vsftpd 2.3.4 - Backdoor Command Execution (Metasploit)

$Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

VSFTPD v2.3.4 Backdoor Command Execution

Exploit for unix platform in category remote exploits $Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Oracle Secure Backup Administration preauth variable command injection

Added: 12/06/2010 CVE: CVE-2010-0906 BID: 41597 OSVDB: 67128 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A vulnerability in the Administration server allows remote, authenticated attackers to execute arbitrary commands which are...

VulnCheck KEV: CVE-2010-3888

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

VulnCheck KEV: CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568...

Barcodewiz 3.29 Barcode Active-X Control Heap Spray

// Payload is win32exec - calc.exe shellcode = unescape'%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

Joomla Component com_expautos SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla Component comexpautos SQL Injection Vulnerability ======================================================== Author : Expl0it Email & msn : exploitatguiadohackerdotcomdotbr Date : 3...

UPlusFTP Server 1.7.1.01 Buffer Overflow

!/usr/bin/python import socket,sys,base64 print """ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ UPlusFTP Server v1.7.1.01 HTTP Remote BoF Exploit PoC Discovered by : Karn Ganeshen Author : Karn Ganeshe...

Joomla Component com_booking SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla Component combooking SQL Injection Vulnerability ======================================================== title:Joomla Component combooking SQL Injection Vulnerability Script :...

Easy FTP Server 1.7.0.11 LIST Buffer Overflow

EDB-ID: 14400 Date : July 5, 2010 Discovered by : Karn Ganeshen Version : 1.7.0.11 Tested on : Windows XP SP3 Version 2002 MFR & VAS TEAM : just testing howto convert exploits to metasploit modules. require 'msf/core' class Metasploit3 'EasyFTP Server %q This module exploits a stack-based buffer...

IBM AIX 5l FTPd Remote DES Hash Exploit

Exploit for aix platform in category remote exploits ======================================= IBM AIX 5l FTPd Remote DES Hash Exploit ======================================= / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on...

ZeeAdBox 2x SQL Injection

======================================================= ZeeAdbox v2x SQL Injection Vulnerability ======================================================= Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.com Author : ..:...

Joomla Component com_estateagent Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Component comestateagent Persistent XSS Vulnerability =============================================================...

ZeeAdbox 2.x - SQL Injection

ZeeAdbox 2.x - SQL Injection ======================================================= ZeeAdbox v2x SQL Injection Vulnerability ======================================================= Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty Date : july 23,2010 Critical Level :VERY HIGH vendor URL :??...

Joomla com_jomestate Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= Joomla comjomestate Persistent XSS Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /...

ZeeMatri 3.x - Arbitrary File Upload

ZeeMatri 3.x - Arbitrary File Upload 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.co...

Site! Professional Edition 2.1 CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Site! Professional Edition 2.1 CMS SQL Injection Vulnerability ============================================================== Author : Darkzzzz , poni Email : email protected Date ...

phpBazar Admin - Information Disclosure

===================================== phpBazar admin information discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Published :: 22 july 2010 Vendor ::...

Mozilla Releases Firefox 3.6.7

The Mozilla Foundation has released Firefox 3.6.7 and Firefox 3.5.11 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, obtain sensitive information, bypass security restrictions, or conduct cross-site scripting attacks. Some of these...

AIX5l FTP Server Remote Root Hash Disclosure

AIXCOREDUMP.PL --- --== AIX5l w/ FTP-SERVER REMOTE ROOT HASH DISCLOSURE EXPLOIT =-- CREATES COREDUMP INCLUDING THE ROOT USER HASH FROM /etc/security/passwd THE RESULT FILE IS SCRAMBLED - SEEK FOR DES LOOKING CRYPTO KEYS SUCCESSFULLY TESTED ON IBM AIX 5.1 DISCOVERED & EXPLOITED BY KINGCOPE JULY 20...