2130 matches found
Linux Kernel 2.2.252.4.242.6.2 - mremap() Local Privilege Escalation
Linux Kernel 2.2.252.4.242.6.2 - mremap Local Privilege Escalation / mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all include include include include include include include...
RhinoSoft Serv-U FTPd Server 345 - MDTM Time Argument Buffer Overflow (1)
RhinoSoft Serv-U FTPd Server 345 - MDTM Time Argument Buffer Overflow 1 source: https://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command. The problem...
RhinoSoft Serv-U FTPd Server 345 - MDTM Time Argument Buffer Overflow (2)
RhinoSoft Serv-U FTPd Server 345 - MDTM Time Argument Buffer Overflow 2 // source: https://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command. The...
Linux Kernel 2.2.252.4.242.6.2 - mremap() Validator
Linux Kernel 2.2.252.4.242.6.2 - mremap Validator / Proof-of-concept exploit code for domremap 2 EDB Note: This is NOT to be confused with CVE-2003-0985 // https://www.exploit-db.com/exploits/141/, which would be "domremap 1". EDB Note: This will just "test" the vulnerability. A exploit version c...
Linux Kernel "mremap()"#2 Local Proof-of-concept
Exploit for linux platform in category local exploits ================================================ Linux Kernel "mremap"2 Local Proof-of-concept ================================================ / Proof-of-concept exploit code for domremap 2 Copyright C 2004 Christophe Devine This program is...
Linux Kernel ""mremap()""#2 Local Proof-of-concept
No description provided by source. / Proof-of-concept exploit code for domremap 2 Copyright C 2004 Christophe Devine This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either versi...
Linux Kernel 2.2.25/2.4.24/2.6.2 - 'mremap()' Validator
/ Proof-of-concept exploit code for domremap 2 EDB Note: This is NOT to be confused with CVE-2003-0985 // https://www.exploit-db.com/exploits/141/, which would be "domremap 1". EDB Note: This will just "test" the vulnerability. A exploit version can be found here...
RobotFTP Server 1.02.0 - Username Buffer Overflow (1)
RobotFTP Server 1.02.0 - Username Buffer Overflow 1 // source: https://www.securityfocus.com/bid/9672/info A vulnerability has been reported for RobotFTP Server. The problem likely occurs due to insufficient bounds checking when processing 'USER' command arguments of excessive length. / this is...
RobotFTP Server 1.0/2.0 - 'Username' Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/9672/info A vulnerability has been reported for RobotFTP Server. The problem likely occurs due to insufficient bounds checking when processing 'USER' command arguments of excessive length. / this is example code for the vulnerability. It uses the windo...
[Full-Disclosure] TrackMania Demo Denial of Service
TrackMania Demo Denial of Service The original document can be found at http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml .oO Overview Oo. TrackMania Demo Denial of Service Discovered on 2003, November, 30th Vendor: TrackMania Official website http://www.trackmania.com TrackMania i...
Red-M Red-Alert 3.1 - Remote Denial of Service
Red-M Red-Alert 3.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/9618/info Problems in various abilities have been identified in the Red-M Red-Alert network monitors. Because of this issues, an attacker may be able to crash a vulnerable device and eliminate logs, gain...
Shaun2k2 Palmhttpd Server 3.0 - Remote Denial of Service
// source: https://www.securityfocus.com/bid/9608/info It has been reported that Palmhttpd server may be prone to remote denial of service vulnerability, when an attacker attempts to establish multiple connections with the software. This issue occurs because PalmOS can only handle one client...
Possible Cross Site Scripting in Discuz! Board
Advisory Name:Possible Cross Site Scripting in Discuz! Board Release Date: Feb 5,2004 Application: Discuz! Board Version Affected: 2.x , 3.x Platform: PHP Severity: Low Discover: Cheng Peng Suapplesoupatmsn.com Vendor URL: http://www.discuz.com/ Proof Of Concept: A thread including:...
RhinoSoft Serv-U FTPd Server 4.x - site chmod Remote Buffer Overflow
RhinoSoft Serv-U FTPd Server 4.x - site chmod Remote Buffer Overflow include include include include define exploitlength 511 define NOP 'A' define SEHhandleroffset 400 char SEHhandler = "\x41\x41\xEB\x04"; // 3 jmp over next four bytes char retaddress4004 = "\xab\x1c\x5f\x01"; // 1...
Serv-U 4.x "site chmod" Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ====================================================== Serv-U 4.x "site chmod" Remote Buffer Overflow Exploit ====================================================== include include include include define exploitlength 511 define NOP 'A'...
RhinoSoft Serv-U FTPd Server 4.x - 'site chmod' Remote Buffer Overflow
include include include include define exploitlength 511 define NOP 'A' define SEHhandleroffset 400 char SEHhandler = "\x41\x41\xEB\x04"; // 3 jmp over next four bytes char retaddress4004 = "\xab\x1c\x5f\x01"; // 1 libeay32.015f1cab char retaddress4100 = "\xcb\x1c\x41\x01"; // 1 ssleay32.01411ccb...
mIRC 6.1 - DCC Get Dialog Denial of Service
mIRC 6.1 - DCC Get Dialog Denial of Service source: https://www.securityfocus.com/bid/9492/info A vulnerability has been reported to exist in mIRC that may allow a remote attacker to crash a vulnerable mIRC client. It has been reported that the issue will present itself only in certain...
Need for Speed 2 Remote Client Buffer Overflow Exploit
No description provided by source. / Need for Speed 2 Remote Client Buffer Overflow Exploit - 23.01.2004 by Luigi Auriemma UNIX & WIN VERSION / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include "winerr.h" define close closesocket else include unistd.h include...
Linux Kernel 2.4.23/2.6.0 - 'do_mremap()' Bound Checking Privilege Escalation
/ Linux kernel mremap bound checking bug exploit. Bug found by Paul Starzetz Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING, PRINTING, DISTRIBUTION, MODIFICATION WITHOUT PERMISSIO...
Linux Kernel 2.4.232.6.0 - do_mremap() Bound Checking Privilege Escalation
Linux Kernel 2.4.232.6.0 - domremap Bound Checking Privilege Escalation / Linux kernel mremap bound checking bug exploit. Bug found by Paul Starzetz Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY...