33 matches found
Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (x86)
No description provided by source. !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of Kansas City POP Daemon Version 0.0 - Copyright c 1999 David Nicol [email protected] kevin-finisterres-mac-mini:...
Xcode OpenBase <= 9.1.5 - Local Root Exploit (OSX)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom http://docs.info.apple.com/article.html?artnum=61798 This won't help ftp://www.openbase.com/pub/OpenBase10.0 This will This is an exploit for a 3rd party program that has...
Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X)
No description provided by source. !/usr/bin/perl VERITAS-OSX.pl - VERITAS NetBackup Format Strings OSX/ppc Remote Exploit johnhatdigitalmunitiondotcom bug found by kflistsatdigitalmunitiondotcom http://www.digitalmunition.com/ use POSIX; use IO::Socket; use IO::Select; my $shellcode = / OSX...
CentOS Update for libtiff CESA-2010:0519 centos5 i386
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2010:0519 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CentOS Update for libtiff CESA-2010:0520 centos3 i386
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2010:0520 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Safari RSS feed:// Buffer Overflow via libxml2 Exploit PoC
No description provided by source. !/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala CVE-2008-3529 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.com , http://www.netragard.com The application PubSubAgent quit...
Safari RSS feed:// Buffer Overflow
!/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala CVE-2008-3529 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.com , http://www.netragard.com The application PubSubAgent quit unexpectedly. Process: PubSubAgent 3764 Path:...
Apple Safari - RSS 'feed://' Buffer Overflow via libxml2 (PoC)
!/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala CVE-2008-3529 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.com , http://www.netragard.com The application PubSubAgent quit unexpectedly. Process: PubSubAgent 3764 Path:...
Apple Safari - RSS feed: Buffer Overflow via libxml2 (PoC)
Apple Safari - RSS feed: Buffer Overflow via libxml2 PoC !/usr/bin/ruby Quick-n-dirty PoC for APPLE-SA-2009-05-12 ala CVE-2008-3529 Safari RSS feed:// buffer overflow via libxml2 by KF of Digitalmunition and Netragard http://www.digitalmunition.com , http://www.netragard.com The application...
Apple Mac OSX < 2007-005 - 'vpnd' Local Privilege Escalation
Copyright c 2007 Kevin Finisterre CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/4013.tar.gz 05302007-vpenis.tar.gz milw0rm.com 2007-05-30...
McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit
Exploit for macOS platform in category local exploits ========================================================== McAfee VirusScan for Mac Virex \n\nTargets:\n\n"; foreach $key sortkeys %tgts $a,$b = split/:/,$tgts"$key"; print "\t$key . $a\n"; print "\n"; exit 1; $a,$b = split/:/,$tgts"$target";...
McAfee VirusScan for Mac (Virex) 7.7 - Local Privilege Escalation
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Following symlinks is bad mmmmmmmmmmkay! $dest = "/var/cron/tabs/root"; $tgts"0" = "Virex 7.7.dmg:"/Library/Application Support/Virex/VShieldExclude.txt" "; unless $target = @ARGV print "\n\nUsage: $0...
Apple iLife iPhoto PhotoCast XML远程格式串漏洞
Apple iLife iPhoto PhotoCast是一款用于在网站上共享照片的工具。 Apple iLife iPhoto PhotoCast处理XML种子存在问题,远程攻击者可以利用漏洞进行格式串攻击,可能以应用程序进程权限执行任意指令。 通过构建特殊的iPhoto photocast XML feed,恶意用户可以导致iPhoto PhotoCast在处理"title"元素时出现格式串错误,造成远程任意代码执行。 Apple iLife iPhoto 6.0.5 316 目前没有详细解决方案提供: http://www.apple.com/ilife/iphoto/...
Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX)
Exploit for macOS platform in category local exploits ======================================================================== Kerio WebSTAR 5.4.2 libucache.dylib Privilege Escalation Exploit OSX ======================================================================== !/usr/bin/perl...
Kerio WebSTAR 5.4.2 (OSX) - 'libucache.dylib' Local Privilege Escalation
!/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach $key keys %ENV delete $ENV$key; $tgts"0" = "kerio-webstar-5.4.2-mac.bi...
Xcode OpenBase 10.0.0 (OSX) - Unsafe System Call Privilege Escalation
Xcode OpenBase 10.0.0 OSX - Unsafe System Call Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom \n\nTargets:\n\n"; foreach $key sortkeys %tgts $a,$b = split/:/,$tgts"$key"; print "\t$key . $a - $b\n"; print "\n"; exit 1; $ret =...
Xcode OpenBase <= 9.1.5 (root file create) Local Root Exploit (OSX)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom http://docs.info.apple.com/article.html?artnum=61798 This won't help ftp://www.openbase.com/pub/OpenBase10.0 This will Create a new file anywhere on the filesystem with...
getpwnedmail-ppc.pl.txt
!/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-mini: kfinisterre$ /usr/bin/fetchmail -p pop3 --fastuidl 1 localhos...
Apple Mac OSX 10.4.7 - fetchmail Privilege Escalation
Apple Mac OSX 10.4.7 - fetchmail Privilege Escalation !/bin/sh http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom Previously undisclosed local fetchmail issue. This takes setgid=6 http://docs.info.apple.com/article.html?artnum=106704 export PATH=/tmp:$PATH echo /bin/sh -i...
Apple Mac OSX 10.4.7 (PPC) - fetchmail Local Privilege Escalation
Apple Mac OSX 10.4.7 PPC - fetchmail Local Privilege Escalation !/usr/bin/perl getpwnedmail.pl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom This is a canibalized version of "Kansas City POP Daemon Version 0.0" - Copyright c 1999 David Nicol kevin-finisterres-mac-min...