Code injection

The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 throu...

Hash Manager - Recovering passwords to hashes

The software is designed for recovering passwords to hashes, and it features the following: Supports over 330 hashing algorithms. Contains over 50 additional utilities for handling hashes, passwords, and dictionaries. Unlimited loadable hashes, dictionaries, rules, and masks. Multithreading. 64...

Amazon Linux AMI : wireshark (ALAS-2014-330)

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2014-2281 , CVE-2014-2299 Several denial of service flaws were found in Wireshark. Wireshar...

InduSoft Web Studio Arbitrary Upload Remote Code Execution Vulnerability

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Barracuda Link Balancer 330 - Input Validation Vulnerability

Document Title: =============== Barracuda Link Balancer 330 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=33 Barracuda - Link Balancer 330 Appliance - Firmware v1.3.2.005 & older versions Release Date: =============...

Ruby '#to_s' Security Bypass Vulnerability

This host is installed with Ruby and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbrubysecbypassvulnwin.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby "tos" Security Bypass Vulnerability Authors: Madhuri D Copyright: Copyright C 2011 Greenbone Networks GmbH,...

Victory FTP Server 5.0 - Denial of Service

!/usr/bin/python xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxx xxx xxx xxx xxx xxx xxx xxxxxx xxx xxx xxx xxx xxx xxx xxx xxxxxxxx xxxxxxxx xxxxxxxxx xxxxxx xxx xxx xxx xxx xxx xxx xx xx xx xx ...

ReGet Deluxe .wjr file SaveTo attribute buffer overflow

Added: 05/14/2010 BID: 37511 Background ReGet Deluxe is a download manager for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a .wjr file containing a Download tag with a specially crafted SaveTo attribute. Resolution Do not open untrusted .wjr files...

AIMP2 Audio Converter Playlist (SEH)

Exploit for unknown platform in category local exploits ==================================== AIMP2 Audio Converter Playlist SEH ==================================== Title: AIMP2 Audio Converter Playlist SEH CVE-ID: OSVDB-ID: Author: corelanc0d3r Published: 2009-11-16 Verified: yes view source...

Stack overflow

Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

Linksys WIP 330 PhoneCtrl.exe端口扫描拒绝服务漏洞

Linksys WIP 330是一款VoIP网络无绳电话机。 Linksys WIP 330在处理端口扫描时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果使用如下命令对WIP 330的IP地址执行全端口范围的Nmap扫描的话： nmap -P0 WIP 330 ip address -p 1-65535 则在Nmap扫描结束时，PhoneCtrl.exe就会崩溃。 Linksys WIP 330 1.00.06A 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.linksys.com...

Linksys WIP 330 VoIP wireless phone DoS

nmap scan causes device to crash...

Linksys WIP 330 VoIP wireless phone crash from Nmap scan

Vulnerability Description ================== The Linksys WIP 330 VoIP wireless phone will crash when a full port-range Nmap scan is run against its IP address. Linksys WIP 330 Firmware Version ========================== 1.00.06A Nmap scan command ================ nmap -P0 WIP 330 ip address -p...

RHEL 4 : krb5 (RHSA-2005:330)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:330 advisory. Kerberos is a networked authentication system which uses a trusted third party a KDC to authenticate clients and servers to each other. The...