Computer Associates Products Message Engine RPC Server - Multiple Buffer Overflow Vulnerabilities (2)

source: https://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...

PHPODP 1.5 - 'ODP.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17976/info phpODP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...

New ideas now move the new network vulnerability-vulnerability warning-the black bar safety net

Article author: yogurtGXU the www.wuzhou.org） Information source: evil octal information security team www.eviloctal.com） The original download: http://www.wuzhou.org/dvbbs.doc Some time ago focn, who found the Action Network to mention the right vulnerability, this vulnerability but much noise...

Webhints <= 1.03 Remote Command Execution Exploit (c code) (2)

/ T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR : WebHints Remote C0mmand Execution Vuln Coded By: A l p h a P r o g r a m m e r Sirus-v E-Mail: [email protected] This Xpl Upload a Page in Vulnerable Directory , You can Change This Code For Yourself GR33tz T0 ==...

MailEnable Enterprise 1.x - IMAPd Remote Overflow

MailEnable Enterprise 1.x - IMAPd Remote Overflow / +--=--------------------------x0n3-h4ck Team Presents---------------------------=--+ +--= =--+ +--= MailEnable Enterprise include include include include include include include include include include / Connectback Shellcode ::: 316 byte Link...

alexPHP.txt

Informations : °°°°°°°°°°°°°° Website : http://www.alexphpteam.com Version : all Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° ./include/livreinclude.php ------------------------------------------------------------------ if !$noconnect.... some include functions...

MyServer 0.7.1 - POST Denial of Service

MyServer 0.7.1 - POST Denial of Service // PoC to crash the server // / MyServer 0.7.1 POST Denial Of Service vendor URL: http://www.myserverproject.net coded and discovered by: badpack3t for .:sp research labs:. www.security-protocols.com 9.20.2004 Tested on Mandrake 10.0 usage: sp-myserv-0.7.1...

bsdi/x86 - execve /bin/sh 46 bytes

bsdi/x86 execve /bin/sh 46 bytes. Shellcode exploit for bsdix86 platform / BSDi execve of /bin/sh by v9 [email protected] / static char exec= "\xeb\x1f\x5e\x31\xc0\x89\x46\xf5\x88\x46\xfa\x89\x46\x0c" / 14 characters. / "\x89\x76\x08\x50\x8d\x5e\x08\x53\x56\x56\xb0\x3b\x9a\xff" / 14 characters. /...

Mandrake Linux Security Advisory : kernel (MDKSA-2001:082-1)

Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result...

Npds BB HTML Injection

I release it very quickly ... So it can be improved : Code to put in a reply or in a topic : Your fake message/td/trtrtd valign="bottom"hr noshade size="1" class="ONGL" &nbspa href="user.php?op=userinfo&uname=User" CLASS="NOIR" target=blankimg src="images/forum/icons/profile.gif" border=0...

mysql.authentication.bypass_client.c.diff

1941,1956c1941,1942 servercapabilities & CLIENTSECURECONNECTION scramble, passwd; scramble, passwd; sprintfend,"\x14\x00"; end+=2;...

FirstClass Desktop 7.1 (latest) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ======================================================= FirstClass Desktop 7.1 latest Buffer Overflow Exploit ======================================================= / ++++++++++++++++++++++++++++++++++++++++++++++++++++ FirstClass Desktop 7...

Mah-Jong 1.4 - MJ-Player Server Flag Local Buffer Overflow

Mah-Jong 1.4 - MJ-Player Server Flag Local Buffer Overflow // source: https://www.securityfocus.com/bid/8729/info A problem in the handling of large requests supplied with certain flags has been reported in Maj-Jong. Because of this, it may be possible for a local attacker to gain elevated...

Piolet Client 1.05 - Remote Denial of Service

Piolet Client 1.05 - Remote Denial of Service / Piolet client v1.05 Remote Denial of Service Proof of Concept by Luca Ercoli luca.ercoliatinwind.it / include include include include include int ck,port=701,sd,cx=0,contatore=0,prec; struct sockaddrin pilotclient; void endingchar client int i;...

PUPET-simpnews.txt

original File name : PUPET-simpnews.txt date releases : july 15, 2003 Informations : ========================= Advisory Name: Simpnews include file Vulnerability Author: PUPET Discover by: PUPET Website vendor : http://www.boesch-it.de/ Versions : tested on V2.01 - V2.13 Problem : Include file PH...

XGB 1.2 - Remote Form Field Input Validation

XGB 1.2 - Remote Form Field Input Validation source: https://www.securityfocus.com/bid/4515/info xGB is guestbook software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. xGB does not sufficiently validate input that is supplied v...

IBM WebSphere default servlet handler showcode vulnerability

Foundstone, Inc. http://www.foundstone.com "Securing the Dot Com World" Security Advisory IBM WebSphere default servlet handler showcode vulnerability ---------------------------------------------------------------------- FS Advisory ID: FS-072400-6-IBM Release Date: July 24, 2000 Product: IBM...

hhopen.txt

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX HHOPEN.OCX Buffer Overflow Discovered by DaCure of RaZa-MeXiCaNa Hackers Team XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX The Problem ----------- While playing...

sudo.bin NLSPATH Local Root Exploit

Exploit for linux platform in category local exploits =================================== sudo.bin NLSPATH Local Root Exploit =================================== include include include include include define PATHSUDO "/usr/bin/sudo.bin" define BUFFERSIZE 1024 define DEFAULTOFFSET 50 ulong getesp...