Apple Mac OSX 10.4.6 (PPC) - 'launchd' Local Format String

!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the hell are you fool. This is just a...

IntelliTamper 2.07 - .map Local Arbitrary Code Execution (1)

IntelliTamper 2.07 - .map Local Arbitrary Code Execution 1 /////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...

IntelliTamper 2.07 - '.map' Local Arbitrary Code Execution (1)

/////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...

FreeBSD : sge -- local root exploit in bundled rsh executable (57a0242d-8c4e-11da-8ddf-000ae42e9b93)

Sun Microsystems reports : The SGE 6.0u71 release fixes a security bug which can allow malicious users to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...

Oracle <= 10g Release 2 (DBMS_EXPORT_EXTENSION) Local SQL Exploit

Exploit for multiple platform in category local exploits...

[Full-disclosure] [SECURITY] [DSA 1040-1] New gdm packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1040-1 [email protected] http://www.debian.org/security/ Martin Schulze April 24th, 2006 http://www.debian.org/security/faq -...

DEBIAN-CVE-2006-0745

X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...

Python <= 2.4.2 realpath() Local Stack Overflow Exploit

Exploit for linux platform in category local exploits ======================================================= Python vuln.py; python vuln.py' os.remove"vuln.py" os.chdirbase os.removedirsdir 0day.today 2018-01-05...

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow

SquirrelMail 3.1 - Change Passwd Plugin Local Buffer Overflow / Change passwd 3.1 SquirrelMail plugin Coded by rod hedor web-- http://lezr.com local exploit Multiple buffer overflows are present in the handling of command line arguements in chpasswd. The bug allows a hacker to exploit the process...

Xmame &lt;= 0.102 (-pb/-lang/-rec) Local Buffer Overflow Exploit

No description provided by source. / xmame-expl.c by sj [email protected] On 20th of Jan it came to my attention that Xmame suffered from several buffer overflow problems. Thinking this issue was resolved, I installed Xmame on my Ubuntu laptop, from the Ubuntu repositories which installed a vulnerable...

xfocus-SD-060101.txt

Title:xfocus-SD-060101AIX getCommand&getShell two vulnerabilities Affected version : aix5.3 ml03,Other versions not test, should also be affected. Vendor: http://www.ibm.com/ Where: Local XFOCUS http://www.xfocus.org had already discovered some vulnerabilities in getCommand&getShell. After apply...

Linux Kernel <= 2.6.11 (CPL 0) Local Root Exploit (k-rad3.c)

Exploit for linux platform in category local exploits ============================================================ Linux Kernel Modified 2005/9 by alert7 XFOCUS Security Team http://www.xfocus.org gcc -o k-rad3 k-rad3.c -static -O2 tested succeed : on default installed RHEL42.6.9-5.EL and...

CVE-2005-3903

CVE-2005-3903 documents a local privilege escalation in SCO Unixware 7.1.3 and 7.1.4 caused by a buffer overflow in the setuid binary uidadmin when processing a long -S (scheme) argument that specifies a large file. The vulnerability arises from a failure to bound the input length, enabling a loc...

OpenSSH AFS/Kerberos ticket/token passing

OpenSSH is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

XMail 1.21 (-t Command Line Option) Local Root Buffer Overflow Exploit

No description provided by source. / XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include stdio.h include stdlib.h include unistd.h include string.h include signal.h include sys/types.h include sys/wait.h include sys/select.h defi...

winrar-3.50-eng.txt

/ local exploit for winrar include include int main int argc, char argv long sysaddr = 0x77C18044; // winxp sp0 targets... long exitaddr = 0x77C27ADC; long cmdaddr = 0x77C01335; char buf3000; char cmd3000; if argc \n\n"; exit0; memsetbuf, 0x00, 3000; memsetcmd, 0x00, 3000; memsetbuf, 0x55, 516;...

poppassd-freebsd.sh.txt

!/bin/sh FreeBSD Qpopper poppassd latest version local r00t exploit by kcope tested on FreeBSD 5.4-RELEASE POPPASSDPATH=/usr/local/bin/poppassd HOOKLIB=libutil.so.4 echo "" echo "FreeBSD Qpopper poppassd latest version local r00t exploit by kcope" echo "" sleep 2 umask 0000 if -f /etc/libmap.conf...

CVE-2005-2663

CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...

VisualBoyAdvanced 1.7.x Local Shell Exploit (non suid) (updated)

Exploit for linux platform in category local exploits ================================================================ VisualBoyAdvanced 1.7.x Local Shell Exploit non suid updated ================================================================ / VisualBoyAdvanced 1.7.x BufferOver Flow exploit VB...

Microsoft Windows - CSRSS Privilege Escalation (MS05-018)

include include include pragma comment lib,"Advapi32.lib" typedef struct CONSOLESTATEINFO / 0x00 / DWORD cbSize; / 0x04 / COORD ScreenBufferSize; / 0x08 / COORD WindowSize; / 0x0c / POINT WindowPosition; / 0x14 / COORD FontSize; / 0x18 / DWORD FontFamily; / 0x1c / DWORD FontWeight; / 0x20 / WCHAR...