CVE-2010-5301

CVE-2010-5301 一个带有任意DLL注入的SEH溢出的概念验证 描述 Kolibrì HTTP Server 2.0 受 基于栈的缓冲区溢出 影响。在发现时，该漏洞仅仅通过用 JMP ESP 指令覆盖指令指针来利用，其中 ESP 指向放置在栈上的 shellcode。随后发现，如果发送更大的有效载荷，SEH 链可以被覆盖。然而，该应用程序没有有效的 POP - POP - RET 指令来使 SE 处理程序指向下一个 SEH 记录。这是因为所有相关的内存地址都以 null 字节开头。 利用方法 此利用方法提出通过 DLL 注入实现 SEH 溢出的代码执行。将任意 DLL 注入...

CVE-2025-2245

A server-side request forgery SSRF vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte %00...

libsoup security update

2.62.2-2.0.1 - Fixed CVE-2024-52530 for smuggling nullbytes in header names Orabug: 37289659...

Lotus Core CMS 1.0.1 Local File Inclusion

Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion Google Dork: N/A Date: 2020-01-31 Exploit Author: Daniel Monzón stark0de Vendor Homepage: http://lotuscore.sourceforge.net/ Software Link: https://sourceforge.net/projects/lotuscore/files/latest/download Version: 1.0.1 Tested on: Windows ...

Linux/x86 TCP Reverse Shell 127.0.0.1 Nullbyte Free Shellcode

/ ; name : Exploit Title: Linux/x86 - TCP reverse shell 127.0.0.1 nullbyte free ; date : 04th sept, 2019 ; author : Sandro "guly" Zaccarini ; twitter : @theguly ; blog : https://gulyslae.github.io/ ; SLAE32 : SLAE-1037 ; purpose : the program will create a new connection to 127.0.0.1:4444 and...

nginx 0.6.x - Arbitrary Code Execution NullByte Injection

No description provided by source. Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 = 0.7.65,...

LiteSpeed Web Server <= 3.2.3 - Remote Source Code Disclosure Vuln

No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos...

nginx 0.6.x Arbitrary Code Execution NullByte Injection Vulnerability

Exploit for multiple platform in category web applications Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version:...

nginx 0.6.x Arbitrary Code Execution NullByte Injection

No description provided by source. Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 = 0.7.65,...

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version:...

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection

Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 //file.ext%00.php or http:////file.ext/x00.p...

Apple iPhone Safari JS Crash Exploit

Apple iPhone 3 Safari JavaScript - dot / '.' Remote Crash . = '$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Microsoft Windows - IcmpSendEcho2Ex Interrupting Denial of Service

/ Microsoft Windows DoS IcmpSendEcho2Ex interrupting Author: l3D Sites: http://nullbyte.org.il, http://forums.hacking.org.il IRC: irc://irc.nix.co.il/security Email: [email protected] Tested on Windows 7 Microsoft Windows operating system is prone to a local DoS by interrupting the function...

vBulletin 3.8.* - 4.* DownloadsII poison nullbyte

Exploit for php platform in category web applications ================================================= vBulletin 3.8. - 4. DownloadsII poison nullbyte ================================================= Exploit Title: VBulletin 4. DownloadsII poison nullbyte Date: 2010-04-12 Author: Un-Dead Team:...

DSEmu 0.4.10 - '.nds' Local Crash

!/usr/bin/env python DSEmu 0.4.10 .nds local crash Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] blah=open'crash.nds', 'w' blah.write'w00t'12 blah.close...

DSEmu 0.4.10 - .nds Local Crash

DSEmu 0.4.10 - .nds Local Crash !/usr/bin/env python DSEmu 0.4.10 .nds local crash Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] blah=open'crash.nds', 'w' blah.write'w00t'12 blah.close...

About remote file inclusion RFI analysis-vulnerability warning-the black bar safety net

Remote file includes in you include a remote file.. usually contains the file to be used for malicious purposes The back door What is the back door And your house has the front door... that should generally be welcome Backdoor unpopular, because people usually used to do bad things. Computer...

nicLOR Puglia Landscape (id) Local File Inclusion Vulnerability

No description provided by source. / --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape...

nicLOR Puglia Landscape - Local File Inclusion

/ --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape --------------------------------------------------- Local...

nicLOR Puglia Landscape - Local File Inclusion

nicLOR Puglia Landscape - Local File Inclusion / --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape...