Fortinet FortiClient OpenSSL Security Bypass

FortiClient, a client-based software solution intended to provide security features for enterprise computers and mobile devices, is installed on the remote Windows host. The installed FortiClient version uses a vulnerable OpenSSL library that contains a flaw with the handshake process. The flaw...

NWHT - Network Wireless Hacking Tools

Network Wireless Hacking Tools, new version and support your kali linux. Download NWHT...

Smart LED Lightbulbs Can be Hacked too; Vulnerability exposes Wi-Fi Passwords

Until now, we have seen how different smart home appliances such as refrigerators, TVs and routers could expose our private data, but now you can add another worry to your list —LED light bulb. Don’t laugh! It’s true. Researchers at UK security firm Context have formulated an attack against the...

Fedora 20 : mediawiki-1.21.11-1.fc20 (2014-7779)

bug 65839 SECURITY: Prevent external resources in SVG files. - bug 66428 MimeMagic: Don't seek before BOF. This has weird side effects like only extracting the tail of the file partially or not at all. Note that Tenable Network Security has extracted the preceding description block directly from...

Cygnus Network Security 4.0/KerbNet 5.0,MIT Kerberos 4/5,RedHat 6.2 Compatibility krb_rd_req() Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/1220/info Several buffer overflow vulnerabilities exist in Kerberos 5 implmenetations due to buffer overflows in the Kerberos 4 compatability code. These include MIT Kerberos 5 releases 1.0.x, 1.1 and 1.1.1, MIT Kerberos ...

Cisco EPC3925 - Persistent Cross Site Scripting

No description provided by source...

AOL Desktop 9.6 - (.rtx) Buffer Overflow

No description provided by source. !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If...

YahooPOPs <= 1.6 SMTP Remote Buffer Overflow Exploit

//Diabolic Crab's exploit for YahooPOPs = 1.6 SMTP //[email protected] //www.hackerscenter.com //For more work check out, http://icis.digitalparadox.org //This was done at 4 am so escuse the messy code if any //Good job class101 on the windows version ; include stdio.h include stdlib.h...

Pirch IRC 98 Client - (response) Remote BOF Exploit (SEH)

No description provided by source. !/usr/bin/python Usage : python pirch.py | || | / \ | | | | | | | | | - | | | / / | | |||| || // / |\ || Bug : Pirch IRC 98 Client response Remote BOF Exploit SEH Tested on : Xp sp3 ENVB Ref : Bid 5079 Exploited by : His0k4 Greetings : All friends DZ from socket...

The Includer CGI <= 1.0 - Remote Command Execution (1)

No description provided by source. !/usr/bin/perl Target - The Includer CGI = 1.0 Based on - http://www.milw0rm.com/id.php?id=862 Info about bug - Stupid use Open function. If you want know more visit our home page at nst.void.ru use IO::Socket; if @ARGV 3 print \n Includer CGI = 1.0 Network...

3Com 3CRADSL72 ADSL Wireless Router Information Disclosure and Authentication Bypass Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11408/info 3Com 3CRADSL72 is reported prone to an information disclosure, and an authentication bypass vulnerability. This issue can allow a remote attacker to disclose sensitive information such as the router name, prima...

PeerFTP Server <= 4.01 - Remote Crash PoC

No description provided by source. !/usr/bin/python PeerFTP Server =v4.01 Remote Crash PoC written by localh0t Date: 19/03/12 Contact: [email protected] Follow: @mattdch www.localh0t.com.ar from socket import import sys, struct, os if lensys.argv 3: print \nPeerFTP Server =v4.01 Remote Crash PoC...

Counter Strike 2D <= 0.1.0.1 - Denial of Service Vulnerability

No description provided by source. / Counter Strike 2D DoS Affected versions: 0.1.0.1 and prior CS2D Developer: http://www.cs2d.com/ by Iman Karim [email protected] http://home.inf.fh-rhein-sieg.de/ikarim2s/ Written in Borland C++ Builder 6 20.09.2005 / include winsock.h...

BakBone NetVault Remote Heap Overflow

No description provided by source. $Id: bakbonenetvaultheap.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Gauntlet Firewall 4.1/4.2/5.0,WebShield E-ppliance 100.0/300.0,IRIX 6.5.x Remote Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was...

Sophos Products - Multiple Vulnerabilities

No description provided by source. List, I've completed the second paper in my series analyzing Sophos Antivirus internals, titled Practical Attacks against Sophos Antivirus. As the name suggests, this paper describes realistic attacks against networks using Sophos products. The paper includes a...

Google Chrome Silent HTTP Authentication

No description provided by source. Exploit Title: Google Chrome Silent HTTP Authentication Date: 2-5-2013 Exploit Author: T355 Vendor Homepage: http://www.google.com/chrome Version: 24.0.1312.57 Tested on: Tested on: Windows 7 & Mac OSX Mountain Lion CVE : n/a VULNERABILITY DETAILS The latest...

Network Security Wizards Dragon-Fire IDS 1.0 Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/564/info The Dragon-Fire IDS remote web interface under version 1.0 has an insecure CGI script which allows for users to remotely execute commands as the user nobody. This could lead to a remote compromise of the system...

Qualcomm qpopper 3.0/3.0 b20 Remote Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/830/info There is a buffer overflow vulnerability present in current 3.x versions of Qualcomm popper daemon. These vulnerabilities are remotely exploitable and since the daemon runs as root, the host running qpopper can b...

D-link DSL-2760U-E1 - Persistent XSS

No description provided by source. !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks if you are root if...