Apache for Windows script source code leak

It's possible to access script code if cgi-bin is within DocumentRoot...

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes ================================================================ / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46...

linux/x86 stdin re-open and /bin/sh exec shellcode

linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...

D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln

No description provided by source. ADVISORY/0206 - D-Link Wireless Access-Point DWL-2100ap INTRUDERS TIGER TEAM SECURITY - SECURITY ADVISORY http://www.intruders.com.br/ , http://www.intruders.org.br/ Making a HTTP request to the /cgi-bin/ directory, the Web server will return error 404 Page not...

Open Exchange default account

mailadmin/secret LDAP account is created during installation with /bin/bash login shell...

Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory Name Open-Xchange defaultuser with /bin/bash Vendor Open-Xchange Inc. Product Open-Xchange Version 0.8.2 Author Cemil Degirmenci Risk high o Description: ======================= The OPEN-XCHANGE Collaboration and Integration Server Environmen...

linux/x86 - execve/bin/sh 24 bytes

linux/x86 execve/bin/sh 24 bytes. Shellcode exploit for linx86 platform / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68"...

os-x/ppc execve(/bin/sh), exit() 72 bytes

Exploit for os-x/ppc platform in category shellcode ========================================= os-x/ppc execve/bin/sh, exit 72 bytes ========================================= / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes / include include char shellcode =...

linux/x86 execve(/bin/sh) 24 bytes

No description provided by source. / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode = "\x99" // cltd "\x31\xc0" // xor %eax,%eax "\x52" // push %edx "\x68\x6e\x2f\x73\x68" // push $0x68732f6e...

linux/x86 execve(/bin/sh) 24 bytes

Exploit for linux/x86 platform in category shellcode ================================== linux/x86 execve/bin/sh 24 bytes ================================== / Linux/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 24 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / char shellcode =...

openbsd/x86 execve(/bin/sh) 23 bytes

Exploit for openbsd/x86 platform in category shellcode ==================================== openbsd/x86 execve/bin/sh 23 bytes ==================================== / OpenBSD/x86 Shellcode for: execve"/bin/sh", "/bin/sh", NULL 23 bytes / include include include include include include include...

[Full-disclosure] WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability

WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability By Sowhat of Nevis Labs Date: 2006.04.28 http://www.nevisnetworks.com http://secway.org/advisory/AD20060428.txt CVE: N/A Vendor WinISO Computing Inc. EZB Systems, Inc. MagicISO Inc. PowerISO Computing, Inc. Affected Software WinI...

CVE-2006-2043

na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "" backtick characters in the appliance's command line interface CLI...

Command injection

na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "" backtick characters in the appliance's command line interface CLI...

CVE-2006-2043

CVE-2006-2043 affects IP3 Networks NetAccess NA75 with the na-img-4.0.34.bin image; backtick characters in the appliance CLI enable local users to gain Unix shell access, indicating a command-injection-style vulnerability in the CLI parsing. No remediation details are provided in the supplied doc...

CVE-2006-2044

The CVE-2006-2044 entry concerns na-img-4.0.34.bin used by the IP3 Networks NetAccess NA75, which ships with a default username and password of admin/admin. The vulnerability is network‑accessible (AV:N, attack vector NETWORK) with no authentication required (Au:N) and yields partial impact to co...

CVE-2006-2003

The CVE-2006-2003 entry concerns a cross-site scripting (XSS) vulnerability in the Community Architect Guestbook, specifically in the cgi-bin/guest component. The issue allows remote attackers to inject arbitrary script/HTML when signing the guestbook, with the malicious content subsequently rend...

linux/x86 - xor-encoded Connect Back Shellcode 371 bytes

linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...

linux/x86 - execve/bin/sh + RIFF Header 28 bytes

linux/x86 execve/bin/sh + RIFF Header 28 bytes. Shellcode exploit for linx86 platform / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + RIFF Header - 28 bytes root@magicbox: file linux-sh-riffhdr.bin linux-sh-riffhdr.bin: RIFF little-endian data - izik / char shellcode = // // RIFF Header 5 bytes ...

linux/x86 execve(/bin/sh) + ZIP Header 28 bytes

No description provided by source. / linux/x86 - execve"/bin/sh", "/bin/sh", NULL + ZIP Header - 28 bytes root@magicbox: file linux-sh-ziphdr.bin linux-sh-ziphdr.bin: Zip archive data - izik [email protected] / char shellcode = // // ZIP Header 5 bytes // "\x50" // push %eax "\x4b" // dec %ebx...