HTTP TRACE

Transparent or reverse HTTP proxies may be implement on some sites. OpenVAS Vulnerability Test $Id: httptrace.nasl 6768 2017-07-20 08:06:19Z cfischer $ HTTP TRACE Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; you can redistribute it and/or modify it...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

Apache Remote Command Execution via .bat files

The Apache 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. An attacker can send a pipe character with commands appended as...

Horde IMP status.php3 XSS

The remote host is running at least one instance of Horde IMP in which the status.php3 script is vulnerable to a cross site scripting attack since information passed to it is not properly sanitized. OpenVAS Vulnerability Test $Id: impstatusxss.nasl 6053 2017-05-01 09:02:51Z teissa $ Description:...

ICECast AVLlib remote buffer overflow

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.12. This version is affected by a remote buffer overflow because it does not properly check bounds of data send from clients. As a result of this vulnerability, it is possible for a...

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes. Shellcode exploit for linx86 platform / lnxbinsh4.c - v1 - 21 Byte /bin/sh Opcode Array Payload Copyrightc 2004 c0ntex This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licens...

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes

No description provided by source. / lnxbinsh4.c - v1 - 21 Byte /bin/sh Opcode Array Payload Copyrightc 2004 c0ntex [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes

Exploit for linux/x86 platform in category shellcode ======================================================== linux/x86 /bin/sh Standard Opcode Array Payload 21 Bytes ======================================================== / lnxbinsh4.c - v1 - 21 Byte /bin/sh Opcode Array Payload Copyrightc 2004...

class-1 Forum Software v 0.24.4 Remote code execution

class-1 Forum Software v 0.24.4 Remote code execution software: site: http://www.class1web.co.uk/software description: class-1 Forum Software is a PHP/MySQL driven web forum. It is written and distributed under the GNU General Public License which means that its source is freely-distributed and...

Ventrilo <= 2.3.0 Remote Denial of Service Exploit (all platforms)

No description provided by source. / by Luigi Auriemma Windows compiled version: http://aluigi.altervista.org/poc/ventboom.zip /str0ke / include stdio.h include stdlib.h include string.h / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: [email protected] web:...

PT-2005-3279 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.20 through 0.10.11 Description: The issue is related to unknown vulnerabilities in certain dissectors, which can cause a denial of service. This happens when the application encounters specific packets that lead to a nul...

Microsoft Internet Explorer - blnmgr.dll COM Object Remote (MS05-038)

Microsoft Internet Explorer - blnmgr.dll COM Object Remote MS05-038 !-- placed into html for your testing. /str0ke !/usr/bin/perl Internet Explorer COM Objects Instantiation Proof of Concept Exploit MS05-038 Bindshell on port 28876 - Based and ripped from Berend-Jan Wever's IE Exploit Vulnerable...

MS Internet Explorer (blnmgr.dll) COM Object Remote Expl (MS05-038)

Exploit for unknown platform in category remote exploits ====================================================================== MS Internet Explorer blnmgr.dll COM Object Remote Exploit MS05-038 ====================================================================== !-- placed into html for your...

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow

Microsoft Internet Explorer - javaprxy.dll COM Object Remote Overflow Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx...

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx sec-consult - http://www.sec-consult.com/184.html Solution : Set Internet and...

MS Internet Explorer DHTML Object Memory Corruption Exploit

No description provided by source. HTML!-- ,sSSSs, Ss, Internet Exploiter 2 v0.1 SS" YS' 'Ss. MSIE R6025 Multithreading issue PoC exploit iS' ,SS" Copyright C 2003, 2004 by Berend-Jan Wever. YS, .ss ,sY" http://www.edup.tudelft.nl/bjwever "YSSP" sSS [email protected] This program is free...

PaX Double-Mirrored VMA munmap Local Root Exploit

No description provided by source. / PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This exploit has only been tested on Debian 3.0 running Linux 2.4.29 patched with grsecurity-2.1.1-2.4.29-200501231159 $ gcc paxomatic.c $ ./chpax -m a.out $ ./a.out ... usage...

PaX Double-Mirrored VMA munmap Local Root Exploit

Exploit for linux platform in category local exploits ================================================= PaX Double-Mirrored VMA munmap Local Root Exploit ================================================= / PaX double-mirrored VMA munmap local root exploit Copyright C 2005 Christophe Devine This...

CVE-2005-0406

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed from the main JPEG image...

Painkiller 1.35 - in-game cd-key alpha-numeric Buffer Overflow (PoC)

/ by Luigi Auriemma / include include include include / Painkiller packet's password encoder/decoder 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ When you want to join a password protected game server of Painkiller...