4414 matches found
MS04-044: Vulnerabilities in Windows Kernel and LSASS (885835)
The remote host is running version of the NT kernel and LSASS which could allow a local user to gain elevated privileged. An attacker who has the ability to execute arbitrary commands on the remote host could exploit these flaws to gain SYSTEM privileges. C Tenable Network Security, Inc...
Linux Kernel <= 2.4.28 and <= 2.6.9 scm_send local DoS Exploit
Exploit for linux platform in category dos / poc ============================================================== Linux Kernel include include include static char buf1024; void fatal const char msg printf "\n"; if !errno fprintf stderr, "FATAL: %s\n", msg; else perror msg; printf "\n"; fflush stdou...
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation
Solaris 7/8/9 CDE libDtHelp - Buffer Overflow Non-Exec Stack Privilege Escalation. CVE-2003-0834. Local exploit for Solaris platform / $Id: raptorlibdthelp2.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp2.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi...
CVE-2004-1116
CVE-2004-1116 affects Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier, where init scripts run user-owned binaries with root privileges. This enables local privilege escalation if a user can modify the programs, as described in NVD, CVE listings, and Gentoo GLSA 200411-26. The OpenVA...
Aspell (word-list-compress) - Command Line Stack Overflow
Aspell word-list-compress - Command Line Stack Overflow / Fuck private exploits . Fuck iranian hacking and security !! teams who are just some fucking kiddies. Fuck all "Security money makers" word-list-compress local exploit - SECU Coded by : c0d3r / root . razavi1366atyahoodotcom...
Aspell (word-list-compress) Command Line Stack Overflow
Exploit for linux platform in category local exploits ======================================================= Aspell word-list-compress Command Line Stack Overflow ======================================================= / Fuck private exploits . Fuck iranian hacking and security !! teams who are...
Aspell (word-list-compress) - Command Line Stack Overflow
/ Fuck private exploits . Fuck iranian hacking and security !! teams who are just some fucking kiddies. Fuck all "Security money makers" word-list-compress local exploit - SECU Coded by : c0d3r / root . razavi1366atyahoodotcom word-list-compress is not setuid . so good for backdooring . gratz fly...
Aspell (word-list-compress) Command Line Stack Overflow
No description provided by source. / Fuck private exploits . Fuck iranian hacking and security !! teams who are just some fucking kiddies. Fuck all "Security money makers" word-list-compress local exploit - SECU Coded by : c0d3r / root . razavi1366atyahoodotcom word-list-compress is not setuid . ...
CoffeeCup FTP Clients (Direct 6.2.0.62) (Free 3.0.0.10) - Remote Buffer Overflow
CoffeeCup FTP Clients Direct 6.2.0.62 Free 3.0.0.10 - Remote Buffer Overflow / CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10...
CoffeeCup FTP Clients (Direct <= 6.2.0.62) (Free <= 3.0.0.10) BoF Expl
Exploit for unknown platform in category remote exploits ========================================================================= CoffeeCup FTP Clients Direct coffeecupbof direct -l exploit for CoffeeCup Direct FTP executed locally C:\ coffeecupbof free -r 10.0.0.1 exploit for CoffeeCup Free FTP...
wodFtpDLX Client - ActiveX Control Buffer Overflow Crash
/ WodFtpDLX Client ActiveX Control Buffer Overflow Crash Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on WodFtpDLX.ocx versions 2.3.2.90 - 2.3.0.0 - 2.2.0.1 on a Windows XP Professional sp2 operating system. This exploit creates a fake F...
CVE-2004-0923
CVE-2004-0923 affects CUPS 1.1.20 and earlier, where authentication information for a device URI could be recorded in the error_log. This enables a local user to obtain usernames and passwords by reading the log. The issue is a log leakage caused by how CUPS handles device URIs with embedded cred...
socat <= 1.4.0.2 Local Format String Exploit (not setuid)
Exploit for linux platform in category local exploits ========================================================= socat No System Group - http://www.nosystem.com.ar email protected:$ make socatexp email protected:$ ./socatexp socat shellcode address = 0xbfffffb9 .dtors address = 0x080740c4 2004/10/...
Socat 1.4.0.2 - Not SETUID Local Format String
Socat 1.4.0.2 - Not SETUID Local Format String / socatexp.c Socat Format String Vulnerability socat No System Group - http://www.nosystem.com.ar coki@servidor:$ make socatexp coki@servidor:$ ./socatexp socat shellcode address = 0xbfffffb9 .dtors address = 0x080740c4 2004/10/19 09:49:46 socat26197...
Apache <= 1.3.31 mod_include Local Buffer Overflow Exploit
Exploit for linux platform in category local exploits ========================================================== Apache = 1.3.31 modinclude Local Buffer Overflow Exploit ========================================================== / local exploit for modinclude of apache 1.3.x written by xCrZx...
BSD bmon <= 1.2.1_2 Local Exploit
Exploit for bsd platform in category local exploits ================================= BSD bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat ./netsta...
BSD bmon <= 1.2.1_2 Local Exploit
No description provided by source. !/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon 1.2.12 installed. when bmon is executed with the -n parameter it popens netcat but fail to provide an absoluth path. some bsds are configured with acls that...
BSD bmon 1.2.1_2 - Local acls Bypass
BSD bmon 1.2.12 - Local acls Bypass !/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell wit...
BSD bmon 1.2.1_2 - Local acls Bypass
!/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat...
IIS NNTP Service XPAT Command Vulnerabilities
Advisory ID Internal CORE-2004-0802 Core Security Advisory https://www.coresecurity.com Date Published: 2004-10-12 Last Update: 2004-10-12 Advisory ID: CORE-2004-0802 Bugtraq ID: Not assigned CVE Name: CAN-2004-0574 Title: IIS NNTP Service XPAT Command Vulnerabilities Class: Boundary error...