16856 matches found
Core FTP Server 1.2 - Buffer Overflow (PoC)
Exploit for windows platform in category local exploits -- coding: utf-8 -- Exploit Title : Core FTP Server v1.2 - BufferOverflow POC Date: 2016-02-22 Author: INSECT.B Facebook : https://www.facebook.com/B.INSECT00 GitHub : binsect00 Blog : http://binsect00.tistory.com Vendor Homepage :...
XM Easy Personal FTP Server 5.8.0 - 'HELP' Remote Denial of Service
Exploit for windows platform in category dos / poc !/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal email protected Date : 18-02-2016 import socket import sys def Usage: print "Usage: ./ftpxmftpdosbackup.py \n" buffer= "A"...
XM Easy Personal FTP Server 5.8.0 - HELP Remote Denial of Service
XM Easy Personal FTP Server 5.8.0 - HELP Remote Denial of Service !/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal [email protected] Date : 18-02-2016 import socket import sys def Usage: print "Usage:...
XM Easy Personal FTP Server 5.8.0 - 'HELP' Remote Denial of Service
!/usr/bin/python XM Easy Personal FTP Server 5.8.0 HELP Denial of Service Tested on : Windows XP SP 3 EN Author : Pawan Lal [email protected] Date : 18-02-2016 import socket import sys def Usage: print "Usage: ./ftpxmftpdosbackup.py \n" buffer= "A" 4500 def starthostname, username, passwd: sock...
[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22
cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...
CVE-2016-2314
GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote authenticated users to cause a denial of service device outage by using the FTP MKD command to create a directory with a long name, and then using certain other commands...
CVE-2016-2314
CVE-2016-2314 affects Huawei SmartAX MT882 devices running GlobespanVirata ftpd 1.0. The underlying issue allows remote authenticated users to trigger a denial of service (device outage) by creating an excessively long directory name with the FTP MKD command and then issuing additional FTP comman...
sos security and bug fix update
3.2-28.0.1.2 - Add vendor, vendor URL info for Oracle Linux orabug 17656507 [email protected] - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 [email protected] - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 [email protected] -...
Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability
Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...
Getdpd Bug Bounty #6 - (Import) Persistent Vulnerability
Document Title: =============== Getdpd Bug Bounty 6 - Import Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1718 Release Date: ============= 2016-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 1718...
FTPShell Client 5.24 Buffer Overflow
++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version: 5.24 + Tested on: Windows XP Professional SP3 Version...
SUSE-SU-2016:0347-1 Security update for curl
This update for curl fixes the following issues: - CVE-2016-0755: libcurl would reuse NTLM-authenticated proxy connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer bsc962983 The following non-security bugs were fixed: -...
[slackware-security] MPlayer
New MPlayer packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/MPlayer-1.220160125-i486-1slack14.1.txz: Upgraded. This is the latest MPlayer-1.2 branch, identical to the...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-38.6.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...
FTPShell Client 5.24 - (Create NewFolder) Local Buffer Overflow
Exploit for windows platform in category local exploits ++++++++++++++++++++++++ + Exploit Title: FTPShell Client Add New Folder Local Buffer Overflow + Date: 2/2/2016 +Exploit Author: Arash Khazaei + Vendor Homepage: www.ftpshell.com +Software Link: http://www.ftpshell.com/download.htm + Version...
VK.com: Внедрение внешних сущностей в функционале импорта пользователей YouTrack
Уязвимость существует из-за возможности использования внешних сущностей XML разметки в функционале импорта пользователей YouTrack. Веб-приложение доступно по адресу youtrack.vk-cdn.net Исходя из документации https://confluence.jetbrains.com/display/YTD6/Import+Users поддерживает импорт данных...
Oracle 9i XDB FTP Pass Overflow
''' Oracle 9i XDB FTP PASS Overflow win32 Ported to python from the Metasploit oracle9ixdbftppass.rb exploit Original exploit: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/oracle9ixdbftppass.rb Description from original exploit: By passing an overly long...
XXEinjector - Tool For Automatic Exploitation Of XXE Vulnerability
XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - fil...
php: Security update (7 CVEs)
The php package has been rebuilt and was uploaded to the Chaos Calmer 15.05 repository due to multiple security issues. VERSION 5.6.8-1 = 5.6.17-1 CHANGELOG Sun, 24 Jan 2016 21:47:52 +0100 18d121b Update to 5.6.17 Fixes CVE-2016-1903. Wed, 23 Dec 2015 16:00:14 -0500 766cfcc Update to 5.6.16 Wed, ...
