to an array; or 4 changing the image parameter to a string, which reveals the installation path in an error...
Windows/x86 - Reverse TCP Staged Alphanumeric Shellcode (332 Bytes)
Windows x86 Reverse TCP Staged Alphanumeric Shellcode CreateProcessA cmd.exe Author: Snir Levi, Applitects 332 Bytes For Educational Purposes Only Date: 01.03.17 Author: Snir Levi Email: email protected https://github.com/snir-levi/ IP - 127.0.0.1 PORT - 4444 Tested on: Windows 7 Windows 10 Usage...
Windows x86 - Reverse TCP Staged Alphanumeric Shellcode (332 Bytes)
Windows x86 - Reverse TCP Staged Alphanumeric Shellcode 332 Bytes. Shellcode exploit for Winx86 platform Windows x86 Reverse TCP Staged Alphanumeric Shellcode CreateProcessA cmd.exe Author: Snir Levi, Applitects 332 Bytes For Educational Purposes Only Date: 01.03.17 Author: Snir Levi Email:...
Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode (103 bytes)
Reverse TCP Staged Alphanumeric Shellcode Linux x86 Execve /bin/sh Author: Snir Levi, Applitects 103 Bytes date: 9.2.17 Automatic python shellcode handler with stage preset send will be ready soon: https://github.com/snir-levi/ReverseTCPAlphanumericStagedShellcodeExecve-bin-bash/ IP - 127.0.0.1...
Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode (103 bytes)
Linux/x86 - Reverse TCP Alphanumeric Staged Shellcode 103 bytes. Shellcode exploit for Linx86 platform Reverse TCP Staged Alphanumeric Shellcode Linux x86 Execve /bin/sh Author: Snir Levi, Applitects 103 Bytes date: 9.2.17 Automatic python shellcode handler with stage preset send will be ready...
FreeBSD : passenger -- client controlled header overwriting (84fdd1bb-9d37-11e5-8f5c-002590263bf5)
"Daniel Knoppel reports : It was discovered by the SUSE security team that it was possible, in some cases, for clients to overwrite headers set by the server, resulting in a medium level security issue. CVE-2015-7519 has been assigned to this issue. Affected use-cases : Header overwriting may occ...
passenger -- client controlled header overwriting
Daniel Knoppel reports: It was discovered by the SUSE security team that it was possible, in some cases, for clients to overwrite headers set by the server, resulting in a medium level security issue. CVE-2015-7519 has been assigned to this issue. Affected use-cases: Header overwriting may occur ...
Achat Unicode SEH Buffer Overflow
This module exploits a Unicode SEH buffer overflow in Achat. By sending a crafted message to the default port 9256/UDP, it's possible to overwrite the SEH handler. Even when the exploit is reliable, it depends on timing since there are two threads overflowing the stack in the same time. This modu...
Position independent & Alphanumeric 64-bit execve("/bin/sh\0",NULL,NULL); - 87 Byte
87 bytes small position independent and alphanumeric 64-bit execve"/bin/sh\0",NULL,NULL; shellcode. Title: Position independent & Alphanumeric 64-bit execve"/bin/sh\0",NULL,NULL; 87 bytes Author: Breaking.Technology Date: 06 November 2014 Vendor Homepage: http://breaking.technology Version: x86-6...
Upload the file of trap II pure alphanumeric. swf is a vulnerability?- Vulnerability warning-the black bar safety net
0x00 background In a previous uploaded file trap , the author mentioned for flash cross-domain data hijacking,sometimes does not need us to upload a file. Because we can simply use the JSONP interface,the flash content is assigned to the callback to be used. Just like in the comments@Sogili...
Helix Server 11.0.1 - Remote Heap Overflow Exploit (win2k SP4)
No description provided by source. /usr/bin/python Remote exploit for the vulnerability in Helix server v11.0.1 as described at http://gleg.net/helix.txt The exploit spawns a shell on TCP port 4444 and connects to it. At the time of overflow we control EAX which is used in a call as follows...
HP OpenView NNM 7.5.1 - OVAS.exe SEH PRE AUTH Overflow Exploit
No description provided by source. !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability wa...
Frontbase <= 4.2.7 - Remote Buffer Overflow Exploit (windows)
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit date : 25.03.2007 Exploit writer : Heretic2...
Shellcodeexec execution shellcode-exploit warning-the black bar safety net
shellcodeexec.x32.exe a Can on windows execute shellcode tools, the use of this feature, you can also use it to execute contained malicious code shellcode, so as to achieve the invasion's purpose. shellcodeexec. x32. exe this tool can to https://github. com/inquisb/shellcodeexec. This website...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
iCAM Workstation Control 4.8.0.0 - Authentication Bypass Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software...
HackerOne: Control Characters Not Stripped From Username on Signup
Hey, To be honest, I'm not sure if there is any real security implications of this bug, but it's IMO something which should be fixed at some point since it'll be pretty easy. On signup, the username you chose has to be alphanumeric. If you submit someone else's username, followed by a null-byte...
RedHat Update for sudo RHSA-2012:1149-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...