Code injection

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

CVE-2006-0151

sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158...

Sudo 1.6.x - Environment Variable Handling Security Bypass (2)

source: https://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A local attacker with the ability to run Python scripts can...

Sudo 1.6.x - Environment Variable Handling Security Bypass (2)

Sudo 1.6.x - Environment Variable Handling Security Bypass 2 source: https://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A...

F-Secure Internet GateKeeper for Linux < 2.15.484 / Gateway < 2.16 - Local Privilege Escalation

!/usr/bin/env python F-Secure Anti-Virus Internet Gatekeeper for Linux " lastedit = "Thu Sep 22 23:18:39 EDT 2005" usage = """usage: %s -options options: --version show program's version number and exit. -h, --help show this help message and exit. -s, --suid file location to suid. -d,...

xmlrpc.py.txt

!/usr/bin/python ./xmlrpc.py chk|xpl host uri example check bug: ./xmlrpc.py chk www.postnuke.com /xmlrpc.php example exploit bug: ./xmlrpc.py xpl www.postnuke.com /xmlrpc.php Pear XML-RPC Library 1.3.0 Remote PHP Code Execution Exploit -- Not working for me so i made this python code...

PunBB 1.2.4 (change_email) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ PunBB 1.2.4 changeemail SQL Injection Exploit ================================================ !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,|||...

Foxmail 2.0 (MAIL FROM:) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================== Foxmail 2.0 MAIL FROM: Denial of Service Exploit ================================================== !/usr/bin/python Code by OYXin oyxinatsegfault.cn import socket import sys import getopt def...

Foxmail 2.0 (MAIL FROM:) Denial of Service Exploit

No description provided by source. !/usr/bin/python Code by OYXin oyxinatsegfault.cn import socket import sys import getopt def usage: print "Usage: foxserver.py -h host -p port" sys.exit0 if name == 'main': try: opts, args = getopt.getoptsys.argv1:, "h:p:" except getopt.GetoptError, msg: print m...

[Full-Disclosure] Icecast 2.0.0 preauth overflow

There exists a remotely exploitable heap overflow in Icecast 2.0.0. The bug exists in the handling of base64 Authorization request. This bug was found in about 40 seconds during a HTTP audit of the web component of Icecast with the fuzzer SMUDGE http://felinemenace.org/nd/SMUDGE/ People complaine...