8256 matches found
ProFTPD 1.3.3c Trojan Source Code
== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...
ProFTPd-1.3.3c - Backdoor Command Execution (Metasploit)
$Id: proftpd133cbackdoor.rb 11214 2010-12-03 12:34:38Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ProFTPD-1.3.3c Backdoor Command Execution
$Id: proftpd133cbackdoor.rb 11210 2010-12-02 22:33:37Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ProFTPD Server Backdoored
The main server used to distribute the open-source ProFTPD software was compromised over the weekend through the use of a bug in the FTP software itself, and a backdoored version of the software was uploaded and distributed for several days as a result. Because of the compromise, the backdoored...
ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution
== ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemon to gain access to the server and used their privileges to replace...
ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution
ProFTPd 1.3.3c - Compromised Source Backdoor Remote Code Execution == ProFTPD Compromise Report == On Sunday, the 28th of November 2010 around 20:00 UTC the main distribution server of the ProFTPD project was compromised. The attackers most likely used an unpatched security issue in the FTP daemo...
ProFTPD 1.3.3c Backdoor Command Execution
This module exploits a malicious backdoor that was added to the ProFTPD download archive. This backdoor was present in the proftpd-1.3.3c.tar.bz2|gz archive between November 28th 2010 and 2nd December 2010. Module Options msf use exploit/unix/ftp/proftpd/133cbackdoor msf undefined133cbackdoor sho...
SiteEngine <= 7.1 SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================= SiteEngine = 7.1 SQL Injection Vulnerability ============================================= Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com...
SiteEngine 7.1 - SQL Injection
SiteEngine 7.1 - SQL Injection Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com Vendor: www.siteengine.net www.boka.cn Dork: "Powered by SiteEngine" //300,000 + Language:PHP Greetz: birdarmy Description: Exploit this vulnerability comment mus...
SiteEngine 7.1 - SQL Injection
Title: SiteEngine 7.1 SQL injection Vulnerability Date: 2010-11-25 Author: Beach Team: www.linux520.com Vendor: www.siteengine.net www.boka.cn Dork: "Powered by SiteEngine" //300,000 + Language:PHP Greetz: birdarmy Description: Exploit this vulnerability comment must be enabled default == enable...
Camtron CMNC-200 camera multiple security vulnerabilities
Buffer overflow in installable ActiveX component, directory traversal, backdoor accounts m/merlin, unauthorized access, DoS...
MetInfo 3.0 PHP代码注入漏洞
MetInfo企业网站管理系统是一个功能完善的营销型企业网站管理平台，PHP+MYSQL架构 MetInfo 3.0的/include/common.inc.php文件第67行： evalbase64decode$allclass0; $allclass0变量未初始化，因此我们可以控制其值，进行代码注入的利用。 MetInfo 3.0 SEBUG临时解决方法： 对$allclass0变量进行初始化 厂商补丁： metinfo ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.metinfo.cn/...
Debian 5.0.6 / Ubuntu 10.04 Webshell To Remote Root
Exploit Title: Debian =5.0.6 /Ubuntu =10.04 Webshell-Remote-Root Date: 24-10-2010 Author: jmit Mail: fhausbergeratgmaildotcom Tested on: Debian 5.0.6 CVE: CVE-2010-3856 -------------- | DISCLAIMER | -------------- IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,...
Joomla Community Builder Enhenced Component LFI/RCE Vulnerability
Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...
VirIT eXplorer Lite DLL Hijacking Exploit (tg-scan.dll)
Exploit for windows platform in category local exploits ======================================================= VirIT eXplorer Lite DLL Hijacking Exploit tg-scan.dll ======================================================= / VirIT eXplorer Lite DLL Hijacking Exploit tg-scan.dll Author : anT!-Tr0J4...
Arugizer Trojan Horse (Energizer DUO) - Code Execution (Metasploit)
$Id: energizerduopayload.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Multiple Switch Vendors '__super' Account Backdoor
Nessus was able to log into the remote host as the 'super' user and a password based on the switch's MAC address. This is likely a built-in account that cannot be disabled and whose password cannot be changed. A remote attacker with knowledge of this switch's MAC address could exploit this by...
Backdoor Password In 3Com / Dell / SMC / Foundry / EdgeCore Switches
On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does not seem to be listed in any of the vulnerability databases. Also, I cou...
[0day] Apple QuickTime "_Marshaled_pUnk" backdoor param arbitrary code execution
HTML Version http://www.reversemode.com/index.php?option=comcontent&task=view&id=69&Itemid=1 The scenario would be as follows: Victim prerequisites: Internet Explorer. XP,Vista,W7. Apple Quicktime 7.x, 6.x 2004 versions are also vulnerable, older versions not checked 1. Victim is enticed into...
Accton-based switches (3com Dell SMC Foundry EdgeCore) - Backdoor Password
Accton-based switches 3com Dell SMC Foundry EdgeCore - Backdoor Password On the 15th of august 2009, at the HAR2009 conference, the existence of a backdoor password in Accton-based switches was revealed by Edwin Eefting, Erik Smit and Erwin Drent 12. Even though this is a 365-day exploit, it does...