899 matches found
PHP 5.2.6 - sleep() Local Memory Exhaust
PHP 5.2.6 - sleep Local Memory Exhaust There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry,...
PHP 5.2.6 - 'sleep()' Local Memory Exhaust
There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry, parseurl function disabled Oo'; if !...
MercuryBoard <= 1.1.5 (login.php) Remote Blind SQL Injection Exploit
No description provided by source. ?php / -------------------------------------------------------------------- MercuryBoard = 1.1.5 login.php Remote Blind SQL Injection Exploit -------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
mercuryboard-blindsql.txt
settitle$this-lang-loginheader; 55. $this-tree$this-lang-loginheader; 56. 57. //print "agent: $this-agent\n"; 58. 59. if !isset$this-post'submit' 60. $requesturi = $this-geturi; 61. 62. if substr$requesturi, -8 == 'register' 63. $requesturi = $this-self; 64. 65. 66. return...
MercuryBoard <= 1.1.5 (login.php) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== MercuryBoard settitle$this-lang-loginheader; 55. $this-tree$this-lang-loginheader; 56. 57. //print "agent: $this-agent\n"; 58. 59. if !isset$this-post'submit' 60...
Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...
HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow
HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow !/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni...
hpopen-overflow.txt
!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...
HP-UX Security Patch : PHKL_33268
callout/corruption/abstime/sleep/mpctl patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26415; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHKL_30578
callout corruption/abstime callouts/sleep %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26399; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
HP-UX Security Patch : PHKL_35828
callout/abstime/sleep/mpctl/vfork patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26434; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2007-1337
The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...
CVE-2007-1337
The virtual machine process VMX in VMware Workstation before 5.5.4 does not properly read state information when moving from the ACPI sleep state to the run state, which allows attackers to cause a denial of service virtual machine reboot via unknown vectors...
MOAB-28-01-2007.rb.txt
!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. 1 Stop crashdump from writing to /Library/Logs via chmod 000 /Library/Logs/CrashReporter 2 Make symlink to /Library/Logs/CrashReporter/knownprog.crash.log 3 Create a program with a modified LINKEDIT segment that...
acFTP FTP Server 1.4 - USER Remote Buffer Overflow (PoC)
acFTP FTP Server 1.4 - USER Remote Buffer Overflow PoC ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A"...
ASP.NET w3wp (COM Components) Remote Crash Exploit
Exploit for unknown platform in category dos / poc ================================================== ASP.NET w3wp COM Components Remote Crash Exploit ================================================== // w3wp-dos.c // include "stdafx.h" pragma comment lib,"ws232" include include include include...
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+
Exploit for linux/x86 platform in category shellcode ==================================================================== linux/x86 examples of long-term payloads hide-wait-change 187 bytes+ ====================================================================...
linux/x86 examples of long-term payloads hide-wait-change 187 bytes+
No description provided by source. /---------------------------------------------------------------------------- Mystique Project: Examples of long-term payloads hide-wait-change code by [email protected] & [email protected] ----------------------------------------------------------------------------...
