Code injection

The mipv6 daemon in UMIP 0.4 does not verify that netlink messages originated in the kernel, which allows local users to spoof netlink socket communication via a crafted unicast message...

minerCPP 0.4b Buffer Overflow / Format String

!/usr/bin/env python minerCPP 0.4b Remote BOF+Format String Attack Exploit Software Link: http://sourceforge.net/projects/minercpp/ Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Tested on Windows 7 In order to make...

Microsoft IIS - HTTP Request Denial of Service (2)

!/usr/bin/perl really bored kokanin / IIS 5.1 dos thing, Inge says to use a browser at http://ingehenriksen.blogspot.com/2005/12/microsoft-iis-remote-dos-dll-url.html kokanin not like puny browser!!"1 I hoped Inge was a leet haxx0r ch1ck, but it's apparently a dude, bummer. According to Inge...

WebConnect 6.4.4 - 6.5 Directory Traversal and Denial of Service Exploit

No description provided by source. WebConnect version 6.4.4 - 6.5 Proof of Concept Coded bY ++Karak0rsan++ [email protected] Usage:perl webconnect.pl target port Default port: 2080 Greetz:hurby,phalaposher,r3db4r0n,L4M3R,zeronc,Atak,sloan,emre, fox and all my friends Konak Anatolian High...

solaris/SPARC connect-back 204 bytes

Exploit for solaris/sparc platform in category shellcode ==================================== solaris/SPARC connect-back 204 bytes ==================================== / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x...

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service

Microsoft Systems Management Server 1.22.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/10726/info Reportedly Microsoft Systems Management Server is vulnerable to a remote denial of service vulnerability. This issue is due to a failure of the affected server to handle...

MySQL 4.1/5.0 - Zero-Length Password Authentication Bypass

!/usr/bin/perl The script connects to MySQL and attempts to log in using a zero-length password Based on the vuln found by NGSSecurity The following Perl script can be used to test your version of MySQL. It will display the login packet sent to the server and it's reply. Exploit copyright c 2004 ...