CVE-2014-9407

Multiple cross-site request forgery CSRF vulnerabilities in Revive Adserver before 3.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 delete data via a request to agency-delete.php, 2 tracker-delete.php, or 3 userlog-delete.php in admin/ or 4 unlink...

Phpyun设计缺陷致任意文件删除可致重装getshell或注入

简要描述： 设计缺陷可致任意文件删除 删除lock可直接进行重装直接达到getshell。 或者删除某文件也可以来注入了。 也可导致破坏sql语句。 P.S.又是1点多了,明天又无法认真上课了。 2014年7月23日 01:30:01 新的一天快乐。 详细说明： 依旧官网下的最新版。 在model/ajax.class.php中 function deluploadaction if!$this-uid && !$this-username && $COOKIE"usertype"!=2 echo 0;die; else $dir=$POSTstr0; $isuser =...

55 bytes SLoc-DoS shellcode by Magnefikko

No description provided by source. include stdio.h include string.h / by Magnefikko 14.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 55 bytes SLoc-DoS shellcode Platform: Linux x86 unlink/etc/shadow; execvepoweroff, 0, 0; gcc -Wl,-z,execstack...

Linux kernel 2.2.x/2.4.x I/O System Call File Existence Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7279/info A weakness has been discovered on various systems that may result in an attacker gaining information pertaining to the existence of inaccessible files. The problem lies in the return times when attempting to...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

No description provided by source. Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman / include string.h include stdio.h char shell =...

33 bytes unlink "/etc/shadow" x86 linux shellcode

No description provided by source. / Name : 33 bytes unlink /etc/shadow x86 linux shellcode Date : Wed Jun 2 18:01:44 2010 Author : gunslinger yudha.gunslingeratgmail.com Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian / include stdio.h char...

eYou邮件系统文件删除(2)

简要描述： eYou邮件系统存在越权+任意文件删除漏洞 详细说明： 1 漏洞连接 文件删除：/admin/group/deladdition.php 文件上传：/admin/group/uploadaddition.php $ToRemove = post'ToRemove'; $size = @filesize$ToRemove; ifisarray$SESSION'tmpName' $key = arraysearch$ToRemove,$SESSION'tmpName'; else $key = null; iffileexists$ToRemove $res =...

Tipask 2.0 前台任意文件删除漏洞

简要描述： tipask可以调整头像保存并删除原始头像 在删除原始头像时使用了post提交的参数 造成任意文件删除漏洞 详细说明： function onsaveimg $x1 = $this- post'x1' ; $y1 = $this- post'y1' ; $x2 = $this- post'x2' ; $y2 = $this- post'y2' ; $w = $this- post'w' ; $h = $this- post'h' ; $ext = $this- post'ext' ; $uploadtmpfile = TIPASKROOT . "/data/tmp/"...

Piwigo任意文件泄露和任意文件删除漏洞

BUGTRAQ ID: 58016 Piwigo是用PHP编写的相册脚本。 Piwigo 2.4.6及其他版本没有正确验证install.php脚本的 'dl'参数值，在实现上存在安全漏洞，攻击者可利用这些漏洞查看受影响计算机上的任意文件，删除受影响应用上下文内的任意文件。 0 Piwigo Piwigo 2.4.6 厂商补丁： Piwigo ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://piwigo.org/bugs/view.php?id=2843...

CVE-2011-3216

CVE-2011-3216 concerns a kernel logic flaw in Apple Mac OS X prior to 10.7.2. The issue stems from improper handling of the sticky bit on directories, which could allow a local user to bypass intended permissions and delete files via an unlink system call. The vulnerability’sImpact is described a...

CVE-2011-3216

The kernel in Apple Mac OS X before 10.7.2 does not properly implement the sticky bit for directories, which might allow local users to bypass intended permissions and delete files via an unlink system call...

Joomla Component com_xcloner-backupandrestore Command Execution

Exploit for php platform in category web applications !/usr/bin/python Joomla component comxcloner-backupandrestore remote code execution exploit Vendor: http://www.xcloner.com/ "Our true divinity is in our ability to create. And armed with the understanding of the symbiotic connections of life,...

Joomla XCloner Remote Command Execution

!/usr/bin/python Joomla component comxcloner-backupandrestore remote code execution exploit Vendor: http://www.xcloner.com/ "Our true divinity is in our ability to create. And armed with the understanding of the symbiotic connections of life, while being guided by the emergent nature of reality,...

linux/x86 unlink "/etc/shadow" shellcode 33 bytes

Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 unlink "/etc/shadow" shellcode 33 bytes ================================================= / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

unlink "/etc/shadow" x86 linux shellcode 33 bytes

33 bytes unlink "/etc/shadow" x86 linux shellcode. Shellcode exploit for linux platform / Name : 33 bytes unlink "/etc/shadow" x86 linux shellcode Date : Wed Jun 2 18:01:44 2010 Author : gunslinger Web : http://devilzc0de.org blog : http://gunslingerc0de.wordpress.com tested on : linux debian /...

linux/x86 - execve("/bin/sh", 0, 0) shellcode 22 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 - execve"/bin/sh", 0, 0 shellcode 22 bytes ====================================================== include include / by Magnefikko 15.04.2010 email protected Promhyl Studies ::...

SLoc-DoS shellcode 55 bytes

55 bytes SLoc-DoS shellcode by Magnefikko. Shellcode exploit for linux platform include include / by Magnefikko 14.04.2010 [email protected] Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: 55 bytes SLoc-DoS shellcode Platform: Linux x86 unlink"/etc/shadow"; execve"poweroff", 0...

linux/x86 - SLoc-DoS shellcode 55 bytes

Exploit for linux/x86 platform in category shellcode ======================================= linux/x86 - SLoc-DoS shellcode 55 bytes ======================================= include include / by Magnefikko 14.04.2010 email protected Promhyl Studies :: http://promhyl.oz.pl Subgroup: PRekambr Name: ...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

No description provided by source. Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman, n4mdn4s 4T gmail D0T com Tested on: linux/Fedora 12 Code : / unlinkpasswd.c Platform: linux/x86 Size: 35 bytes Author: $andman / include string.h include stdio.h char shell =...

linux/x86 unlink(/etc/passwd) & exit() 35 bytes

Exploit for linux/x86 platform in category shellcode =============================================== linux/x86 unlink/etc/passwd & exit 35 bytes =============================================== Title: linux/x86 unlink/etc/passwd & exit 35 bytes Date: 2009-12-24 Author: sandman Tested on:...