CVE-2011-0049: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the listfileget function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. dot dot sequences in the help command, as demonstrated using 1 a crafted email and 2 cgi-bin/mjwwwusr in the web interface...

bsd/x86 - connect back Shellcode (81 bytes)

Exploit for bsd/x86 platform in category shellcode / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : email protected / include include include char shellcode =...

BSD x86 connect back Shellcode 81 bytes

BSD x86 connect back Shellcode 81 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

PT-2010-5604

Name of the Vulnerable Software and Affected Versions XWiki Watch version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the rev parameter to API endpoints such as "bin/viewrev/Main/WebHome" and "bin/view/Blog", and the register...

OSX/Intel - setuid shell x86_64 - 51 bytes

OSX/Intel - setuid shell x8664 - 51 bytes. Shellcode exploit for osx platform / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text globa...

Fedora 12 : systemtap-1.3-3.fc12 (2010-17868)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...

Fedora 13 : systemtap-1.3-3.fc13 (2010-17873)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...

linux/ARM - execve("/bin/sh", [0], [0 vars]) - 27 bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/ARM - execve"/bin/sh", 0, 0 vars - 27 bytes ======================================================= / Title: Linux/ARM - execve"/bin/sh", 0, 0 vars - 27 bytes Date: 2010-08-31 Tested...

CVE-2010-3124

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3124: Undefined Security Weakness

Untrusted search path vulnerability in bin/winvlc.c in VLC Media Player 1.1.3 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wintab32.dll that is located in the same folder as a .mp3 file...

CVE-2010-3121

CVE-2010-3121: The DevonIT thin-client management tool’s tm-console-bin component suffers a buffer overflow that could let remote attackers execute arbitrary code via unspecified vectors. Affected product: DevonIT thin-client management tool (tm-console-bin). Root cause: unchecked buffer handling...

CVE-2010-3121: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in tm-console-bin in the DevonIT thin-client management tool might allow remote attackers to execute arbitrary code via unspecified vectors...

linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes ============================================================ include include / Aodrulez's /bin/sh Null-Free Polymorphic...

linux/ARM - Polymorphic execve("/bin/sh", ["/bin/sh"], NULL); 78 bytes

Exploit for linux/x86 platform in category shellcode ========================================================================================= linux/ARM - Polymorphic execve"/bin/sh", "/bin/sh", NULL; - XOR 88 encoded - 78 bytes...

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)

$Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Polymorphic /bin/sh x86 linux shellcode

Polymorphic /bin/sh x86 linux shellcode. Shellcode exploit for linx86 platform / Title : Polymorphic /bin/sh x86 linux shellcode . Name : 116 bytes /bin/sh x86 linux polymorphic shellcode . Date : Tue Jun 29 22:08:59 WIT 2010 . Author : gunslinger Web : http://devilzc0de.org blog :...

linux/x86 Polymorphic /bin/sh shellcode 116 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 Polymorphic /bin/sh shellcode 116 bytes ================================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

CVE-2010-1748

The cgiinitializestring function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % percent character without two subsequent hex characters, which...

CVE-2010-1748: Improper Restriction of Operations within the Bounds of a Memory Buffer

The cgiinitializestring function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % percent character without two subsequent hex characters, which...