OSCA-550, OSCA-550A Security Vulnerabilities

FTP Server Traversal Arbitrary File Access (RETR)

The remote FTP server allows a user to retrieve files outside his home directory using a specially crafted 'RETR' command with traversal sequences. A remote attacker could exploit this flaw to gain access to arbitrary...

DATAC RealWin SCADA Server Buffer Overflow

...

MOXA Device Manager Tool 2.1 - Remote Buffer Overflow (Metasploit)

...

Xlink FTP Client - Remote Buffer Overflow (Metasploit)

...

MOXA Device Manager Tool 2.1 Buffer Overflow

...

MOXA Device Manager Tool 2.1 Buffer Overflow

This module exploits a stack buffer overflow in MOXA MDM Tool 2.1. When sending a specially crafted MDMGw (MDM2_Gateway) response, an attacker may be able to execute arbitrary...

CA BrightStor ARCserve for Laptops & Desktops LGServer - Remote Buffer Overflow (Metasploit) (3)

...

MOXA Device Manager Tool 2.1 - Buffer Overflow (Metasploit)

MOXA Device Manager Tool 2.1 - Buffer Overflow (Metasploit). CVE-2010-4741. Local exploit for Windows...

DATAC RealWin SCADA Server SCPC_SCPC_INITIALIZE Buffer Overflow

...

Unfixed XSS vulnerability at sexinthecitiestour.com

Security researcher nullbyt3, has submitted on 19/10/2010 a cross-site-scripting (XSS) vulnerability affecting sexinthecitiestour.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow

...

DATAC RealWin SCADA Server SCPC_INITIALIZE_RF Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 (Build 6.1.8.10). By sending a specially crafted packet, an attacker may be able to execute arbitrary...

DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 (Build 6.1.8.10). By sending a specially crafted packet, an attacker may be able to execute arbitrary...

Simple FTP Client Fuzzer

This module will serve an FTP server and perform FTP client interaction...

httpdx - 'tolog()' Format String (Metasploit) (2)

...

httpdx - 'tolog()' Format String (Metasploit) (1)

...

U.S. Government Publishes List of Top IT Projects

HED: Security and data integration projects top list of top .GOV IT projects DEK: Stovepipe busting and data sharing are common themes as Uncle Sam details the top IT projects. The White House’s Office of Management and Budget (OMB) on Monday released its list of the top 26 government IT...

SapGUI BI 7100.1.400.8 - Heap Corruption

...

SapGUI BI 7100.1.400.8 Heap Corruption

...

SapGUI BI 7100.1.400.8 - Heap Corruption

SapGUI BI 7100.1.400.8 - Heap...

SapGUI BI v7100.1.400.8 Heap Corruption Exploit

Exploit for windows platform in category remote...

WinComLPD 3.0.2 - Remote Buffer Overflow (Metasploit)

...

Check Sendmail Configuration

Checks the Sendmail Configuration. The Script test the SMTP Sendmail Server if the commands DEBUG, VRFY and EXPN are...

Q&A: HD Moore on Metasploit, Disclosure and Ethics

We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and.....

DATAC RealWin SCADA Server - Remote Buffer Overflow (Metasploit)

...

Computer Associates ARCserve - REPORTREMOTEEXECUTECML Buffer Overflow (Metasploit)

...

Autodesk IDrop - ActiveX Control Heap Memory Corruption (Metasploit)

...

Computer Associates - Alert Notification Buffer Overflow (Metasploit)

...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability

The FreeBSD and OpenBSD 'ftpd' service is prone to a denial-of-service vulnerability because of a NULL-pointer dereference. Successful exploits may allow remote attackers to cause denial-of- service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but...

FreeBSD and OpenBSD 'ftpd' NULL Pointer Dereference Denial Of Service Vulnerability

The FreeBSD and...

smtp-enum-users NSE Script

Attempts to enumerate the users on a SMTP server by issuing the VRFY, EXPN or RCPT TO commands. The goal of this script is to discover all the user accounts in the remote system. The script will output the list of user names that were found. The script will stop querying the SMTP server if...

Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting

...

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery

Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request...

Simply Classified 0.2 XSS & CSRF Vulnerabilities

Exploit for unknown platform in category web...

Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery

...

HTTPDX tolog() Function Format String Vulnerability

...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

...

HTTPDX tolog() Function Format String Vulnerability

...

Camino 1.6.10 Remote Array Overrun (Arbitrary code execution)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [ Camino 1.6.10 Remote Array Overrun (Arbitrary code execution) ] Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.: 07.05.2009 - - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-119 Risk: High Remote: Yes Affected...

Camino 1.6.10 Remote Array Overrun

...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 (build 3884). By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need set....

Autodesk IDrop ActiveX Control Heap Memory Corruption

...

CA BrightStor ARCserve for Laptops & Desktops LGServer Buffer Overflow

...

Xlink FTP Client Buffer Overflow

...

DATAC RealWin SCADA Server Buffer Overflow

...

Oracle 8i TNS Listener (ARGUMENTS) Buffer Overflow.

...

Oracle TNS Listener SERVICE_NAME Buffer Overflow.

...

Computer Associates Alert Notification Buffer Overflow

...

Realtek Media Player Playlist Buffer Overflow.

...