Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution

Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution $theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line =...

CVE-2011-4669

SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php...

Linux/MIPS - add userUID 0 with password - 164 bytes

Linux/MIPS - add userUID 0 with password - 164 bytes. Shellcode exploit for linux platform / Title: Linux/MIPS -add userUID 0 with password - 164 bytes Date: 2011-11-24 Author: rigan - imrigan at gmail.com Note: Username - rOOt Password - pwn3d / include char sc = "\x24\x09\x73\x50" // li t1,2952...

linux/mips - add user(UID 0) with password - 164 bytes

/ Title: Linux/MIPS -add userUID 0 with password - 164 bytes Date: 2011-11-24 Author: rigan - imrigan at gmail.com Note: Username - rOOt Password - pwn3d / include char sc = "\x24\x09\x73\x50" // li t1,29520 "\x05\x30\xff\xff" // bltzal t1,400094 "\x24\x09\x73\x50" // li t1,29520 nop /...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

FreeBSD - UIPC socket heap Overflow (PoC)

FreeBSD - UIPC socket heap Overflow PoC !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...

FreeBSD UIPC socket heap overflow proof-of-concept

Exploit for freebsd platform in category dos / poc !/bin/sh fbsd-uipcsock-heap.sh, by Shaun Colley , 29/09/11 proof-of-concept crash for the freebsd unix domain sockets heap overflow. this was tested on freebsd 8.2-RELEASE. just a PoC for now. see advisory & patches for details:...

WordPress Symposium Plugin <= 11.12.07 - XSS

Because of this vulnerability in uploadify/getprofileavatar.php, the attackers can inject arbitrary web script or HTML via the "uid" parameter. Solution Update the plugin...

kernel signal spoofing issue

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call...

phpList 2.10.x - Security Bypass / Information Disclosure

source: https://www.securityfocus.com/bid/49188/info PHPList is prone to a security-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain access to sensitive information and send arbitrary messages to registered users. Other attacks are als...

CVE-2011-1833

Race condition in the ecryptfsmount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfsprivate mount with a mismatched uid...

PXE Exploit server

PXE exploit server. Remote exploit for windows platform $Id: pxexploit.rb 13493 2011-08-05 17:10:27Z scriptjunkie $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

PXE exploit server

Exploit for windows platform in category remote exploits $Id: pxexploit.rb 13493 2011-08-05 17:10:27Z scriptjunkie $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

kernel signal spoofing issue

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call...

Mssql rebound injection record collection-vulnerability warning-the black bar safety net

One night a study of SA injection point when Hua B to I came some information Made up to do a recording. Skull more and more bad with the Hey Change the administrator password ‘;update user set pwd=’1519804e89226cf9893a05d9e3fc8bbb’ where LogonName=’hmingming’;– ----------------------------- Colu...

VSFTPD v2.3.4 Backdoor Command Execution

Exploit for unix platform in category remote exploits $Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

SuperH sh4 Add root user with password

SuperH sh4 Add root user with password. Shellcode exploit for sh4 platform / Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Informations:...

kernel signal spoofing issue

kernel/signal.c in the Linux kernel before 2.6.39 allows local users to spoof the uid and pid of a signal sender via a sigqueueinfo system call...

kernel: proc: protect mm start_code/end_code in /proc/pid/stat

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...

IBM solidDB RPC Test Commands Denial of Service Vulnerabilities

This host is running IBM solidDB and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmsoliddbrpctestsvcdosvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ IBM solidDB RPC Test Commands Denial of Service Vulnerabilities Authors: Antu Sanadi Copyright:...