OpenLDAP <= 2.4.3 (KBIND) Remote Buffer Overflow Exploit

No description provided by source. / openldap-kbind-p00f.c - OpenLDAP kbind remote exploit Only works on servers compiled with --enable-kbind enable LDAPv2+ Kerberos IV bind deprecated no by Solar Eclipse [email protected] Shoutouts to LSD for their l33t asm code and to all 0dd people...

UNIX 7th Edition /bin/mkdir Local Buffer Overflow Exploit

No description provided by source. / Exploit for /bin/mkdir Unix V7 PDP-11. mkdir has a buffer overflow when checking if the directory in /arg/with/slashes/fname exists. This will run /bin/sh with euid 0, but not uid 0. Since the shell doesn't do anything special about this, we don't really care...

Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version

No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...

BIND 8.2.x (TSIG) Remote Root Stack Overflow Exploit (3)

No description provided by source. / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Solaris 2.7 x86 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleek" bug through UDP to obtain the base /...

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes

No description provided by source. / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46 raptor Exp $ reusage-linux.c - re-use of "/bin/sh" string in .rodata Copyright c 2003 Marco Ivaldi [email protected] Short local shellcode for /bin/sh execve. It re-uses the "/bin/sh" string stored in the...

linux/x86 stdin re-open and /bin/sh exec shellcode

No description provided by source. / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi [email protected] Local shellcode for stdin re-open and /bin/sh exec. It closes stdin descriptor and re-opens...

Aix execve /bin/sh 88 bytes

No description provided by source. / Aix execve of /bin/sh Georgi Guninski [email protected] / unsigned int code= 0x7c0802a6 , 0x9421fbb0 , 0x90010458 , 0x3c60f019 , 0x60632c48 , 0x90610440 , 0x3c60d002 , 0x60634c0c , 0x90610444 , 0x3c602f62 , 0x6063696e , 0x90610438 , 0x3c602f73 , 0x60636801 ...

CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5282

SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...

EUVD-2006-5267

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

SH-News (RFI)

================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork & vuln : download scripts and think ...

SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities

No description provided by source. ================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork &...

SH-News 3.1 - 'scriptpath' Remote File Inclusion

================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version : 3.1 Dork & vuln : download scripts and think ...

SH-News <= 3.1 (scriptpath) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== SH-News = 3.1 scriptpath Multiple Remote File Include Vulnerabilities ========================================================================...

SH-News 3.1 - scriptpath Remote File Inclusion

SH-News 3.1 - scriptpath Remote File Inclusion ================================================================== SH-News RFI ================================================================== Info:- Scripts: SH-News Download: http://www.hotscripts.com/jump.php?listingid=19561&jumptype=1 Version ...

linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes

Exploit for linux/x86 platform in category shellcode ================================================================ linux/x86 re-use of /bin/sh string in .rodata shellcode 16 bytes ================================================================ / $Id: reusage-linux.c,v 1.3 2004/01/30 20:08:46...

linux/x86 stdin re-open and /bin/sh exec shellcode

linux/x86 stdin re-open and /bin/sh exec shellcode. Shellcode exploit for linx86 platform / $Id: gets-linux.c,v 1.3 2004/06/02 12:22:30 raptor Exp $ gets-linux.c - stdin re-open shellcode for Linux/x86 Copyright c 2003 Marco Ivaldi Local shellcode for stdin re-open and /bin/sh exec. It closes std...

[SA20781] GL-SH Deaf Forum show.php Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-3247

Multiple cross-site scripting XSS vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 page, and 3 action parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...