NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)

/ Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A" "Ultravox-Avg-Bitrate: 16000\x0D\x0A" "Ultravox-Max-Bitrate: 24000\x0D\x0A"...

NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service (PoC)

NullSoft Winamp 5.3 - Ultravox-Max-Msg Heap Overflow Denial of Service PoC / Nullsoft Winamp include include include define SERVERPORT 80 unsigned char buff1header1= "HTTP/1.0 200 OK\x0D\x0A" "Server: Ultravox 3.0\x0D\x0A" "Content-Type: misc/ultravox\x0D\x0A" "Ultravox-SID: 13381\x0D\x0A"...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

Exploit for unknown platform in category web applications =============================================================== PwsPHP = 1.1 themes/fin.php Remote File Include Vulnerablity ===============================================================...

PwsPHP 1.1 - themesfin.php Remote File Inclusion

PwsPHP 1.1 - themesfin.php Remote File Inclusion ========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP =============...

PwsPHP 1.1 - '/themes/fin.php' Remote File Inclusion

========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...

WiClear <= 0.10 (path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== WiClear = 0.10 path Remote File Include Vulnerabilities ========================================================== wiclear v0.10 Remote File Inclusion Vulnerability Found By: the...

CVE-2006-4239

CVE-2006-4239 describes a PHP remote file inclusion vulnerability in the Outreach Project Tool (OPT), affecting Max 1.2.6 and earlier. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the CRM_inc parameter. The cited sources (NVD/NVD description) confirm the ...

CVE-2006-3878

CVE-2006-3878 concerns Opsware Network Automation System (NAS) 6.0. The issue arises because NAS installs /etc/init.d/mysql with insecure permissions, enabling local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. The root cause is imp...

CVE-2006-3878

Opsware Network Automation System NAS 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql...

DEBIAN-CVE-2006-3376

Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...

Sql injection

SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter...

DSA-1021-1 netpbm-free - insecure program execution

Bulletin has no description...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the VT feed - The type of VT feed Direct, Registered or GPL - The version of the Scanner Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - The...

CVE-2005-4518

Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the maxfilesize parameter to 1 bugfileadd.php, 2 bugreport.php, 3 bugreportadvancedpage.php, and 4 projdocaddpage.php...

rssh -- privilege escalation vulnerability

Pizzashack reports: Max Vozeler has reported a problem whereby rssh can allow users who have shell access to systems where rssh is installed and rsshchroothelper is installed SUID to gain root access to the system, due to the ability to chroot to arbitrary locations. There are a lot of potentiall...

CVE-2002-2148

The CVE covers Lucent Ascend devices: MAX Router 5.0 and earlier, Pipeline Router 6.0.2 and earlier, and DSLTerminator. Affected component/behavior is a UDP port 9 discard handling that causes the device to leak sensitive interface details (hostname, MAC, IP) in the response when an attacker send...

CuteNews <= 1.4.1 (shell inject) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================= CuteNews CuteNews 1.4.1 re...

PHP-Nuke 7.8 - SQL Injection / Remote Command Execution

?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches "Downloads","WebLinks" & "YourAccount" modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...

Cyphor 0.19 - Board Takeover (SQL Injection)

SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...