OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X Security Vulnerabilities

DATAC RealWin SCADA Server SCPC_SCPC_INITIALIZE Buffer Overflow

...

Unfixed XSS vulnerability at sexinthecitiestour.com

Security researcher nullbyt3, has submitted on 19/10/2010 a cross-site-scripting (XSS) vulnerability affecting sexinthecitiestour.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow

...

DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 (Build 6.1.8.10). By sending a specially crafted packet, an attacker may be able to execute arbitrary...

DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 (Build 6.1.8.10). By sending a specially crafted packet, an attacker may be able to execute arbitrary...

Simple FTP Client Fuzzer

This module will serve an FTP server and perform FTP client interaction...

httpdx - 'tolog()' Format String (Metasploit) (2)

...

httpdx - 'tolog()' Format String (Metasploit) (1)

...

U.S. Government Publishes List of Top IT Projects

HED: Security and data integration projects top list of top .GOV IT projects DEK: Stovepipe busting and data sharing are common themes as Uncle Sam details the top IT projects. The White House’s Office of Management and Budget (OMB) on Monday released its list of the top 26 government IT...

SapGUI BI 7100.1.400.8 - Heap Corruption

...

SapGUI BI 7100.1.400.8 Heap Corruption

...

SapGUI BI 7100.1.400.8 - Heap Corruption

SapGUI BI 7100.1.400.8 - Heap...

SapGUI BI v7100.1.400.8 Heap Corruption Exploit

Exploit for windows platform in category remote...

WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)

...

Check Sendmail Configuration

Checks the Sendmail Configuration. The Script test the SMTP Sendmail Server if the commands DEBUG, VRFY and EXPN are...

Q&A: HD Moore on Metasploit, Disclosure and Ethics

We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and.....

DATAC RealWin SCADA Server - Remote Buffer Overflow (Metasploit)

...

Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)

...

Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

...

Computer Associates - Alert Notification Buffer Overflow (Metasploit)

...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability

The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote attackers to cause denial-of- service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability

The FreeBSD and...

smtp-enum-users NSE Script

Attempts to enumerate the users on a SMTP server by issuing the VRFY, EXPN or RCPT TO commands. The goal of this script is to discover all the user accounts in the remote system. The script will output the list of user names that were found. The script will stop querying the SMTP server if...

Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting

...

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request...

Simply Classified 0.2 XSS & CSRF Vulnerabilities

Exploit for unknown platform in category web...

Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery

...

HTTPDX tolog() Function Format String Vulnerability

...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

...

HTTPDX tolog() Function Format String Vulnerability

...

Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [ Camino 1.6.10 Remote Array Overrun (Arbitrary code execution) ] Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected...

Camino 1.6.10 Remote Array Overrun

...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 (build 3884). By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need set....

Autodesk IDrop ActiveX Control Heap Memory Corruption

...

Xlink FTP Client Buffer Overflow

...

CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow

...

DATAC RealWin SCADA Server Buffer Overflow

...

Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow.

...

Oracle TNS Listener SERVICE_NAME Buffer Overflow.

...

Computer Associates Alert Notification Buffer Overflow

...

WinComLPD <= 3.0.2 Buffer Overflow

...

Realtek Media Player Playlist Buffer Overflow.

...

Novell NetIdentity Agent XTIERRPCPIPE Named Pipe Buffer Overflow

...

VideoLAN VLC TiVo Buffer Overflow

...

HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX HTTP server. By sending a specially crafted HTTP request containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via...

HTTPDX tolog() Function Format String Vulnerability

This module exploits a format string vulnerability in HTTPDX FTP server. By sending a specially crafted FTP command containing format specifiers, an attacker can corrupt memory and execute arbitrary code. By default logging is off for HTTP, but enabled for the 'moderator' user via...

Xlink FTP Client Buffer Overflow

This module exploits a stack buffer overflow in Xlink FTP Client 32 Version 3.01 that comes bundled with Omni-NFS Enterprise 5.2. When an overly long FTP server response is received by a client, arbitrary code may be...

FreeBSD ftpd 'setusercontext()'远程特权提升漏洞

Bugraq ID: 36119 FreeBSD是一款开放源代码基于BSD的操作系统。 FreeBSD 'ftpd'存在远程特权提升问题，远程攻击者可以利用漏洞突破chroot封锁获得系统敏感信息或进行拒绝服务攻击。 BSD传承的操作系统一般都包含用于设置用户上下文的函数，如 FreeBSD 5.0和7.0包含的setusercontext()函数： setusercontext(lc, pw, (uid_t)0, LOGIN_SETLOGIN|LOGIN_SETGROUP|LOGIN_SETPRIORITY| ...

FreeBSD ftpd setusercontext()远程权限提升漏洞

BUGTRAQ ID: 36119 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD及其他一些BSD系统有一个用于设置用户上下文的功能，如FreeBSD中的setusercontext()函数： setusercontext(lc, pw, (uid_t)0, LOGIN_SETLOGIN|LOGIN_SETGROUP|LOGIN_SETPRIORITY| LOGIN_SETRESOURCES|LOGIN_SETUMASK); 其中的LOGIN_SETRESOURCES设置允许用户设置资源。根据用户手册所述： ...