Fully Functional ASP Forum 1.0 - Database Disclosure

Fully Functional ASP Forum 1.0 - Database Disclosure ======================================================================================== | Title : FULLY FUNCTIONAL ASP FORUM - MtMWebForum 1.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk...

[Full-disclosure] Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 28 Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from...

w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 14 w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. Multiple path disclosur...

linux/x86 TCP Proxy Shellcode 236 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 TCP Proxy Shellcode 236 bytes ======================================= // proxylib.c - is located at http://www.milw0rm.com/id.php?id=1476 /str0ke / hey all.. this is my attempt at a very small...

Windows Access Control Demystified

Hello everybody, We have constructed a logical model of Windows XP access control, in a declarative but executable Datalog format. We have built a scanner that reads access-control configuration information from the Windows registry, file system, and service control manager database, and feeds ra...

linux/x86 write0,"Hello core!\n",12; with optional 7 byte exit 36 bytes

linux/x86 write0,"Hello core!",12; w/optional 7 byte exit 36 bytes. Shellcode exploit for linx86 platform / writehello-core.c by Charles Stevenson I made this as a chunk you can paste in to make modular remote exploits. I use it to see if my dup2loop worked. If you don't get "Hello core!\n" back...

HP-UX PHSS_28558 : HP-UX Running Sendmail and Using Bastille Sendmail.cf, Remote Unauthorized Disclosure of Information (HPSBUX00245 SSRT3450 rev.2)

s700800 11.X Functional fix in HP-UX Bastille : HP has discovered a functional defect in Bastille B.02.00.00 which caused the sendmail privacy options not to be configured correctly if that option were chosen. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

Serv-U FTP Server Buffer Overflow

This module exploits a stack buffer overflow in the site chmod command in versions of Serv-U FTP Server prior to 4.2. You must have valid credentials to trigger this vulnerability. Exploitation also leaves the service in a non-functional state. Module Options msf use exploit/windows/ftp/servu/chm...