Mereo 1.8.0 (Get Request) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================== Mereo 1.8.0 Get Request Remote Denial of Service Exploit ========================================================== import socket import sys print...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

Remote: Yes Local: No Credit: Mike Cyr, aka h00die Vulnerable: NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: Addonics NAS Adapter Post-Auth DoS Addonics NAS Adapter is prone to several post authentication buffer overflows. Each of these buffer overflows will crash the entire TCP/IP stack and...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Zervit Webserver 0.3 Remote Denial Of Service Exploit ===================================================== import socket import sys print...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

No description provided by source. !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested against NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and...

Addonics NAS Adapter (bts.cgi) Remote DoS Exploit (post-auth)

Exploit for hardware platform in category dos / poc ============================================================= Addonics NAS Adapter bts.cgi Remote DoS Exploit post-auth ============================================================= !/bin/bash Addonics NAS Adapter bts.cgi Post-Auth DoS Tested...

Community CMS <= 0.5 Multiple SQLi Vulnerabilities - Active Check

Community CMS is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Turnkey eBook Store <= 1.1 XSS Vulnerability - Active Check

Turnkey eBook Store is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XBMC 8.10 - GET Multiple Remote Buffer Overflows (PoC)

/ XBMC multiple remote buffer overflow vulnerabilities. XBMC is an award winning media center application for Linux, Mac OS X, Windows and XBox. The ultimate hub for all your media, XBMC is easy to use, looks slick, and has a large helpful community.XBMC has won many awards. Affected version: XBM...

WEBJump! Multiple SQLi Vulnerabilities (Mar 2009) - Active Check

WEBJump! is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

phpCommunity2 Multiple Vulnerabilities (Mar 2009) - Active Check

phpCommunity2 is prone to multiple input validation vulnerabilities, including multiple directory traversal issues and SQL-injection issues, and a cross-site scripting issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Addonics NAS Adapter Post-Auth DoS

Remote: Yes Local: No Credit: Michael Cyr Vulnerable: R3282-1.33c LOADER32 1.15, NASU2FW41 Loader 1.17 Not Vulnerable: Discussion: Addonics NAS Adapter Post-Auth DoS Addonics NAS Adapter is prone to several post authentication buffer overflows. Each of these buffer overflows will crash the entire...

commerce35.pair.com Cross Site Scripting

Author: Max Dietz Description: After logging in, the message displayed to the user is stored in a GET request, on which no sanitizing is done PoC: https://commerce35.pair.com/inres/notify/index.php?action=loginform&pstatus=javascript:alert"HELLO";...

Addonics NAS Adapter - (Authenticated) Denial of Service

Addonics NAS Adapter - Authenticated Denial of Service !/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c LOADER32 1.15, and NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a...

Addonics NAS Adapter - (Authenticated) Denial of Service

!/bin/bash Addonics NAS Adapter Post-Auth DoS Tested against R3282-1.33c LOADER32 1.15, and NASU2FW41 Loader 1.17 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: Any of these BoF crashes the entire stack from the web GUI so throw a GET, and bye bye baby! Greetz to muts and loganWHD, I...

Scripts For Sites EZ Hotscripts SQLi Vulnerability (32031) - Active Check

EZ Hotscripts is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 9 : mldonkey-2.9.7-3.fc9 (2009-2108)

Fix remote arbitrary file disclosure via a GET request with more than one leading / slash character in the filename. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

Denial of Service using Partial GET Request in Mozilla Firefox 3.06

No description provided by source. [email protected] wrote: It's been confirmed that this is not problem in IE. Sorry I didn't mention that. \ Microsoft uses Silverlight: GET /index.php?page=Poem/Poem.php HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, ...

Denial of Service using Partial GET Request in Mozilla Firefox 3.06

============================================================ !vuln Mozilla Firefox 3.06 Previous versions may also be affected. ============================================================ ============================================================ !risk Medium There are currently many users usi...

Directory traversal

Directory traversal vulnerability in k23productions TFTPUtil GUI 1.2.0 and 1.3.0 allows remote attackers to read arbitrary files outside the TFTP root directory via directory traversal sequences in a GET request...

phpLD 3.3 Blind SQL Injection

phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or ORDMIDSELECT PASSWORD FROM PLDUS...