CVE-2025-2245

A server-side request forgery SSRF vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. The HTTP proxy component on port 7074 uses a domain allowlist to restrict outbound requests, but fails to properly sanitize hostnames containing null-byte %00...

libsoup security update

2.62.2-2.0.1 - Fixed CVE-2024-52530 for smuggling nullbytes in header names Orabug: 37289659...

Lotus Core CMS 1.0.1 Local File Inclusion

Exploit Title: Lotus Core CMS 1.0.1 - Local File Inclusion Google Dork: N/A Date: 2020-01-31 Exploit Author: Daniel Monzón stark0de Vendor Homepage: http://lotuscore.sourceforge.net/ Software Link: https://sourceforge.net/projects/lotuscore/files/latest/download Version: 1.0.1 Tested on: Windows ...

Linux/x86 TCP Reverse Shell 127.0.0.1 Nullbyte Free Shellcode

/ ; name : Exploit Title: Linux/x86 - TCP reverse shell 127.0.0.1 nullbyte free ; date : 04th sept, 2019 ; author : Sandro "guly" Zaccarini ; twitter : @theguly ; blog : https://gulyslae.github.io/ ; SLAE32 : SLAE-1037 ; purpose : the program will create a new connection to 127.0.0.1:4444 and...

nginx 0.6.x - Arbitrary Code Execution NullByte Injection

No description provided by source. Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 = 0.7.65,...

LiteSpeed Web Server <= 3.2.3 - Remote Source Code Disclosure Vuln

No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos...

nginx 0.6.x Arbitrary Code Execution NullByte Injection Vulnerability

Exploit for multiple platform in category web applications Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version:...

nginx 0.6.x Arbitrary Code Execution NullByte Injection

No description provided by source. Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 = 0.7.65,...

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection

Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version: 0.5., 0.6., 0.7 //file.ext%00.php or http:////file.ext/x00.p...

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection

Nginx 0.6.x - Arbitrary Code Execution NullByte Injection Exploit Title: nginx Arbitrary Code Execution NullByte Injection Date: 24/08/2011 Exploit Author: Neal Poole Vendor Homepage: http://nginx.org/ Software Link: https://launchpad.net/nginx/0.6/0.6.36/+download/nginx-0.6.36.tar.gz Version:...

Apple iPhone Safari JS Crash Exploit

Apple iPhone 3 Safari JavaScript - dot / '.' Remote Crash . = '$string'; "; iffileputcontents"./crash.html", $code echo"Point your safari mobile browser to crash.html.\r\n"; else echo"Cannot create file.\r\n"; ?...

Microsoft Windows - IcmpSendEcho2Ex Interrupting Denial of Service

/ Microsoft Windows DoS IcmpSendEcho2Ex interrupting Author: l3D Sites: http://nullbyte.org.il, http://forums.hacking.org.il IRC: irc://irc.nix.co.il/security Email: [email protected] Tested on Windows 7 Microsoft Windows operating system is prone to a local DoS by interrupting the function...

vBulletin 3.8.* - 4.* DownloadsII poison nullbyte

Exploit for php platform in category web applications ================================================= vBulletin 3.8. - 4. DownloadsII poison nullbyte ================================================= Exploit Title: VBulletin 4. DownloadsII poison nullbyte Date: 2010-04-12 Author: Un-Dead Team:...

DSEmu 0.4.10 - &#039;.nds&#039; Local Crash

!/usr/bin/env python DSEmu 0.4.10 .nds local crash Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] blah=open'crash.nds', 'w' blah.write'w00t'12 blah.close...

DSEmu 0.4.10 - .nds Local Crash

DSEmu 0.4.10 - .nds Local Crash !/usr/bin/env python DSEmu 0.4.10 .nds local crash Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] blah=open'crash.nds', 'w' blah.write'w00t'12 blah.close...

About remote file inclusion RFI analysis-vulnerability warning-the black bar safety net

Remote file includes in you include a remote file.. usually contains the file to be used for malicious purposes The back door What is the back door And your house has the front door... that should generally be welcome Backdoor unpopular, because people usually used to do bad things. Computer...

nicLOR Puglia Landscape (id) Local File Inclusion Vulnerability

No description provided by source. / --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape...

nicLOR Puglia Landscape - Local File Inclusion

nicLOR Puglia Landscape - Local File Inclusion / --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape...

nicLOR Puglia Landscape - Local File Inclusion

/ --------------------------------------------------- PugliaLandscape Local File Inclusion Vulnerability --------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/PugliaLandscape --------------------------------------------------- Local...

horde-disclose.txt

---- Horde Web-Mail Remote File Disclosure ... ITDefence.ru Antichat.ru Horde Web-Mail Remote File Disclosure Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ ...