Lucene search
K

211 matches found

exploitpack
exploitpack
added 2014/07/21 12:0 a.m.29 views

Apache 2.4.7 mod_status - Scoreboard Handling Race Condition

Apache 2.4.7 modstatus - Scoreboard Handling Race Condition -- 0. Sparse summary Race condition between updating httpd's "scoreboard" and modstatus, leading to several critical scenarios like heap buffer overflow with user supplied payload and leaking heap which can leak critical memory containin...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2014/04/16 12:0 a.m.39 views

AIX OpenSSL Advisory : openssl_advisory2.asc

The version of OpenSSL running on the remote host is affected by the following vulnerabilities : - ssl/t1lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service crash, and possibly obtain sensitive information in applications that use...

7.6CVSS8.2AI score0.22145EPSS
Exploits0References8
Kitploit
Kitploit
added 2014/03/04 10:43 p.m.15 views

[WiFi Network Monitor] Tool to Watch/Monitor your Wireless network from hackers/rogue/unauthorised users

WiFi Network Monitor is the free tool to remotely scan and discover all the systems connected to your Wireless network. It helps you to keep a watch on your Wi-Fi network and safe guard it from Hackers as well as other unauthorised users. Its swift scan powered by 'ARP based Multi-threading'...

7.1AI score
Exploits0
Kitploit
Kitploit
added 2014/02/02 12:23 a.m.15 views

[TYFYP] Massive Telnet Password Tester

Commercial name: TYFYP Thank you for your password, to the honor of ADTRAN telnet banner motd welcome message. Please use it ONLY in LAN IPs. This is a very rudimentary program only for investigation purposes. Developed on Retina Display machine, so there may be UI errors in normal resolution...

7.3AI score
Exploits0References5
Fedora
Fedora
added 2010/11/21 1:28 a.m.17 views

[SECURITY] Fedora 14 Update: suricata-1.0.2-1.fc14

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

0.2AI score
Exploits0
OSV
OSV
added 2010/11/17 4:0 p.m.6 views

CVE-2010-3864

Multiple race conditions in ssl/t1lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to 1 the T...

8.3AI score
Exploits0References40
NVD
NVD
added 2010/11/17 4:0 p.m.18 views

CVE-2010-3864

Multiple race conditions in ssl/t1lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to 1 the T...

7.6CVSS7.9AI score0.22145EPSS
Exploits0References39
CVE
CVE
added 2010/11/17 3:0 p.m.246 views

CVE-2010-3864

CVE-2010-3864 involves a race condition in the OpenSSL TLS server extension parsing (ssl/t1_lib.c) when OpenSSL is used in multi‑threaded servers with internal caching, which can lead to a heap-based buffer overflow. Affected OpenSSL versions include 0.9.8f–0.9.8o and 1.0.0/1.0.0a. The issue can ...

7.6CVSS7.2AI score0.22145EPSS
Exploits0References39Affected Software1
exploitpack
exploitpack
added 2009/11/22 12:0 a.m.15 views

PHP - MultiPart Form-Data Denial of Service (PoC)

PHP - MultiPart Form-Data Denial of Service PoC !/usr/bin/python PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print "" prin...

Exploits0
myhack58
myhack58
added 2006/02/16 12:0 a.m.22 views

The PERL foundry Multi-threading+support Chinese crack SQL automatically injected into the guessing machine-vulnerability warning-the black bar safety net

Say toSQL injectionmachine, from the doll for moving the web article dvTxt. pl to the smelly bum peerless guess CSC, NB Alliance, NBSI, we have used? 开 天 始祖 dvTxt.pl also don't be changed how many times, to be used for a variety of differentSQL injectionthe vulnerability of the system, usually th...

7.5AI score
Exploits0
Exploit DB
Exploit DB
added 2005/05/02 12:0 a.m.38 views

Microsoft Windows - WINS Vulnerability + OS/SP Scanner

/ HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------ ------------------------------------ Note: ---------------- By default, nothing printed on screen, 200 threads, all results in the file HSWINS.txt -v..: lite verbose, will print the 'NOTPATCHED' results on the screen...

7.4AI score
Exploits0
Rows per page
Query Builder