Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant Web Server 3.1 - Remote Buffer Overflow 1 Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=...

Heap overrun handling malicious news: URL — Mozilla

Maurycy Prodeus of iSEC Security Research reports a heap overrun in processing certain news: URLs. Thunderbird and the Mozilla Suite are affected; Firefox does not support the news: scheme...

Linux Kernel 2.4.29-rc2 - 'uselib()' Local Privilege Escalation (1)

/ EDB Note: There's is an updated version https://www.exploit-db.com/exploits/895/ / / binfmtelf uselib VMA insert race vulnerability v1.08 gcc -O2 -fomit-frame-pointer elflbl.c -o elflbl Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY I...

Linux Kernel 2.4.29-rc2 - uselib() Local Privilege Escalation (1)

Linux Kernel 2.4.29-rc2 - uselib Local Privilege Escalation 1 / EDB Note: There's is an updated version https://www.exploit-db.com/exploits/895/ / / binfmtelf uselib VMA insert race vulnerability v1.08 gcc -O2 -fomit-frame-pointer elflbl.c -o elflbl Copyright c 2004 iSEC Security Research. All...

un-htget_0.9x.txt

!/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck research team 2004-2005. http://unl0ck.void.ru ................/^^^^''''|:::::::---- $shellcode = "\x31\xc0\x31\xdb\xb0\x17\xcd\x80"...

Serious Vulnerabilities In PhotoPost ReviewPost

GulfTech Security Research January 02, 2005 Vendor : All Enthusiast, Inc. URL : http://www.reviewpost.com/ Version : ReviewPost PHP Pro All Versions Risk : Multiple Vulnerabilities Description: Your community of users represents a wealth of knowledge. Now your users can help build and maintain yo...

Multiple PhotoPost Pro Vulnerabilities

GulfTech Security Research January 03, 2005 Vendor : All Enthusiast, Inc. URL : http://www.photopost.com/class/ Version : PhotoPost PHP 4.8.1 && Others Risk : Multiple Vulnerabilities Description: PhotoPost was designed to help you give your users exactly what they want. Your users will be thrill...

HTGET <= 0.9.x Local Root Exploit

No description provided by source. !/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck research team 2004-2005. http://unl0ck.void.ru ................/^^^^''''|:::::::---- $shellcode =...

HTGET 0.9.x - Local Privilege Escalation

HTGET 0.9.x - Local Privilege Escalation !/usr/bin/perl ^^^^^^^^^^^^^^^^....,,,,|::::::: HTGET = 0.9.x local lame r00t exploit written by nekd0 of Unl0ck Research Team c .unl0ck research team 2004-2005. http://unl0ck.void.ru ................/^^^^''''|:::::::---- $shellcode =...

PhotoPost.txt

GulfTech Security Research January 03, 2005 Vendor : All Enthusiast, Inc. URL : http://www.photopost.com/class/ Version : PhotoPost PHP 4.8.1 && Others Risk : Multiple Vulnerabilities Description: PhotoPost was designed to help you give your users exactly what they want. Your users will be thrill...

[Full-Disclosure] Secunia Research: Mozilla / Mozilla Firefox Download Dialog Source Spoofing

====================================================================== Secunia Research 04/01/2005 - Mozilla / Mozilla Firefox Download Dialog Source Spoofing - ====================================================================== Table of Contents Affected...

Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier

GulfTech Security Research December 22nd, 2004 Vendor : Jason Morriss URL : http://www.psychostats.com/ Version : PsychoStats 2.2.4 Beta && Earlier Risk : Cross Site Scripting Description: PsychoStats is a statistics generator for games. Currently there is support for a handful of Half-Life "MODs...

[SA13187] Spy Sweeper Enterprise Privilege Escalation Vulnerability

TITLE: Spy Sweeper Enterprise Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13187 VERIFY ADVISORY: http://secunia.com/advisories/13187/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Spy Sweeper Enterprise 1.x http://secunia.com/product/4256/...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

Exploit for linux platform in category remote exploits ======================================================= SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit ======================================================= / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put...

Exploit for Ultrix 4.5 dxterm

Well, I hadn't seen a buffer overflow exploit for ultrix on bugtraq, so I decided to make one. I don't think anyone is using ultrix seriously anymore, so this is just for fun ;. -- cut here -- / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' i...

phpBB highlight Arbitrary File Upload (Santy.A)

No description provided by source. Santy.A - phpBB = 2.0.10 Web Worm Source Code Proof of Concept -SECU For educational purpose See : http://isc.sans.org/diary.php?date=2004-12-21 http://www.f-secure.com/v-descs/santya.shtml !/usr/bin/perl use strict; use Socket; sub PayLoad; sub DoDir$; sub DoFi...

[VulnWatch] Secunia Research: My Firewall Plus Privilege Escalation Vulnerability

====================================================================== Secunia Research 21/12/2004 - My Firewall Plus Privilege Escalation Vulnerability - ====================================================================== Table of Contents Affected...

Ability Server 2.34 - APPE Remote Buffer Overflow

Ability Server 2.34 - APPE Remote Buffer Overflow / TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include include include include // shellc0de by m00 team...

Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]

GulfTech Security Research December 14th, 2004 Vendor : phpGroupWare URL : http://www.phpgroupware.org Version : phpGroupWare 0.9.16.003 Risk : Multiple Vulnerabilities Description: phpGroupWare formerly known as webdistro is a multi-user groupware suite written in PHP. It provides a Web-based...

SugarSales Multiple Vulnerabilities

------------------------------------------------------------------------- | SugarSales Multiple Vulnerabilities | ------------------------------------------------------------------------- Date: 12-11-2004 Author: Daniel Fabian Product: SugarSales formerly SugarCRM Affected Version: up to 2.0.1c...