Savant Web Server 3.1 (French Windows)- Remote Buffer Overflow

Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! FRench Win OS support by Jerome Athias import struct import socket sc = "\x90" 21 We need this number of nops win32adduser - PASS=pwd...

Savant Web Server 3.1 (French Windows)- Remote Buffer Overflow

Savant Web Server 3.1 French Windows- Remote Buffer Overflow Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! FRench Win OS support by Jerome Athias import struct import socket sc = "\x9...

Apple Mac OSX Adobe Version Cue - Local Privilege Escalation

!/usr/bin/perl -w by unl0ck-0xdeadababe http://unl0ck.void.ru http://0xdeadbabe.blackhatz.info ------------------------------------------------- Only for challenge : and Researche pruproses. Distribution: ------------------------------------------------- It's a fuck public code , not private. Fuc...

LiteForum 2.1.1 sql injection exploit

Exploit for unknown platform in category web applications ===================================== LiteForum 2.1.1 sql injection exploit ===================================== !/usr/bin/perl use LWP::UserAgent; LiteForum 2.1.1 http://www.softtime.ru sql injection exploit work on all mysql versions by...

Savant Web Server 3.1 - Remote Buffer Overflow (1)

Savant Web Server 3.1 - Remote Buffer Overflow 1 Savant web server Buffer Overflow Exploit Discovered by : Mati Aharoni Coded by : Tal Zeltzer and Mati Aharoni www.see-security.com FOR RESEACRH PURPOSES ONLY! import struct import socket sc = "\x90" 21 win32adduser - PASS=pwd EXITFUNC=thread USER=...

Heap overrun handling malicious news: URL — Mozilla

Maurycy Prodeus of iSEC Security Research reports a heap overrun in processing certain news: URLs. Thunderbird and the Mozilla Suite are affected; Firefox does not support the news: scheme...

Linux Kernel 2.4.29-rc2 - 'uselib()' Local Privilege Escalation (1)

/ EDB Note: There's is an updated version https://www.exploit-db.com/exploits/895/ / / binfmtelf uselib VMA insert race vulnerability v1.08 gcc -O2 -fomit-frame-pointer elflbl.c -o elflbl Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY I...

Linux Kernel 2.4.29-rc2 - uselib() Local Privilege Escalation (1)

Linux Kernel 2.4.29-rc2 - uselib Local Privilege Escalation 1 / EDB Note: There's is an updated version https://www.exploit-db.com/exploits/895/ / / binfmtelf uselib VMA insert race vulnerability v1.08 gcc -O2 -fomit-frame-pointer elflbl.c -o elflbl Copyright c 2004 iSEC Security Research. All...

Serious Vulnerabilities In PhotoPost ReviewPost

GulfTech Security Research January 02, 2005 Vendor : All Enthusiast, Inc. URL : http://www.reviewpost.com/ Version : ReviewPost PHP Pro All Versions Risk : Multiple Vulnerabilities Description: Your community of users represents a wealth of knowledge. Now your users can help build and maintain yo...

Multiple PhotoPost Pro Vulnerabilities

GulfTech Security Research January 03, 2005 Vendor : All Enthusiast, Inc. URL : http://www.photopost.com/class/ Version : PhotoPost PHP 4.8.1 && Others Risk : Multiple Vulnerabilities Description: PhotoPost was designed to help you give your users exactly what they want. Your users will be thrill...

PhotoPost.txt

GulfTech Security Research January 03, 2005 Vendor : All Enthusiast, Inc. URL : http://www.photopost.com/class/ Version : PhotoPost PHP 4.8.1 && Others Risk : Multiple Vulnerabilities Description: PhotoPost was designed to help you give your users exactly what they want. Your users will be thrill...

Cross Site Scripting In PsychoStats 2.2.4 Beta && Earlier

GulfTech Security Research December 22nd, 2004 Vendor : Jason Morriss URL : http://www.psychostats.com/ Version : PsychoStats 2.2.4 Beta && Earlier Risk : Cross Site Scripting Description: PsychoStats is a statistics generator for games. Currently there is support for a handful of Half-Life "MODs...

phpBB highlight Arbitrary File Upload (Santy.A)

No description provided by source. Santy.A - phpBB = 2.0.10 Web Worm Source Code Proof of Concept -SECU For educational purpose See : http://isc.sans.org/diary.php?date=2004-12-21 http://www.f-secure.com/v-descs/santya.shtml !/usr/bin/perl use strict; use Socket; sub PayLoad; sub DoDir$; sub DoFi...

Exploit for Ultrix 4.5 dxterm

Well, I hadn't seen a buffer overflow exploit for ultrix on bugtraq, so I decided to make one. I don't think anyone is using ultrix seriously anymore, so this is just for fun ;. -- cut here -- / Ultrix 4.5/MIPS dxterm exploit by ztion in 2004 Greets to: Stok, sidez It wasn't possible to use '/' i...

SugarSales Multiple Vulnerabilities

------------------------------------------------------------------------- | SugarSales Multiple Vulnerabilities | ------------------------------------------------------------------------- Date: 12-11-2004 Author: Daniel Fabian Product: SugarSales formerly SugarCRM Affected Version: up to 2.0.1c...

Multiple phpGroupWare Vulnerabilities [ phpGroupWare 0.9.16.003 && Earlier ]

GulfTech Security Research December 14th, 2004 Vendor : phpGroupWare URL : http://www.phpgroupware.org Version : phpGroupWare 0.9.16.003 Risk : Multiple Vulnerabilities Description: phpGroupWare formerly known as webdistro is a multi-user groupware suite written in PHP. It provides a Web-based...

Linux Kernel 2.4.28/2.6.9 - 'scm_send Local' Denial of Service

/ Linux kernel 2.4 & 2.6 scmsend DoS Warning! this code will hang your machine gcc -O2 scmbang.c -o scmbang Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING, PRINTING, DISTRIBUTION,...

Linux Kernel (<= 2.6.9 2.4.22-28) (igmp.c) Local Denial of Service Exploit

No description provided by source. / Linux igmp.c local DoS Warning: this code will crash your machine! gcc -O2 mreqfck.c -o mreqfck Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING...

Linux Kernel 2.4.27/2.6.8 - 'binfmt_elf' Executable File Read

/ binfmtelf executable file read vulnerability gcc -O3 -fomit-frame-pointer elfdump.c -o elfdump Copyright c 2004 iSEC Security Research. All Rights Reserved. THIS PROGRAM IS FOR EDUCATIONAL PURPOSES ONLY IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY. COPYING, PRINTING, DISTRIBUTION, MODIFICATI...

Linux Kernel (<= 2.4.27 , 2.6.8) binfmt_elf Executable File Read Exploit

Exploit for linux platform in category local exploits ======================================================================== Linux Kernel include include include include include include include include define BADNAME "/tmp/elfdump" void usagechar s printf"\nUsage: %s executable\n\n", s; exit0; ...