4395 matches found
Python <= 2.4.2 realpath() Local Stack Overflow Exploit
Exploit for linux platform in category local exploits ======================================================= Python vuln.py; python vuln.py' os.remove"vuln.py" os.chdirbase os.removedirsdir 0day.today 2018-01-05...
SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow
SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow / Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process...
Xmame <= 0.102 (-pb/-lang/-rec) Local Buffer Overflow Exploit
No description provided by source. / xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable...
xfocus-SD-060101.txt
Title:xfocus-SD-060101AIX getCommand&getShell two vulnerabilities Affected version : aix5.3 ml03,Other versions not test, should also be affected. Vendor: http://www.ibm.com/ Where: Local XFOCUS http://www.xfocus.org had already discovered some vulnerabilities in getCommand&getShell. After apply...
Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)
Exploit for linux platform in category local exploits ============================================================ Linux Kernel Modified 2005/9 by alert7 XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 tested succeed : on default installed RHEL42.6.9-5.EL and...
CVE-2005-3903
CVE-2005-3903 documents a local privilege escalation in SCO Unixware 7.1.3 and 7.1.4 caused by a buffer overflow in the setuid binary uidadmin when processing a long -S (scheme) argument that specifies a large file. The vulnerability arises from a failure to bound the input length, enabling a loc...
OpenSSH AFS/Kerberos ticket/token passing
OpenSSH is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...
XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit
No description provided by source. / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include stdio.h include stdlib.h include unistd.h include string.h include signal.h include sys/types.h include sys/wait.h include sys/select.h defi...
winrar-3.50-eng.txt
/ local exploit for winrar include include int main int argc, char argv long sysaddr = 0x77C18044; // winxp sp0 targets... long exitaddr = 0x77C27ADC; long cmdaddr = 0x77C01335; char buf3000; char cmd3000; if argc \n\n"; exit0; memsetbuf, 0x00, 3000; memsetcmd, 0x00, 3000; memsetbuf, 0x55, 516;...
poppassd-freebsd.sh.txt
!/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep 2 umask 0000 if -f /etc/libmap.conf...
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
VisualBoyAdvanced 1.7.x Local Shell Exploit (non suid) (updated)
Exploit for linux platform in category local exploits ================================================================ VisualBoyAdvanced 1.7.x Local Shell Exploit non suid updated ================================================================ / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VB...
Microsoft Windows - CSRSS Privilege Escalation (MS05-018)
include include include pragma comment lib,"Advapi32.lib" typedef struct CONSOLESTATEINFO / 0x00 / DWORD cbSize; / 0x04 / COORD ScreenBufferSize; / 0x08 / COORD WindowSize; / 0x0c / POINT WindowPosition; / 0x14 / COORD FontSize; / 0x18 / DWORD FontFamily; / 0x1c / DWORD FontWeight; / 0x20 / WCHAR...
CVE-2005-2655
CVE-2005-2655 affects maildrop’s lockmail component; prior to version 1.5.3, it does not drop group privileges before executing commands, enabling local privilege escalation via command-line arguments. Debian’s DSA-791-1 fixes this by updating maildrop to 1.5.3-1.1sarge1 (stable) and 1.5.3-2 (sid...
IMRadio-4.0-expl.txt
/================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
Mercora IMRadio 4.0.0.0 - Local Password Disclosure
Mercora IMRadio 4.0.0.0 - Local Password Disclosure /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] =====...
Mercora IMRadio <= 4.0.0.0 Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ============================================================ Mercora IMRadio = 4.0.0.0 Local Password Disclosure Exploit ============================================================...
Mercora IMRadio <= 4.0.0.0 Local Password Disclosure Exploit
No description provided by source. /================================================================ Mercora IMRadio 4.0.0.0 password disclosure local exploit by Kozan Discovered & Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] ===== Application...
phptb20.txt
Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: aLMaSTeR HaCKeR almasterathotmaildotcom Vulnerable: Powered by PHPTB Topic Boards 2.0 ITHINK WORK IN ALL VERSION info PHPTB BOARD IS VERY NICE BOARD U CAN FIND SOURCE OF FORUM IN http://www.phptb.com discussion SQL ...
isec-0023-coredump.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, since it became clear from the discussion in January about the uselib vulnerability, that the Linux community prefers full, non-embargoed disclosure of kernel bugs, I release full details right now. However to follows at least some of the...