327 matches found
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...
Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
The mISDNsockrecvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2...
Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic
The packetrecvmsg function in net/packet/afpacket.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2 recvmmsg, or...
UBUNTU-CVE-2013-4514
Multiple buffer overflows in drivers/staging/wlags49h2/wlpriv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveraging the CAPNETADMIN capability and providing a long station-name string, related to the 1...
Memory corruption
Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory corruption and system crash via a DFS share mount operation that triggers use of an unexpected DFS referral name length...
CVE-2013-4247
Off-by-one error in the builduncpathtoroot function in fs/cifs/connect.c in the Linux kernel before 3.9.6 allows remote attackers to cause a denial of service memory corruption and system crash via a DFS share mount operation that triggers use of an unexpected DFS referral name length...
RHEL 5 : kernel (RHSA-2012:0358)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0358 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: Using...
SC DHCP 4.1.2 Denial Of Service
Exploit for windows platform in category dos / poc !/usr/bin/python ''' SC DHCP 4.1.2 4.2.4 and 4.1-ESV 4.1-ESV-R6 remote denial of serviceinfinite loop and CPU consumption/chew via zero'ed client name length http://www.k1p0d.com ''' import socket import getopt from sys import argv def main: args...
kernel: hfs: add sanity check for file name length
Stack-based buffer overflow in the hfsmac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service crash and possibly execute arbitrary code via an HFS image with a crafted len field...
CiscoKits 1.0 TFTP Server DoS (write command)
Exploit for windows platform in category dos / poc !/usr/bin/python Title : CiscoKits CCNA TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory :...
UBUNTU-CVE-2011-1180
Multiple stack-based buffer overflows in the iriapgetvaluebyclassindication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging connectivity to an IrDA infrared...
PT-2011-2023 · Microsoft · Data Access Components +1
Name of the Vulnerable Software and Affected Versions: Microsoft Data Access Components MDAC versions 2.8 SP1 through 2.8 SP2 Windows Data Access Components WDAC version 6.0 Description: The issue is related to an integer signedness error in the SQLConnectW function within the odbc32.dll of...
On the php local includes-vulnerability warning-the black bar safety net
Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...
PT-2010-2142 · Viscom · Viscom Software Movie Player Pro Sdk Activex
Name of the Vulnerable Software and Affected Versions: Viscom Software Movie Player Pro SDK ActiveX version 6.8.0.0 Description: The issue is related to a stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control. This occurs when a long strFontName parameter is passed to t...
SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection (2)
SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection 2 !/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x@domlabs:$ ./smartppc.pl -u...
Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)
Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with 1 a long key name in the xml header or 2 a long charset value, different issu...
TFTP Server 1.3 - Remote Buffer Overflow (Denial of Service) (PoC)
TFTP Server 1.3 - Remote Buffer Overflow Denial of Service PoC Name : TFTPServerMT v 1.3 Remote Buffer Overflow Dos Exploit Author: Umesh Wanve Date: 01-03-2007 Desc: This is latest version of TFTP server. EDI gets overwritten at 246. So code execution may be possible Someone can better write it...
Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)
Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2911.chm 12092006-sophosnamelen.chm milw0rm.com 2006-12-10...
GLSA-200611-25 : OpenLDAP: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200611-25 OpenLDAP: Denial of Service vulnerability Evgeny Legerov has discovered that the truncation of an incoming authcid longer than 255 characters and ending with a space as the 255th character will lead to an improperly...
Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC
No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...