linux/x86 - execve("/bin/sh") shellcode 25 bytes

Exploit for linux/x86 platform in category shellcode ================================================ linux/x86 - execve"/bin/sh" shellcode 25 bytes ================================================ include include / by Magnefikko 14.04.2010 email protected promhyl.oz.pl Subgroup: PRekambr Name: 2...

UoW IMAPd Server - LSUB Buffer Overflow (Metasploit)

$Id: imapuwlsub.rb 8932 2010-03-26 19:00:23Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

On the php local includes-vulnerability warning-the black bar safety net

Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...

linux/x86 append "/etc/passwd" & exit() 107 bytes

No description provided by source. view source print? / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name "toor" Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38...

linux/x86 append "/etc/passwd" & exit() 107 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 append "/etc/passwd" & exit 107 bytes ================================================= / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby...

linux/x86 unlink/etc/passwd & exit 35 bytes

linux/x86 unlink/etc/passwd & exit 35 bytes. Shellcode exploit for linux platform Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman /...

Mozilla Firefox临时文件下载可预测路径名漏洞

CVE ID: CVE-2009-3274 Firefox是一款流行的开源WEB浏览器。 运行在Linux平台上的Firefox对从“下载”窗口所选择的文件使用了可预测的/tmp路径名，本地用户可以在下载之前在/tmp位置放置文件来替换下载文件，之后用户可能受骗打开已被替换了的文件。 Mozilla Firefox 3.6 a1 Mozilla Firefox 3.5.2 厂商补丁： Mozilla ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mozilla.org/...

linux/x86 setreuid(geteuid(),geteuid()),execve("/bin/sh",0,0) 34 bytes

Exploit for linux/x86 platform in category shellcode ====================================================================== linux/x86 setreuidgeteuid,geteuid,execve"/bin/sh",0,0 34 bytes ====================================================================== / linux/x86...

Core Security Technologies Advisory 2009.0114

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ HTTP Response Splitting vulnerability in Sun Delegated Administrator 1. Advisory Information Title: HTTP Response Splitting vulnerability in Sun Delegated Administrat...

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation

Sun xVM VirtualBox 2.02.1 - Local Privilege Escalation source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions...

Sun xVM VirtualBox 2.0/2.1 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/34080/info Sun xVM VirtualBox is prone to a local privilege-escalation vulnerability. An attacker can exploit this vulnerability to run arbitrary code with superuser privileges. The following versions for the Linux platform are vulnerable: Sun xVM...

Race condition

Niels Provos Systrace 1.6f and earlier on the x8664 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes...

CVE-2009-0343

Niels Provos Systrace 1.6f and earlier on the x8664 Linux platform allows local users to bypass intended access restrictions by making a 32-bit syscall with a syscall number that corresponds to a policy-compliant 64-bit syscall, related to race conditions that occur in monitoring 64-bit processes...

Linux/x86-64 - Bind TCP (Random TCP Port) Shell + Null-Free Shellcode (57 bytes)

Linux/x86-64 - Bind TCP Random TCP Port Shell + Null-Free Shellcode 57 bytes. Shellcode exploit for Linuxx86-64 platform / Shell Bind TCP Random Port Shellcode - C Language - Linux/x8664 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free...

CVE-2008-5177

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Stack overflow

Stack-based buffer overflow in the DtbClsLogin function in Yosemite Backup 8.7 allows remote attackers to 1 execute arbitrary code on a Linux platform, related to libytlindtb.so; or 2 cause a denial of service application crash and possibly execute arbitrary code on a Windows platform, related to...

Linux Command Shell, Find Port Inline

Spawn a shell on an established connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 171 include Msf::Payload::Single include Msf::Payload::Linux::Ppc::Prepends include...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...

eCryptfs工具ecryptfs-setup-private口令泄露漏洞

BUGTRAQ ID: 31906 eCryptfs是Linux平台下的企业级加密文件系统。 eCryptfs工具的ecryptfs-setup-private程序在通过命令行调用ecryptfs-wrap-passphrase和ecryptfs-add-passphrase程序时，命令行参数包含有用户的已有登录口令和新创建的口令。本地攻击者可以在进程表中查看到这些口令。 eCryptfs eCryptfs -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://ecryptfs.sourceforge.net/...

Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================== Intel Centrino ipw2200BG Wireless Driver Remote BOF Exploit meta ================================================================== This file is part of the Metasploit...