Prozilla 1.3.6 - Remote Stack Overflow Exploit

No description provided by source. / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/suse wi...

/bin/login gives root to group utmp

There is a group-utmp-to-root privilege escalation vulnerability in /bin/login in Debian, and I expect in all other Linux distros. For details and exploit please see http://bugs.debian.org/505271 Currently am not aware of any group utmp issues that could be leveraged to get root. Cheers, Paul Sza...

Gaming Directory 1.0 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

SHOUTcast 1.9.4 - File Request 'Leaked' Format String

/ Shoutcast include include include include include include include include include include include define SHELLPORT 7000 define SHELLCOMMAND "unset HISTFILE; uname -a; id;" if 1 unsigned char shellcode = / bindshell 7000 Unknown /...

Linux news 9.10.00

Linus: Linux Kernel 2.4 задерживается. Опять... Пришло сообщение о том, что ядро Linux 2.4 задерживается как минимум еще на два месяца... Подробнее: http://slashdot.org/articles/00/10/06/2053240.shtml Snes9x 1.32 Вышла новая версия Super Nintendo Entertainment System SNES emulator-а - Snes9x 1.32...