AIX 7.1 - lquerylv Local Privilege Escalation

AIX 7.1 - lquerylv Local Privilege Escalation !/bin/sh Exploit Title: AIX 7.1 lquerylv privilege escalation Date: 2015.10.30 Exploit Author: S2 Crew Hungary Vendor Homepage: www.ibm.com Software Link: - Version: - Tested on: AIX 7.1 7100-02-03-1334 CVE : CVE-2014-8904 From file writing to command...

HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

No description provided by source. Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1554 Code : !/usr/bin/python import struct import socket...

gitWeb 1.5.2 - Remote Command Execution

No description provided by source. Exploit Title: gitWeb remote command execution Date: 2009.06.19 Author: S2 Crew Hungary Software Link: - Version: GIT 1.5.2 Tested on: debian linux, GIT 1.5.2 CVE: CVE-2008-5516 - CVE-2008-5517 Code: The cgi script doesn't show the command output blind command...

Motorola SURFBoard Cable Modem Directory Traversal

No description provided by source. Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls get back the...

HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution

No description provided by source. Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1555 Code : !/usr/bin/python import struct import socket...

Symantec PcAnywhere 12.5.0 Buffer Overflow

!/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import socket import time import struct import string import sys...

Symantec PcAnywhere 12.5.0 Login and Password Field Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 Code : import...

Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow

!/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 EDB Note: Needs adjustment but there is a crash Code : import socket impor...

Symantec Web Gateway 5.0.28 LFI / Code Execution

Software: Symantec Web Gateway Current Software Version: 5.0.2.8 Product homepage: www.symantec.com Author: S2 Crew Hungary CVE: CVE-2012-0297, CVE-2012-0298, ??? File include: https://192.168.82.207/spywall/previewProxyError.php?err=../../../../../../../../etc/passwd File include and OS command...

Symantec pcAnywhere 12.5.0 - Login Password Remote Buffer Overflow

Symantec pcAnywhere 12.5.0 - Login Password Remote Buffer Overflow !/usr/bin/python Exploit Title: Symantec PcAnywhere login and password field buffer overflow Date: 2012.06.27 Author: S2 Crew Hungary Software Link: symantec.com Version: 12.5.0 Tested on: Windows XP SP2 CVE: CVE-2011-3478 EDB Not...

HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1554 Code : !/usr/bin/python import struct import socket import httplib import urllib calc.exe...

HP OpenView Network Node Manager (OV NNM) - getnnmdata.exe CGI Invalid ICount Remote Code Execution

HP OpenView Network Node Manager OV NNM - getnnmdata.exe CGI Invalid ICount Remote Code Execution Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE:...

HP OpenView Network Node Manager (OV NNM) - getnnmdata.exe CGI Invalid MaxAge Remote Code Execution

HP OpenView Network Node Manager OV NNM - getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE:...

HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' CGI Invalid Hostname Remote Code Execution

Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid Hostname Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1555 Code : !/usr/bin/python import struct import socket import httplib import urllib eh =...

Motorola Surfboard Cable Modem - Directory Traversal

Motorola Surfboard Cable Modem - Directory Traversal Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal Date: 2010.06.03 Author: S2 Crew Hungary Software Link: - Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC Tested on: ^ CVE: - Code : The following urls...

SAP MaxDB Malformed Handshake Request Remote Code Execution

No description provided by source. !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.comhttp://sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

SAP MaxDB - Malformed Handshake Request Remote Code Execution !/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying...

SAP MaxDB - Malformed Handshake Request Remote Code Execution

!/usr/bin/python Exploit title: SAP MaxDB Malformed Handshake Request Remote Code Execution Date: 2010.03.26 Author: S2 Crew Hungary Software link: sap.com Version: 7.7.06.09 Tested on: Windows XP SP2 EN CVE: ZDI-10-032 Code: Trying 172.16.29.133... Connected to 172.16.29.133. Escape character is...

ProSSHD Buffer Overflow

Exploit Title: ProSSHD buffer overflow Date: 2010.02.19 Author: S2 Crew Hungary Software Link: http://www.labtam-inc.com/ Version: 1.2 20090726 Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX 7C90EB94 ntdll.KiFastSystemCallRet EBX 00000674 ESP 0012EFC0 ASCII...

ProSSHD v1.2 20090726 Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================= ProSSHD v1.2 20090726 Buffer Overflow Exploit ============================================= Author: S2 Crew Hungary Tested on: Windows XP SP2 EN CVE: - Registers: EAX 000003E4 ECX 0012ED44 EDX...