CVE-2019-19941

CVE-2019-19941 affects Swisscom Centro Grande routers present before version 6.16.12. The flaw is missing hostname validation in the DNS service, allowing a remote attacker to craft DHCP hostnames that inject the attacker's local IP as a domain entry, which can result in cross-site scripting via ...

CVE-2019-19941

Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS...

SSRF/XSPA in ImporterSetupPage

h2. A security bug has been found in Jira Server. Administrator users can test local IP addresses/ports and determine whether they're open or closed. To reproduce: h2. Initial setup - Download https://www.atlassian.com/software/jira/download, install, and start up Jira Software Server. Note: I...

Cisco ASA Next-Generation Firewall Services Security Bypass Vulnerability

Cisco ASA Next-Generation Firewall Services is the United States Cisco Cisco a set of next-generation firewall products running in the next generation of modular security services suite. A security bypass vulnerability exists in the Create Default IP Blocking process in Cisco ASA Next-Generation...

Design/Logic Flaw

A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that could allow an unauthenticated, remote attacker to send traffic to the local IP address of the device, bypassing any filters that are configured to...

Rejetto HTTP File Server 2.3.x Remote Code Execution

!/usr/bin/python Exploit Title: HttpFileServer 2.3.x Remote Command Execution Google Dork: intext:"httpfileserver 2.3" Date: 04-01-2016 Remote: Yes Exploit Author: Avinash Kumar Thapa aka "-Acid" Vendor Homepage: http://rejetto.com/ Software Link: http://sourceforge.net/projects/hfs/ Version: 2.3...

Filezilla Client 2.2.X - SEH Buffer Overflow Exploit

No description provided by source. !/usr/bin/env python2 coding: utf-8 import os,socket,threading,time import traceback visit: ly0n.me greetz: NBS MSGBOX "BrokenByte" msgbox = "\x68\x6e\x33\x72\x00\x68\x75\x74" "\x69\x30\x68\x5e\x58\x65\x63\x89" "\xe3\x68\x20\x20\x20\x00\x68\x68"...

FileZilla Client 2.2.x - Remote Buffer Overflow (SEH)

Exploit Title: Filezilla client 2.2.X SEH buffer overflow exploit Date: 02/08/2015 Exploit Author: ly0n Vendor Homepage: filezilla-project.org/ Software Link: http://www.oldapps.com/filezilla.php?app=7cdf14e88e9dfa85fb661c1c6e649e90 Version: tested on filezilla 2.2.21 Tested on: Windows XP sp3...

WebRTC Found Leaking Local IP Addresses

A recently publicized hole in WebRTC, a protocol for web communication, is revealing the local IP addresses of users, even those who go to extra lengths to hide theirs by using a virtual private network. Daniel Roesler, a San Francisco-based researcher who’s dabbled in encryption, posted a...

No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow

To be easily portable, the client is written in C, with minimal dependencies. So far so good, but the problem is, it is plagued of buffer overflows. import os binary = "./noip-2.1.9-1/binaries/noip2-i686" shellcode = "\xeb\x1f\x5e\x89\x76\x08\x31\xc0\x88\x46\x07\x89\x46\x0c\xb0\x0b"...

WhiteCat logcleaner version 1.0 [edition]

Данная утилита предназначена для системных администраторов для: 1. Контроля размера лог-файлов на сервере 2. Для проверки на уязвимость своего сервера на возможность доступа к лог-файлам сервера Любое иное использование скрипта преследуется по закону Клинеры все эти конечно круто, но во многих по...

Motorola SB5101 Hax0rware Rajko HTTPd - Remote Denial of Service (PoC)

!/usr/bin/perl Motorola SB5101 Hax0rware Rajko HttpD Remote Exploit PoC Author: Dillon Beresford Date: 6/6/2010 Vendor: SBHacker & Motorola Software Link: http://www.sbhacker.net/forum/index.php Tested on Hax0rware 1.1 R30, R32 and R39 Description: Motorola SB5101 Hax0rware Rajko HttpD Remote...

VBS script in system security in eight the clever application-vulnerability warning-the black bar safety net

VBS script virus a large number of popular brings us to the VBS function with a new understanding, now everyone on the it also began to pay attention to it. VBS code in local is by the Windows Script HostWSHinterpreter execution. VBS script to perform without the WSH, the WSH is Microsoft offers ...

VBS script in system security in eight the clever application-vulnerability warning-the black bar safety net

VBS script virus a large number of popular brings us to the VBS function with a new understanding, now everyone on the it also began to pay attention to it. VBS code in local is by the Windows Script HostWSHinterpreter execution. VBS script to perform without the WSH, the WSH is Microsoft offers ...

CVE-2004-0950

NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via 1 a NetOp HELO request, or 2 when responses are disabled, a "custom" HELO request...