499 matches found
Wireshark 1.0.6 - PN-DCP Format String (PoC)
Wireshark 1.0.6 - PN-DCP Format String PoC / THCX Wireshark include include char sploit= "\xd4\xc3\xb2\xa1\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x01\x00\x00\x00" "\x96\x2c\x8f\x47\x97\xaa\x0d\x00\x22\x00\x00\x00\x22\x00\x00\x00\x00\x02\xe3\x17\xc7\x50\x00\x80"...
Wireshark <= 1.0.6 PN-DCP Format String Exploit PoC
Exploit for multiple platform in category dos / poc =================================================== Wireshark include include char sploit= "\xd4\xc3\xb2\xa1\x02\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x00\x00\x01\x00\x00\x00"...
dcpportal-sql.txt
!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...
DCP-Portal <= 6.11 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo "DCP Portal = 6.11 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Note : Magic Quotes = 0 Script Download : http://www.dcp-portal.org/ Bug in index.php : ?php //index.php ... 60. $sql = "SELE...
DCP-Portal <= 6.11 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================== DCP-Portal But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str,...
DCP-Portal 6.11 - SQL Injection
DCP-Portal 6.11 - SQL Injection !/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass...
DCP-Portal 6.11 - SQL Injection
!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...
wireshark security and bug fix update
0.99.6-EL4.1.0.1 - Add oracle-ocfs2-network.patch 0.99.6-1 - upgrade to 0.99.6 - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark...
Wireshark 0.99.6版本多个远程拒绝服务漏洞
BUGTRAQ ID: 26532 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的以下协议处理模块中存在多个死循环、内存耗尽、崩溃或缓冲器溢出漏洞： SSL、ANSI MAP、Firebird/Interbase、NCP、HTTP、MEGACO、DCP ETSI、PPP和蓝牙SDP处理模块 处理畸形的MP3或iSeries（OS/400）通讯追踪文件 处理畸形的DNP或RPC端口映射报文 如果Wireshark受骗从网络抓包或通过抓包文件解析了上述畸形报文的话，就会耗尽大量系统资源。 Wireshark Wireshark 0.8.1...
Code injection
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
The DCP ETSI dissector in Wireshark formerly Ethereal 0.99.6 allows remote attackers to cause a denial of service long loop and resource consumption via unknown vectors...
CVE-2007-6119
CVE-2007-6119:Wireshark (formerly Ethereal) before 0.99.7 is affected; the DCP ETSI dissector in 0.99.6 can cause denial of service (long loop/resource consumption) via unknown vectors. Public advisories (RHSA/CESA/MDA etc.) indicate upgrading to Wireshark 0.99.7 or later mitigates the issue. Oth...
RHEL 4 : wireshark (RHSA-2007:0709)
New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...
wireshark security update
CentOS Errata and Security Advisory CESA-2007:0709 New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the...
Low: Red Hat Security Advisory: wireshark security and bug fix update
New Wireshark packages that fix various security vulnerabilities and functionality bugs are now available for Red Hat Enterprise Linux 4. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...
CVE-2003-1536
CVE-2003-1536 affects Codeworx Technologies DCP-Portal 5.3.1. Two reflected XSS flaws exist: (1) q parameter in search.php and (2) year parameter in calendar.php are not properly sanitized, allowing remote attackers to inject arbitrary scripts/HTML in a victim’s browser. CVSS v2 base score 4.3 (M...
CVE-2003-1536
Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...