12212 matches found
NetSuite 1.0/1.2 HTTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8197/info The HTTP component of NetSuite has been reported prone to a directory traversal vulnerability. Various combinations of encoded directory traversal sequences may be used to break out of the web root directory...
WebDAV - Application DLL Hijacker
No description provided by source. $Id: webdavdllhijacker.rb 10454 2010-09-24 01:11:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Apple Quicktime for Java 7 - Memory Access
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
miniweb 0.8.19 Multiple Vulnerabilities
No description provided by source. MiniWeb Multiple Vulnerabilities Introduction MiniWeb is a mini HTTP server implementation written in C language, featuring low system resource consumption, high efficiency, good flexibility and high portability. It is capable to serve multiple clients with a...
Sun Java JRE getSoundbank file:// URI Buffer Overflow
No description provided by source. $Id: javagetsoundbankbof.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
MiniWeb (Build 300) Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
KarjaSoft Sami HTTP Server 1.0.4/1.0.5/2.0.1 Request Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22159/info Sami HTTP Server is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the server application, denying further service to legitimate users. import socket...
MyServer 0.4.1 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8010/info MyServer HTTP server has been reported prone to a remote denial of service attack. The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via...
Cisco WLC 4402 - Basic Auth Remote Denial of Service (meta)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Tcp include Msf::Auxiliary::Dos def initializeinfo = superupdateinfoinfo, 'Name' = 'Cisco WLC 4200 Basic Auth Denial of Service', 'Description' = %q This module triggers a Denial o...
Sambar Server 4.4/5.0 pagecount File Overwrite Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3091/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar WWW Server is bundled with a sample script'pagecount' which creates temporary files on the host. However, it is possib...
Xerver HTTP Server <= 4.32 - Remote Denial of Service
No description provided by source. Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver...
Sun Java Applet2ClassLoader - Remote Code Execution Exploit
No description provided by source. $Id: javacodebasetrust.rb 11983 2011-03-16 05:01:29Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Netgear WGR614v9 - Wireless Router Get Request Denial of Service Vuln
No description provided by source. LUNOSEC ADVISORY Synopsis: Denial of Service condition in Netgear's WGR614v9 Wireless Router Firmware version tested: v1.2.214.0.13NA LATEST Firmware version tested: WNR834Bv2 v2.0.82.0.8 GTADarkDude tested Proof of Concept: Appending a question mark to the...
WebFS 1.x Long Pathname Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8726/info It has been discovered that WebFS is prone to a buffer overrun vulnerability when handling path names of excessive length. As a result, an attacker may be capable of triggering the condition and overwriting...
Opera 7.22 - File Creation and Execution Exploit (Webserver)
No description provided by source. !/usr/bin/perl Sample code of Opera 7 Arbitrary File Auto-Saved Vulnerability. This Exploit will run a webserver that will create and execute a batch file on the victim's computer when visiting this malicious server This perl script is a small HTTP server for a...
Phusion Webserver 1.0 Long URL Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4119/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver does not perform sufficient bounds checking of externally supplied data. As a result, ...
guido frassetto sedum http server 2.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server. Requesting a specially crafted URL composed of '../' or '.../' sequences will disclose the requested file...
Sami HTTP Server 2.0.1 GET Request Denial of Service Exploit
No description provided by source...
Integard Home and Pro 2 - Remote HTTP Buffer Overflow Exploit
No description provided by source. class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient def initializeinfo = superupdateinfoinfo, 'Name' = 'Integard Home/Pro version 2.0', 'Description' = %q Exploit for Integard HTTP Server, vulnerability discovered by Lincoln , 'Author...
Internet Explorer Winhlp32.exe MsgBox Code Execution
No description provided by source. $Id: ms10022ievbscriptwinhlp32.rb 10504 2010-09-28 16:19:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...