2130 matches found
Macromedia ColdFusion MX 6.0 - Remote Development Service File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8109/info A vulnerability has been reported for the RDS service that may allow an attacker to obtain unauthorized access to a data residing on a ColdFusion MX server. The vulnerability is due to the way that authenticatio...
Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerability
No description provided by source. Exploit Title: Zyxel P-660HW-T1 v3 Wireless Router - CSRF Vulnerabilities Date: 05/22/2014 Author: Mustafa ALTINKAYNAK Vendor Homepage:http://www.zyxel.com/tr/tr/productsservices/p660hwseries.shtml?t=p Category: Hardware/Wireless Router Tested on: Zyxel P-660HW-...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
Windows 95/98 UNC Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/779/info There is a overflowable buffer in the networking code for Windows 95 and 98 all versions. The buffer is in the part of the code that handles filenames. By specifying an exceptionally long filename, an attacker ca...
Pre Web Host - SQL Injection Vulnerability
No description provided by source. EDB-ID: 1310 CVE: OSVDB-ID: Author: Mr.Benladen Published: 2010-06-07 Verified: No Download: Exploit Code Download: N/A InformatioN Title : Pre Web Host sql inj3ction Vulnerability Author : Mr.Benladen Homepage : http://www.joomlaservice.info Or...
netbsd/x86 setreuid(0, 0); execve("/bin//sh", ..., NULL); 29 bytes
No description provided by source. / minervini at neuralnoise dot com c 2005 NetBSD/i386 2.0, setreuid0, 0; execve/bin//sh, ..., NULL; note: unsafe shellcode, but 29 bytes long; doesn't work if eax & 0x40000000 != 0; / include sys/types.h include stdio.h include string.h char scode = \x99 // cltd...
CREAR ALMail32 1.10 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/574/info The ALMail32 POP3 client conatins unchecked buffers in the header parsing code. An abnormally long FROM: or TO: field in the header of an incoming email will overwrite the buffer and allow arbitrary code to be...
HP Data Protector Media Operations NULL Pointer Dereference Remote DoS
No description provided by source. !/usr/bin/python import socket,struct,sys,os SIGN=0x04030201 cmd=0x01000000 def main: if lensys.argv!=2: print\nx Usage: python +sys.argv0+ ipserver \n sys.exit0 else: host=sys.argv1,19813 default port TCP/19813 if sys.platform==win32: os.systemcls else:...
phpBB 1.0.0 & 2.0.10 - admin_cash.php Remote Exploit
No description provided by source. / exploit for phpBB 1.0.0 - 2.0.10 edit the b4b0.php file with the correct url to your backdoor and the correct filename for your backdoor upload it to a webserver. gcc -o b4b0-phpbb b4b0-phpbb.c ./b4b0-phpbb urltosystem phpbbdir urltob4b0.php telnet...
PoPToP PPTP <= 1.1.4-b3 Remote Root Exploit (poptop-sane.c)
No description provided by source. / Fixed Exploit against PoPToP in Linux poptop-sane.c ./r4nc0rwh0r3 of blightninjas [email protected] blightninjas: bringing pain, suffering, and humiliation to the security world Expect more great release like helloworld-annotated.c and cd explained...
Mandrake 7.0/7.1,RedHat Kon2 0.3.9 fld Input File Overflow
No description provided by source. source: http://www.securityfocus.com/bid/1371/info KON Kanji On Console is a package for displaying Kanji text under Linux and comes with two suid binaries which are vulnerable to buffer overflows. fld, one of the vulnerable programs, accepts options input from ...
ESTsoft ALYac Anti-Virus 1.5 <= 5.0.1.2 - Privilege Escalation Vulnerability
No description provided by source. ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called AYDrvNTALYAC , and handles the...
Virtual DJ Trial 6.1.2 SEH Buffer Overflow Crash Proof of Concept
No description provided by source. Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC vulnerble application link http://www.virtualdj.com/download/trial.html tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog -...
UCenter Home 2.0 - SQL Injection Vulnerability
No description provided by source. --==UCenter Home 2.0 -0day Remote SQL Injection Vulnerability==-- / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home...
DameWare Mini Remote Control Server 3.7x Pre-Authentication Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts...
News Update 1.1 Change Admin Password
No description provided by source. / newsexp.c - description ------------------- begin : Sat Oct 21 2000 copyright : C 2000 by Morpheusbd email : [email protected] advisory : www.brightdarkness.de Exploit code for the News Update 1.1 by Morpheusbd For more information see my advisory which shoul...
Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability
No description provided by source. //////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp Win32k.sys Local Kernel DoS Vulnerability // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable: Windows xp sp3full...
e107 0.7.x 'e107_admin/banner.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
MiniWeb 0.8.19 Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34563/info MiniWeb is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a...
Linux Kernel 2.6.x - IPv6_SockGlue.c NULL Pointer Dereference Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23142/info The Linux kernel is prone to a NULL-pointer dereference vulnerability. A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. The attacker may also be ab...