Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC

No description provided by source. / Nullsoft Winamp 5.31 Ultravox Ultravox-Max-Msg Heap Overflow Dos POC by cocoruderfrankruderathotmail.com,2006/10/30 use like winampunsv.exe ultravox-max-msgvalue,then the winampunsvsimple ultravox server will listen on tcp port 80,when winamp connect the serve...

VMware Server <= 2.0.1,ESXi Server <= 3.5 Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36842/info VMware products are prone to a directory-traversal vulnerability because they fail to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information...

MiniWebsvr <= 0.0.6 - Remote Resource Consumption DoS Exploit

No description provided by source. import socket print ----------------------------------------------------------------------- print MiniWebsvr 0.0.6 0-Day Resource Consumption print url: http://miniwebsvr.sourceforge.net/ print author: shinnai print mail: shinnaiatautisticidotorg print site:...

Webfroot Shoutbox < 2.32 (Apache) Remote Exploit

No description provided by source. !/usr/bin/perl Webfroot Shoutbox 2.32 on apache exploit use IO::Socket; my $host = 127.0.0.1; my $port = 80; my $shoutbox = shoutbox.php?conf=; my $shoutboxpath = /shoutbox; my $cmd = ls -l; my $conn; my $type; my @logs = /etc/httpd/logs/acceslog,...

ghttpd 1.4.x Log() Function Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5960/info A buffer overflow has been reported in ghttpd which will allow arbitrary code to be executed with the privileges of the webserver. The overflow occurs when the argument to a 'GET' request is of excessive length...

SHTTPD <= 1.34 URI-Encoded POST Request Overflow (win32)

No description provided by source. $Id: shttpdpost.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Quicktime Player <= 7.3.1.70 (rtsp) Buffer Overflow Vulnerability

No description provided by source. Luigi Auriemma Application: Quicktime Player http://www.apple.com/quicktime Versions: = 7.3.1.70 Platforms: Windows and Mac Bug: buffer-overflow Exploitation: remote Date: 10 Jan 2008 Thanx to: swirl for the help during the re-testing of the bug Author: Luigi...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2013:1493-1)

This MozillaFirefox update to version 24.0 fixes several security and non-security issues : - move greek to the translations-common package bnc840551 - update to Firefox 24.0 bnc840485 - MFSA 2013-76/CVE-2013-1718/CVE-2013-1719 Miscellaneous memory safety hazards - MFSA 2013-77/CVE-2013-1720...

CVE-2014-2732

Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...

CVE-2014-2731

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

Directory traversal

Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...

Code injection

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

Design/Logic Flaw

Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service web-interface outage via crafted HTTP requests to port 1 4999 or 2 80...

CVE-2014-2731

Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port 1 4999 or 2 80...

CVE-2014-2732

Siemens SINEMA Server (all versions prior to 12 SP1) contains directory traversal and related input-validation weaknesses in its integrated web server accessible via ports 4999 and 80. The issues allow remote attackers to access arbitrary files on the server, due to traversal and code-execution r...

CVE-2014-2732

Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port 1 4999 or 2 80...

CVE-2013-7350

Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 730159141 and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important security fixes."...

RuggedCom Rugged Operating System WEB接口拒绝服务漏洞

Bugtraq ID:66522 CVE ID:CVE-2014-2590 RuggedCom Inc罗杰康公司是世界领先的生产用于工业环境的高性能网络和通信设备的制造商。 RuggedCom Rugged Operating System系统中监听80端口的WEB服务器不正确处理用户提交的特制报文，允许攻击者提交特制的请求使WEB接口崩溃，此漏洞不影响HTTPS服务及交换功能。 0 RuggedCom Rugged Operating System v3.11 RuggedCom Rugged Operating System v3.11 for RS950G RuggedCom...

Siemens SIMATIC S7-1200多个漏洞

CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器，可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞，可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误，可导致劫持另外用户的会话。...

SuSE 11.3 Security Update : Xen (SAT Patch Number 8973)

The SUSE Linux Enterprise Server 11 Service Pack 3 Xen hypervisor and toolset has been updated to 4.2.4 to fix various bugs and security issues : The following security issues have been addressed : - XSA-60: CVE-2013-2212: The vmxsetucmode function in Xen 3.3 through 4.3, when disabling chaches,...