CVE-2012-0452

Technical details about CVE-2012-0452 are not publicly provided in the connected documents. The initial description lists the vulnerability and affected products, but no further technical specifics or patch information are included here. Monitor for updates.

Trixd00r v0.0.1 - An Invisible TCP/IP based backdoor for UNIX systems

Trixd00r v0.0.1 - An Invisible TCP/IP based backdoor for UNIX systems NullSecurity Team Releases "Trixd00r v0.0.1" an advanced and invisible TCP/IP based userlandbackdoor for UNIX systems. It consists of a server and a client. The server sits and waits for magic packets using a sniffer. If a magi...

use after free in nsXBLDocumentInfo::ReadPrototypeBindings — Mozilla

Mozilla developers Andrew McCreight and Olli Pettay found that ReadPrototypeBindings will leave a XBL binding in a hash table even when the function fails. If this occurs, when the cycle collector reads this hash table and attempts to do a virtual method on this binding a crash will occur. This...

YourPersonalWebServer

YOPS Your Own Personal WEB Server is a small SEDA-like HTTP ToDo: Add Reverse ToDo: Test Vulnerable Targets Exploit Pack - Hawk Eye Edition 3.3 Copyright 2014 Juan Sacco http://exploitpack.com This program is free software: you can redistribute it and/or modify it under the terms of the GNU Gener...

Fedora 14 : scsi-target-utils-1.0.18-1.fc14 (2011-8930)

fix double-free vulnerability leads to pre-authenticated crash fix iscsi target outgoing user binding broken unexpectedly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 15 : scsi-target-utils-1.0.18-1.fc15 (2011-8890)

fix double-free vulnerability leads to pre-authenticated crash fix iscsi target outgoing user binding broken unexpectedly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 13 Update: pyfribidi-0.10.0-1.fc13

PyFriBidi is a simple Python binding for FriBidi, providing an implementation of The Unicode Bidirectional Algorithm in Python...

XT:Commerce Cross Site Scripting

---------------------------------------------------------------------------------- Cross-Site-Scripting XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be executed. By getting the cookie of the admin, the...

XT:Commerce 3.04 SP2.1 - Cross-Site Scripting

XT:Commerce 3.04 SP2.1 - Cross-Site Scripting ---------------------------------------------------------------------------------- Cross-Site-Scripting XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be...

ARP Spoof

Added: 08/23/2010 Background The Address Resolution Protocol ARP is used to resolve IP addresses into the hardware addresses which are used for delivering packets on a local network. Problem It is possible to send a computer a forged ARP reply, which is then stored in that computer's cache. This...

ARP Spoof

Added: 08/23/2010 Background The Address Resolution Protocol ARP is used to resolve IP addresses into the hardware addresses which are used for delivering packets on a local network. Problem It is possible to send a computer a forged ARP reply, which is then stored in that computer's cache. This...

ARP Spoof

Added: 08/23/2010 Background The Address Resolution Protocol ARP is used to resolve IP addresses into the hardware addresses which are used for delivering packets on a local network. Problem It is possible to send a computer a forged ARP reply, which is then stored in that computer's cache. This...

CVE-2010-2809

The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...

CVE-2010-2809

The default configuration of the binding in Uzbl before 2010.08.05 does not properly use the @SELECTEDURI feature, which allows user-assisted remote attackers to execute arbitrary commands via a crafted HREF attribute of an A element in an HTML document...

[Python] CGI shell

Данная утилита предоставляет веб-интерфейс для удаленной работы c "unix-like" операционной системой. Интерфейс в стиле WSO скрин. Стандартный функционал: работа с файлами и папками, выполнение команд. "Bind port to /bin/sh" и "Back-connect" работают без создания каких-либо файлов в /tmp за счет...

125 bind port to 6778 XOR encoded polymorphic linux shellcode

125 bind port to 6778 XOR encoded polymorphic linux shellcode .. Shellcode exploit for linux platform / Title : bind port to 6678 XOR encoded polymorphic linux shellcode . Name : 125 bind port to 6678 XOR encoded polymorphic linux shellcode . Date : Tue Jul 6 01:52:33 WIT 2010 Author : gunslinger...

Anatomy of the Eleonore Exploit Kit

LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...

Sun Microsystems Sun Java System Web Server remote exploit

Exploit for linux platform in category remote exploits ========================================================== Sun Microsystems Sun Java System Web Server remote exploit ========================================================== Sun Microsystems Sun Java System Web Server remote exploit for...

CVE-2010-0521

CVE-2010-0521 affects Apple Mac OS X Server prior to 10.6.3. The issue is that Server Admin does not properly enforce authentication for directory binding, allowing remote attackers to anonymously extract potentially sensitive information from Open Directory via unspecified LDAP requests. Public ...

CVE-2010-0521

Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests...