linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes ======================================================== / lnxbinsh4.c - v1 - 21 Byte /bin/sh Opcode Array Payload Copyrightc 2004...

[Full-disclosure] Microsoft Windows keybd_event validation vulnerability

Vulnerability: Microsoft Windows keybdevent validation vulnerability. Type:......... Design Flaw Vendor:....... Microsoft Impact:....... Local Privilege Elevation. Credits:...... AndrTarascaT4r @ Haxorcitos.comhttp://Haxorcitos.com .......I Lopez ilo @ reversing.org http://reversing.org...

CUPS Server 1.1 - GET Denial of Service

/ dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0...

mybbSQLinject.txt

Hello The Injected File : search.php Discovered by: HACKERS PAL & Devil-00 & ABDUCTER Injected Versions :- Powered by MyBulletinBoard 1.00 Release Candidate 4 Powered by MyBulletinBoard 1.00 Release Candidate 3 Powered by MyBulletinBoard 1.00 Release Candidate 2 Powered by MyBulletinBoard 1.00...

SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1

SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1 Version: PHPKit 1.6.1 Risk: High if magicquotesgpc = Off URL: http://www.phpkit.com SQL Injection in include.php?path=login/member.php The parameters usernick and letters are vulnerable to SQL Injections. POC:...

Elm < 2.5.8 (Expires Header) Remote Buffer Overflow Exploit

No description provided by source. / Exploit code for the bug posted by Ulf Harnhammar metaurtelia.com http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html Probably you will need to change SYSLOC and STRLOC to work on your box / include stdio.h include stdlib.h include string.h...

4dWebstar.txt

4d WebSTAR 5.x Mac OS X Buffer Overflow Author: Braden Thomas Vendor: http://www.4d.com Product: 4d WebSTAR 5.33 and 5.4 Web Server on Mac OS X only trial version tested Risk: Medium, remote root unlikely, DoS likely PoC Exploit code included Description: 4d WebSTAR 5.x 5.33 and 5.4 tested contai...

BusinessMail Server 4.60.00 - Remote Denial of Service

BusinessMail Server 4.60.00 - Remote Denial of Service / BusinessMail Server Remote Denial of Service Exploit by Kozan Based on Reed Arvin's code in perl Application: BusinessMail Server 4.60.00 Vendor: www.netcplus.com Discovered by: Reed Arvin Exploit Coded by: Kozan Credits to ATmaCA, Reed Arv...

Chroot Security Group Advisory 2005-07-25 -- ftplocate

Chroot Security Group Advisory 2005-07-25 Remote arbitrary code execution in FtpLocate 2.02 current Summary: FtpLocate is a ftp search engine supporting filename and description search. A remote attack can run arbitary commands with the web server's privileges by exploiting a unfiltered parameter...

Remote File Explorer <= 1.0 Denial of Service Exploit

No description provided by source. !/usr/local/bin/perl Remote File Explorer DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Target locked Sending bad procedure... OK + Server DoS'ed Tested on Windows2000 SP4 Info: infamous.2hell.com $ARGC=@ARGV; if $ARG...

Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit

Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and older Developer url: hostingcontroller.com Comment: Hostin...

Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit

Hosting Controller 0.6.1 HotFix 2.1 - Change Credit Limit Hi, I'm Soroush Dalili from GSG GrayHatz Security Group. Title: Hosting controller program have a security bug in "AccountActions.asp" that an authenticated user can change his/her credit and buy some services! Version: 6.1 HotFix 2.1 and...

idm405.txt

/ Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differnt from what was found in application called altnet download...

TCP Chat (TCPX) 1.0 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================= TCP Chat TCPX 1.0 Denial of Service Exploit ============================================= / TCP ChatTCPX DoS Exploit ---------------------------------------- Resolve host... OK + Connecting... OK Targ...

Internet Download Manager 4.0.5 - Input URL Stack Overflow

Internet Download Manager 4.0.5 - Input URL Stack Overflow / Title : Internet Download Manager = 4.05 universal remote overflow Exploit bug analyse and exploit code by : c0d3r "Kaveh Razavi" [email protected] my advisory : http://www.ihsteam.com/advisory/downloadmanageradv.txt this bug is differn...

Nokia Affix < 3.2.0 btftp Remote Client Exploit

Exploit for hardware platform in category remote exploits =============================================== Nokia Affix open 00:04:3e:65:a1:c8 Connected. ftp ls Z8????Tnb 6 u???u???3?????????^v?0^????5??24????????V6?V ????? ????????Xq?X6?Y0 ----------------------...

ashleyDoS.txt

Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...

RaXnet Cacti 0.5/0.6.x/0.8.x - 'Graph_Image.php' Remote Command Execution Variant

source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that leads to a failure in the application to properly sanitize user-supplied input...

ASPNuke 0.80 - 'comment_post.asp' SQL Injection

!/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit retrieve the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded by Alberto Trivero use LWP::Simple;...

ipdatalook.txt

/ IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com / [email protected] / include string.h...