CVE-2005-4839

PureTLS CVE-2005-4839 affects versions before 0.9b5, where optional Extensions and Algorithm.Parameters values are not cleared before parsing, potentially leaking values from earlier certificates. The vulnerability is disclosed in multiple sources (NVD, CVE list) and tied to PureTLS prior to 0.9b...

The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ==================================================================== The Merchant 2005-2006 The Merchant Project Remote File Include Exploit //'===============================================================================================...

The Merchant 2.2.0 - 'index.php?show' Remote File Inclusion

2005-2006 The Merchant Project Remote File Include Exploit //'=============================================================================================== //'Script Name: 2005-2006 The Merchant Project //'Coded by : kezzap66345 //'Author : kezzap66345 //'Contact : [email protected]...

CVE-2007-2320

SQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to execute arbitrary SQL commands via the menuid parameter, a different vector than CVE-2005-4478...

CVE-2005-4838

CVE-2005-4838 corresponds to cross-site scripting vulnerabilities in Apache Tomcat 5.5.6 and earlier, manifested in the JSP2 example pages (el/functions.jsp, el/implicit-objects.jsp, jspx/textRotate.jspx under examples/jsp2/), exploitable via a crafted request to snp/snoop.jsp. The issue is trigg...

CVE-2007-2005

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 contacttype.php, 2 itemstatustype.php, 3 projectstatustype.php, 4 requesttype.php, 5...

CVE-2007-2005

CVE-2007-2005 describes multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo/Joomla!, allowing an attacker to execute arbitrary PHP code. The flaw is triggered via a user-provided URL in the mosConfig_absolute_path parameter passed to files in inc/: contact...

HP-UX ICMP vulnerable to DoS via ICMP Path Maximum Transmission Unit (PMTU) Discovery

Overview A vulnerability in HP-UX may allow a remote attacker to cause a denial of service by sending a specially crafted ICMP packet. Description A number of widely accepted Internet standards describe different aspects of the relationships between the Internet Control Message Protocol ICMP and...

Cross site scripting

Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting XSS...

CVE-2005-4837

Net-SNMP vulnerability CVE-2005-4837 affects snmpd in master agentX mode across 5.2.x (before 5.2.2), 5.1.x (before 5.1.3), and 5.0.x (before 5.0.10.2). Exploitation could cause remote denial of service (crash) by triggering a specific TCP disconnect, freeing an incorrect variable. This is a dist...

CVE-2007-1938

CVE-2007-1938 affects Justsystem Ichitaro (2005–2007 and related products). The vulnerability is triggered by a document delivered via e-mail or a web site, with an underlying cause described as a buffer overflow or cross-site scripting (XSS). The impact is not clearly specified in the provided d...

Remot File Include In Script Lore v1

By Hasadya Raed Contact : [email protected] Greetz : Brotha Mohammed Zeed --------------------------- Script : Lore v1 Download : http://www.pineappletechnologies.com Dork : Pineapple Technologies 2003-2005 c --------------------------- B.Files : class.phpmailer.php function.htmlcheckboxes.php...

Sql injection

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

Stack overflow

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...

CVE-2005-4835

The issue CVE-2005-4835 affects the MadWifi driver (ath_rate_sample in ath_rate/sample/sample.c) prior to version 0.9.3. Remote attackers can cause a denial of service or system crash by moving a connected host to a low-signal area, with possible additional vectors tied to a race between enabling...

Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)

...

Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

No description provided by source. !/usr/bin/python Mercur Messaging 2005 SP3 IMAP service - Egghunter mod [email protected] http://www.offensive-security.com Original exploit by Winny Thomas Thanks Thomas, this code really came in handy ! VMWare seems to alter the stack a bit as the...

Buffer overflow

Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long request on UDP port 69. NOTE: this issue might overlap CVE-2006-4781 or CVE-2005-1812...

Mercur Messaging 2005 IMAP (SUBSCRIBE) Remote Exploit (win2k SP4)

No description provided by source. !/usr/bin/python Remote exploit for the stack overflow vulnerability in Mercur Messaging 2005 SP3 IMAP service. The exploit was tested on windows 2000 server SP4 in a Vmware environment. At the time of overflow EBX points to our shellcode. However this buffer in...

Mercur Messaging 2005 <= SP4 IMAP Remote Exploit (egghunter mod)

Exploit for unknown platform in category remote exploits ================================================================ Mercur Messaging 2005 import os import sys import time import socket import struct Place our w00tw00t egghunter in nop heaven shellcode = "\x90" 92 shellcode...