Gnome Panel 2.28.0 Denial Of Service

Exploit Title: Gnome panel After executing this poc a backup file will be created You can restore it by typing ./paneldos restore Using option restart gnome-panel will restart continuously Using option totalblock you will need to remove the battery After execution click application in the panel,...

Gnome Panel 2.28.0 - Denial of Service (PoC)

Tested on: ubuntu 9.10 CVE : Code : / Gnome panel http://olivapietro.altervista.org After executing this poc a backup file will be created You can restore it by typing ./paneldos restore Using option restart gnome-panel will restart continuously Using option totalblock you will need to remove the...

ntpd: DoS with mode 7 packets (VU#568372)

ntprequest.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service CPU and bandwidth consumption by using MODEPRIVATE to send a spoofed 1 request or 2 response packet that triggers a continuous exchange of MODEPRIVATE error responses between two NTP daemon...

NTP mode 7 denial-of-service vulnerability

Overview NTP contains a vulnerability in the handling of mode 7 requests, which can result in a denial-of-service condition. Description NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes...

BuildBot WebStatus Detection

The remote host is running BuildBot, a continuous integration tool written in Python. BuildBot comes with WebStatus, a web interface that provides the status of all builds being maintained by BuildBot. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CVE-2009-1334

Cross-site scripting XSS vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection CDP for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter...

CVE-2009-1334

IBM Tivoli CDP for Files 3.1.4.0 has a cross-site scripting (XSS) vulnerability in the login/FilepathLogin.html page, exploitable via the reason parameter. This could allow remote attackers to inject arbitrary web script or HTML. The PT-2009-3866 entry confirms the affected version and suggests a...

IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting

IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/34513/info IBM Tivoli Continuous Data Protection for Files is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script cod...

IBM Tivoli Continuous Data Protection for Files 3.1.4.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/34513/info IBM Tivoli Continuous Data Protection for Files is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site an...

CVE-2007-5819

IBM Tivoli Continuous Data Protection for Files CDP 3.1.0 uses weak permissions unrestricted write for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients...

(Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow

Any further revisions to this information, if required, will be posted to the official advisory located at : http://www.symantec.com/avcenter/security/Content/2006.08.11.html Symantec Security Advisory SYM06-014 BID 19479 11 August 2006 Symantec Backup Exec for Windows Server: RPC Interface Heap...

DB2 DOS

It was possible to crash the DB2 database by sending just one byte to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Jigsaw webserver MS/DOS device DoS

It was possible to crash the Jigsaw web server by requesting /servlet/con about 30 times. A cracker may use this attack to make this service crash continuously. OpenVAS Vulnerability Test $Id: jigsawmsdosdevDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jigsaw webserver MS/DOS device Do...

Worldspan Gateway DoS Vulnerability

It was possible to crash the Worldspan gateway by sending illegal data. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EFTP buffer overflow

It was possible to crash the EFTP service by uploading a .lnk file containing too much data. A cracker may use this attack to make this service crash continuously, or run arbitrary code on your system. OpenVAS Vulnerability Test $Id: eftpbufferoverflow.nasl 8023 2017-12-07 08:36:26Z teissa $...

AWStats 5.7 - 6.2 Multiple Remote Exploit (extra)

No description provided by source. / Awstats exploit "shell" code by omin0us omin0us208 at gmail dot com dtors security group .: http://dtors.ath.cx :. Vulnerability reported by iDEFENSE pluginmode bug has been found by GHC team. The awstats exploit that was discovered allows a user to execute...

Sun AnswerBook2 Web Server dwhttpd GET Request Remote Format String

The remote web server is vulnerable to a format string attack. An attacker may exploit this vulnerability to cause the web server to crash continually or even execute arbitrary code on the system. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anders...