TBDev torrent tacker script backdoor - FAKE

On connection with hard coded key with hash "0bffd3d87e7267c7fe686e20acbee7ab" all database tables are dropped...

MIT krb5: makes sudo authentication issue MUCH worse.

On Wed, Jun 06, 2007 at 11:19:01PM -0400, Thor Lancelot Simon wrote: On Wed, Jun 06, 2007 at 09:57:25PM -0400, Thor Lancelot Simon wrote: But woe betide any system administrator who accidentally puts a Kerberos-enabled sudo on a host that's configured as a Kerberos client only! Actually, if you...

Then talk about the Exchange environment session hijacking(For windows2000)-vulnerability warning-the black bar safety net

The first step is to open the IP Routing function, modify the registry HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\IPEnableRouter to 0x1, and restart the system. The second step is ARP spoofing, the specific principle I will not say. The third step is to start the hijackin...

Aircrack-NG 0.7 - 'Specially Crafted 802.11 Packets' Remote Buffer Overflow

/ airodump-exp.c - aircrack/airodump-ng 0.7 remote exploit Proof of concept exploit for a stack and heap based overflow in airodump-ng. The vulnerability can be exploited by transmitting some specially crafted 802.11 packets to execute arbitrary code on any machines within range that are sniffing...

OpenAFS filesystem privilege esccalation

Attacke can make fake suid binary on network disk by using protocol weakness...

MetaForum 0.513 Beta - Arbitrary File Upload

:\r\n"; $phpcode = trimfgetsSTDIN; echo "\r\n+ Connection... "; $sock = @fsockopen$argv1, 80, $eno, $estr, 30; if !$sock die"Failed\r...

MOAB-28-01-2007.rb.txt

!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. 1 Stop crashdump from writing to /Library/Logs via chmod 000 /Library/Logs/CrashReporter 2 Make symlink to /Library/Logs/CrashReporter/knownprog.crash.log 3 Create a program with a modified LINKEDIT segment that...

Mac OS X 10.4.8 (8L2127) crashdump Privilege Escalation Exploit

Exploit for macOS platform in category local exploits =============================================================== Mac OS X 10.4.8 8L2127 crashdump Privilege Escalation Exploit =============================================================== !/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lanc...

Apple Mac OSX 10.4.8 (8L2127) - crashdump Local Privilege Escalation

Apple Mac OSX 10.4.8 8L2127 - crashdump Local Privilege Escalation !/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. 1 Stop crashdump from writing to /Library/Logs via chmod 000 /Library/Logs/CrashReporter 2 Make symlink to...

MOAB-04-01-2007.rb.txt

!/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 + "%x.%n.%n.%n.%n.%n\r\n" + "\r\n" + "In Gruber We Trust\r\n" +...

iLife iPhoto Photocast - XML Title Remote Format String (PoC)

iLife iPhoto Photocast - XML Title Remote Format String PoC !/usr/bin/ruby c 2006 LMH bug by Kevin Finisterre proof of concept for MOAB-04-01-2007 see http://projects.info-pull.com/moab/MOAB-04-01-2007.rb require 'socket' IPHOTOFEED = "\r\n" + "\r\n" + "\r\n" + "" + "A" 256 +...

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting

Apple QuickTime 7.1.3 - HREFTrack Cross-Zone Scripting !/usr/bin/ruby c 2006 LMH Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for running the fake FTP server required. HTTP server port can ...

Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit

Exploit for macOS platform in category remote exploits ================================================================= Apple Quicktime Original scripting and POC by Aviv Raff http://aviv.raffon.net. Description: Exploit for MOAB-03-01-2007. If argument 'serve' is passed, it uses port 21 for...

DEBIAN-CVE-2006-6609

Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...

CVE-2006-6609

Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...

CVE-2006-6609

Nexuiz before 2.2.1 allows remote attackers to cause a denial of service resource exhaustion or crash via unspecified vectors related to "fake players." NOTE: some of these details are obtained from third party information...

CVE-2006-6609

Nexuiz before 2.2.1 is affected by a remote DoS vulnerability related to “fake players.” Multiple sources (NVD, OSV, Gentoo GLSA, GLSA plugin) describe that remote attackers can exhaust resources or crash the server through unspecified vectors. The Gentoo GLSA-200702-09 and the Gentoo advisory re...

BlackICE DLL伪造运行时链接库漏洞

BlackICE PC Protection是一款强大的数据信息过滤防火墙系统。 BlackICE对自身组件的保护上存在漏洞，本地攻击者可能利用此漏洞通过BlackICE完全控制系统。 BlackICE没有保护一些自己的进程，也没有防范其他进程对其安装目录中pamversion.dll文件可能执行的操作，允许用伪造的函数库替换这个DLL。在启动系统后初始化BlackICE期间主BlackICE服务blackd.exe会动态的将这个库加载到自己的进程，因此就可能将伪造的库注入到BlackICE服务，获得对受保护系统的完全控制。 ISS BlackICE PC Protection...

SIP Invite Spoof

This module will create a fake SIP invite request making the targeted device ring and display fake caller id information. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Invite Spoof',...

Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version

No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...