7800 matches found
Linux Kernel <= 2.2.25, <= 2.4.24, <= 2.6.2 - "mremap()" Missing "do_munmap" Exploit
No description provided by source. / mremap missing domunmap return check kernel exploit gcc -O3 -static -fomit-frame-pointer mremappte.c -o mremappte ./mremappte suid shell Vulnerable kernel versions are all = 2.2.25, = 2.4.24 and = 2.6.2 Copyright c 2004 iSEC Security Research. All Rights...
DeluxeBB <= 1.06 (templatefolder) Remote File Include Vulnerabilities
No description provided by source. Secunia Research has discovered some vulnerabilities in DeluxeBB, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system. 1 Input passed to the templatefolder parameter in various scripts isn't properly...
OneCMS 2.4 - Remote SQL Injection / Upload Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...
Python <= 2.4.2 realpath() Local Stack Overflow Exploit
No description provided by source. !/usr/bin/python gexp-python.py Python = 2.4.2 realpath Local Stack Overflow ----------------------------------------------- Against VA Space Randomization. Copyright c 2006 Gotfault Security Bug found and developed by: dx/vaxen Gotfault Security, posidron Tripb...
AOL 9.5 ActiveX Heap Overflow Vulnerability
No description provided by source. Product: AOL 9.5 Vulnerability: ActiveX - Heap Overflow Discussion: Vulnerability is in Activex Control CDDBControl.dll Sending a string to BindToFile , triggering the vulnerability. Successful exploitation allow remote attackers to execute arbitrary code...
Oracle Document Capture Actbar2.ocx Insecure Method
No description provided by source. Source: http://packetstormsecurity.org/files/view/97866/DSECRG-11-004.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL:...
Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
Xerox Workcenter 4150 Remote Buffer Overflow
No description provided by source. Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3 Technical details 4 Th...
Android 2.0/2.1 - Use-After-Free Remote Code Execution on Webkit
No description provided by source. Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have...
Linux Kernel (<= 2.4.27 , 2.6.8) binfmt_elf Executable File Read Exploit
No description provided by source. / binfmtelf executable file read vulnerability gcc -O3 -fomit-frame-pointer elfdump.c -o elfdump Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED AS IS AND WITHOUT ANY WARRANTY. COPYING,...
php video script SQL Injection Vulnerability
No description provided by source. Exploit Title: php video script SQL Injection Vulnerability Date: 2011-25-11 Author: longrifle0x Home page: www.security-research.ge software: PHP video script Download:http://www.alurian.com/php-video-script/ Tools: SQLMAP Drok: Copyright ? PHP Video Script...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
Pluck CMS 4.5.2 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date...
skyportal vrc6 Multiple Vulnerabilities
No description provided by source. WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders : Shahin...
VWar <= 1.50 R14 (online.php) Remote SQL Injection Vulnerability
No description provided by source. .: insecurity research team :. ....:...:. . .:. | |/ :/ // :/ .:. : | | | \\ /\ / :. . ..: ||| / \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 1o.o8.2oo6 .. Affected Application: VWar = v1.50 R14 . . : contact :...
.Net Framework Tilde Character DoS
No description provided by source. Paper: http://www.exploit-db.com/wp-content/themes/exploit/docs/19527.pdf Security Research - .Net Framework Tilde Character DoS Website : http://soroush.secproject.com/blog/ I. BACKGROUND --------------------- The .NET Framework is a software framework develope...
TFTPDWIN 0.4.2 - Directory Traversal Vulnerability
No description provided by source. +------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...
Linux Kernel <= 2.4.28 and <= 2.6.9 scm_send local DoS Exploit
No description provided by source. / Linux kernel 2.4 & 2.6 scmsend DoS Warning! this code will hang your machine gcc -O2 scmbang.c -o scmbang Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED AS IS AND WITHOUT ANY WARRANTY...
Linux Kernel <= 2.6.10 Local Denial of Service Exploit
No description provided by source. / Removed ='s at the bottom /str0ke / / linux kernel =2.6.102.6.x DOS exploit writen by ChoiX c uKt Research [email protected] / include stdio.h include stdlib.h include sys/types.h include sys/stat.h include fcntl.h include unistd.h include...
IBM Bladecenter Management - Multiple web application vulnerabilities
No description provided by source. DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group DSecRG Advisory DSECRG-09-054...