CVE-2011-0923

The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...

bsd/x86 - connect back Shellcode (81 bytes)

Exploit for bsd/x86 platform in category shellcode / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : email protected / include include include char shellcode =...

BSD x86 connect back Shellcode 81 bytes

BSD x86 connect back Shellcode 81 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to 1 bin/viewrev/Main/WebHome and 2 bin/view/Blog, and the 3 registerfirstname and 4 registerlastname parameters to bin/register/XWiki/Register...

OSX/Intel - setuid shell x86_64 - 51 bytes

OSX/Intel - setuid shell x8664 - 51 bytes. Shellcode exploit for osx platform / Title: OSX/Intel - setuid shell x8664 - 51 bytes Date: 2010-11-25 Tested on: Mac OS X 10.6.5 - Darwin Kernel Version 10.5.0 Author: Dustin Schultz - twitter: @thexploit http://thexploit.com BITS 64 section .text globa...

Fedora 13 : systemtap-1.3-3.fc13 (2010-17873)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...

Fedora 12 : systemtap-1.3-3.fc12 (2010-17868)

This refresh corrects two important security bugs in the /usr/bin/staprun program of the systemtap-runtime package. CVE-2010-4171 Ability to remove unused modules by unprivileged user CVE-2010-4170 Insecure loading of modules We would like to thank Tavis Ormandy for reporting this issue. Note tha...

linux/ARM - execve("/bin/sh", [0], [0 vars]) - 27 bytes

Exploit for linux/x86 platform in category shellcode ======================================================= linux/ARM - execve"/bin/sh", 0, 0 vars - 27 bytes ======================================================= / Title: Linux/ARM - execve"/bin/sh", 0, 0 vars - 27 bytes Date: 2010-08-31 Tested...

CVE-2010-3121

CVE-2010-3121: The DevonIT thin-client management tool’s tm-console-bin component suffers a buffer overflow that could let remote attackers execute arbitrary code via unspecified vectors. Affected product: DevonIT thin-client management tool (tm-console-bin). Root cause: unchecked buffer handling...

linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 /bin/sh Null-Free Polymorphic Shellcode - 46 bytes ============================================================ include include / Aodrulez's /bin/sh Null-Free Polymorphic...

linux/ARM - Polymorphic execve("/bin/sh", ["/bin/sh"], NULL); 78 bytes

Exploit for linux/x86 platform in category shellcode ========================================================================================= linux/ARM - Polymorphic execve"/bin/sh", "/bin/sh", NULL; - XOR 88 encoded - 78 bytes...

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)

$Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Polymorphic /bin/sh x86 linux shellcode

Polymorphic /bin/sh x86 linux shellcode. Shellcode exploit for linx86 platform / Title : Polymorphic /bin/sh x86 linux shellcode . Name : 116 bytes /bin/sh x86 linux polymorphic shellcode . Date : Tue Jun 29 22:08:59 WIT 2010 . Author : gunslinger Web : http://devilzc0de.org blog :...

linux/x86 Polymorphic /bin/sh shellcode 116 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 Polymorphic /bin/sh shellcode 116 bytes ================================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes ==================================================== / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Adobe Flash / Reader - Live Malware

Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is "edb" without the quotes. NOTE: This...

Adobe Flash Reader - Live Malware

Adobe Flash Reader - Live Malware Exploit-DB Note - Live POC originally found at http://qoop.org/security/poc/cve-2010-1297/ File is malicious! Taken from the wild! Beware! To decrypt the file: openssl aes-256-cbc -d -a -in adobe-0day-2010-1297.tar.enc -out adobe-0day-2010-1297.tar Password is...

linux/x86 - give all user root access when execute /bin/sh 45 bytes

45 bytes give all user root access when execute /bin/sh x86 linux shellcode. Shellcode exploit for linux platform / Name : 45 bytes give all user root access when execute /bin/sh x86 linux shellcode Date : Sat Jun 5 16:10:00 2010 Author : gunslinger Web : http://devilzc0de.org blog :...

linux/x86 give all user root access when execute /bin/sh 45 bytes

Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 give all user root access when execute /bin/sh 45 bytes ================================================================= /...

Linux/x86 - execve(/bin/sh, -c, ping localhost) Shellcode (55 bytes)

Linux/x86 - execve/bin/sh, -c, ping localhost Shellcode 55 bytes. Shellcode exploit for Linuxx86 platform / Name : 55 bytes sysexecve"/bin/sh", "-c", "ping localhost" x86 linux shellcode Date : may, 31 2010 Author : gunslinger Web : devilzc0de.com blog : gunslinger.devilzc0de.com tested on : linu...