911 matches found
CVE-2009-0171
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...
Multiple XSRF in DD-WRT (Remote Root Command Execution)
Author: Michael Brooks !!!! I usually don't like posting my leet exploits to bugtraq because it is so unprofessional. You guys usually malform my exploits so they are totally useless, even to someone trying to write a patch! You also tend to get the wrong name! Michael Brooks wrote this! Exploits...
DD-WRT v24-sp1 (XSRF) Cross Site Reference Forgery Exploit
No description provided by source. Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage:...
DD-WRT v24-sp1 - Cross-Site Reference Forgery
Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product Homepage: http://dd-wrt.com/ Impact: 1Remote root...
DD-WRT v24-sp1 - Cross-Site Reference Forgery
DD-WRT v24-sp1 - Cross-Site Reference Forgery Remote root dd-wrt -------------------------------------------------------------------------------- Written by Michael Brooks Special thanks to str0ke Exploits tested on the newist stable version: Firmware: DD-WRT v24-sp1 07/27/08 micro Product...
Applications can open up remote root access on G1 Phone
Hi, Google Android applications on the T-Mobile G1 can spawn a telnetd that gives remote root access to your phone: http://www.android-unleashed.com/2008/11/howto-get-root-on-your-android-g1-and.html This particular method needs user interaction, but a rogue Android app could easily run telnetd...
Solaris 9 [UltraSPARC] sadmind Remote Root Exploit
No description provided by source. !/usr/bin/perl holygrail2 --------------------------------------------------------------------------------- SunOS 5.9 UltraSPARC sadmind Remote Root Exploit by KingCope in 2008 Most of work was shamelessy ripped from HD-Moore and RISE-Security exploits!!! Bug...
Solaris 9 [UltraSPARC] sadmind Remote Root Exploit
Exploit for solaris platform in category remote exploits ================================================== Solaris 9 UltraSPARC sadmind Remote Root Exploit ================================================== !/usr/bin/perl holygrail2...
Drcat 0.5.0-beta (drcatd) Remote Root Exploit
No description provided by source. / Proof of Concept DRCATD Remote exploit by Taif Test: root@localhost drcat ./drcat -d 127.0.0.1 -u taif -p test Public code by Taif drcat-0.5.0-beta 'remote r00t' proof Bug found by Khan Shirani host: +-+-+-+-+-+-+-+ 127.0.0.1 |C|L|U|P|C|S|R| user:...
Webmin and Usermin authentication bypass vulnerability
Overview Webmin and Usermin, web-based system management tools for UNIX, contain a vulnerability which may allow a remote attacker to bypass authentication when PAM authentication is used. Impact A remote attacker could bypass Webmin and Usermin's authentication, and execute an arbitrary command...
Immunity Canvas: SOL_PRINTER_CONF
Name| solprinterconf ---|--- CVE| CVE-2008-2144 Exploit Pack| CANVAS Description| solprinterconf Notes| CVE Name: CVE-2008-2144 VENDOR: Sun Advisory: http://sunsolve.sun.com/search/document.do?assetkey=1-66-236884-1 Notes: This exploit gets remote root on Solaris servers given a working printer...
Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit (meta)
No description provided by source. / \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | |...
Aztech ADSL2/2+ 4 Port remote root
http://www.aztech.com cat versions VERSION=3.7.0 BUILD=070426 BOARD=AR7RD FSSTAMP=20070426171252 Example: $ lynx "http://192.168.0.5/cgi-bin/script?system20&20whoami" --source root $ lynx "http://192.168.0.5/cgi-bin/script?system20&20ls /" --source bin dev etc lib proc sbin usr var var.tar $...
ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability
Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID 28184 ---------------------------...
ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability
No description provided by source. Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi [email protected] Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end CVE-2008-1160 BID...
ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution
ZYXEL ZyWALL QuaggaZebra - Default Password Remote Code Execution Name: ZyXEL ZyWALL Quagga/Zebra Remote Root Vulnerability Release Date: 10 March 2008 Discover: Pranav Joshi Vendor: ZyXEL Products Affected: ZyWALL Status on other affected products & firmwares pending from vendor’s end...
ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability
Exploit for hardware platform in category remote exploits ================================================================== ZyXEL ZyWALL Quagga/Zebra default pass Remote Root Vulnerability ================================================================== Name: ZyXEL ZyWALL Quagga/Zebra Remote...
Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit
Exploit for solaris platform in category remote exploits =================================================== Sun Solaris = 10 rpc.ypupdated Remote Root Exploit =================================================== Sun Solaris = 10 rpc.ypupdated Remote Root Exploit...
vhcs-root.txt
!/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller has 2 users + Host domaintest.fr is connected /...
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
!/usr/bin/php -q ?php This file requires the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; darkfig@darky:/ ./vhcssploit.php -url http://localhost/vhcs2/ VHCS = 2.4.7.1...