CVE-2008-5017: Undefined Security Weakness

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service crash via unknown vectors...

MemHT Portal 4.0 - Remote Code Execution

MemHT Portal 4.0 - Remote Code Execution !/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code...

FTP Now 2.6 Server Response Remote Crash PoC

Exploit for unknown platform in category dos / poc ============================================ FTP Now 2.6 Server Response Remote Crash PoC ============================================ !/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now versio...

FTP Now 2.6 Server - Response Remote Crash (PoC)

FTP Now 2.6 Server - Response Remote Crash PoC !/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now version 2.6 Server Response PoC Usage: ./ftpnow.pl IP Download Link : http://www.network-client.com/ftpnow/FTPNow26.exe Details: The response is...

FTP Now 2.6 Server - Response Remote Crash (PoC)

!/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now version 2.6 Server Response PoC Usage: ./ftpnow.pl IP Download Link : http://www.network-client.com/ftpnow/FTPNow26.exe Details: The response is broken into buffers, either at length 1024, or ...

Linux kernel 'fs/direct-io.c'本地拒绝服务漏洞

BUGTRAQ ID:31515 CVE ID：CVE-2007-6716 CNCVE ID：CNCVE-20086716 Linux是一款开放源代码的操作系统。 Linux内核Direct-IO实现存在一个缺陷，本地攻击者可以利用漏洞进行拒绝服务攻击。 dio-mapbh.bbdev没有通过directioworker初始化，在dodirectIO处理中，diogetpage会返回EFAULT，引起之后的代码不能初始化dio-mapbh，并直接返回错误。但是在directioworker中没有处理这个错误。 S.u.S.E. SLE SDK 9 S.u.S.E...

mIRC 6.34 Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat at hotmail . com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog fo...

mIRC 6.34 - Remote Buffer Overflow

mIRC 6.34 - Remote Buffer Overflow !/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for...

mIRC 6.34 - Remote Buffer Overflow

!/usr/bin/perl mIRC 6.34 Remote Buffer Overflow Exploit Exploit by SkD skdrat hotmail com ---------------------------------------- A day's work of debugging and looking at mIRC. Tested on Windows XP SP3 English and Windows Vista SP0. Credits to securfrog for publishing the PoC. Author has no...

mirc-overflow.txt

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

mIRC 6.34 - Remote Buffer Overflow (PoC)

mIRC 6.34 - Remote Buffer Overflow PoC Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr ...

mIRC 6.34 - Remote Buffer Overflow (PoC)

Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr = 'localhost', LocalPort = 6667, Proto ...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

kernel: dio: zero struct dio with kzalloc instead of manually

fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service OOPS, as demonstrated by a certain fio test...

fhttpd 0.4.2 un64() Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3...

fhttpd 0.4.2 un64() Remote Denial of Service Exploit

Exploit for linux platform in category dos / poc ==================================================== fhttpd 0.4.2 un64 Remote Denial of Service Exploit ==================================================== !/usr/bin/perl Jeremy Brown email protected/http://jbrownsec.blogspot.com...

fhttpd 0.4.2 - un64() Remote Denial of Service

fhttpd 0.4.2 - un64 Remote Denial of Service !/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-...

fhttpd 0.4.2 - 'un64()' Remote Denial of Service

!/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-2 c3=rptr3; else c3=-2; gdb bt 0 0x0804b42d i...

Fedora 9 : tomcat5-5.5.27-0jpp.2.fc9 (2008-8113)

Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.2 - add commons-io symlink - Mon Sep 15 2008 David Walluck 0:5.5.27-0jpp.1 - 5.5.27 Resolves: rhbz456120 Resolves: rhbz457934 Resolves: rhbz446393 Resolves: rhbz457597 Note that Tenable Network Security has extracted the preceding description block...

CVE-2007-6716

fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service OOPS, as demonstrated by a certain fio test...