CVE-2006-0355

CVE-2006-0355 affects Helmsman Research (aka CoolUtils) HomeFtp 1.1. An attacker remotely can cause a denial of service by sending a long USER command followed by a long PASS command and an NLST command. The impact is listed as partial availability (unspecified DoS). The provided documents show a...

CVE-2006-0356: Undefined Security Weakness

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command...

CVE-2006-0355: Undefined Security Weakness

Helmsman Research aka CoolUtils HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command...

DRZES Hms 3.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15644/info DRZES HMS is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application...

War FTP Daemon USER/PASS Overflow

The version of War FTP Daemon running on this host contains a buffer overflow in the code that handles the USER and PASS commands. A potential intruder could use this vulnerability to crash the server, as well as run arbitrary commands on the system. OpenVAS Vulnerability Test $Id:...

War FTP Daemon USER/PASS Overflow

The version of War FTP Daemon running on this host contains a buffer overflow in the code that handles the USER and PASS commands. SPDX-FileCopyrightText: 2003 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

WzdFTPD 0.5.4 - Remote Command Execution

WzdFTPD 0.5.4 - Remote Command Execution 0day0day0day0day0day0day0day ------------------------------- wzdftpd remote exploit by kcope nice call to popen3 on custom site commands... August 2005 confidential! keep private! ------------------------------- 0day0day0day0day0day0day0day . . | // / | | ...

Antigen 8.0 for Exchange/SMTP Rule Vulnerability

====================================================================== - Sybari Antigen for SMTP / Exchange Rule / Attachment Pass through - ====================================================================== 1 Affected Software Sybari Antigen v8.0 SR2 for Exchange/SMTP Other versions may also...

CVE-2005-2850: Undefined Security Weakness

SlimFTPd 3.17 allows remote attackers to cause a denial of service crash via certain 1 USER and 2 PASS commands, possibly due to a buffer overflow or off-by-one error...

PBLang <= 4.65 Remote Command Execution Exploit (2)

No description provided by source. ?php | | | PBLang = 4.65 remote commands exec exploit | | tested on 4.65 | | coded by Pengo 2005 RST/GHC | | http://rst.void.ru | | http://ghc.ru | | | WARNING! This exploit is successfully work when magicquotesrpc off = D:\httpd\phpphp.exe ..\www\r57pblang465.p...

PBLang <= 4.65 Remote Command Execution Exploit (2)

Exploit for unknown platform in category web applications =================================================== PBLang php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV =...

phpkit161.txt

SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1 Version: PHPKit 1.6.1 Risk: High if magicquotesgpc = Off URL: http://www.phpkit.com SQL Injection in include.php?path=login/member.php The parameters usernick and letters are vulnerable to SQL Injections. POC:...

lokiSQL.txt

hi all tow SQL injection in Loki download manager 1. in http://localhost/adm/default.asp user: anyuser pass: 'or''=' 2. in http://localhost/downmancv/catinfo.asp?cat=' union select null,null,user,null,null,null,null,null,pass,null,null,null,null,null FROM tblAdm ' and u will have user and pass h4...

CVE-2004-2074: Undefined Security Weakness

Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service crash via format string specifiers in the 1 PASS or 2 RETR commands...

CVE-2004-1782

athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...

CVE-2004-1782: Undefined Security Weakness

athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter...

CVE-2004-1439: Undefined Security Weakness

Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as 1 USER, 2 PASS, 3 RETR,4 CWD, 5 XMKD, and 6 XRMD...

Seattle Lab Mail (SLmail) 5.5 - POP3 PASS Remote Buffer Overflow (3)

Seattle Lab Mail SLmail 5.5 - POP3 PASS Remote Buffer Overflow 3 / SLMAIL REMOTE PASSWD BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / include include include include // bind 4444 unsigned char shellcode = "\xfc\x6a\xeb\x4d\xe8\xf9\xff\xff\xff\x60\x8b\x6c\x24\x24\x8b\x45"...

WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ==================================================== WSFTP Server WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket =...

Seattle Lab Mail (SLmail) 5.5 - POP3 'PASS' Remote Buffer Overflow (1)

SLmail 5.5 POP3 PASS Buffer Overflow Discovered by : Muts Coded by : Muts www.offsec.com Plain vanilla stack overflow in the PASS command D:\Projects\BOSLmail-5.5-POP3-PASS.py D:\Projects\BOnc -v 192.168.1.167 4444 localhost.lan 192.168.1.167 4444 ? open Microsoft Windows 2000 Version 5.00.2195 C...