7892 matches found
BF and XSS vulnerabilities in Zyxel P660RT2 EE
Hello 3APA3A! These are Brute Force and Cross-Site Scripting vulnerabilities in Zyxel P660RT2 EE ADSL Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: Zyxel P660RT2 EE. ZyNOS Firmware Version: V3.40 AXN.1. This model with other firmware...
Kolibri WebServer buffer overflow
Buffer overlow on oversized POST request...
Senkas Kolibri WebServer 2.0 Buffer Overflow Exploit
Senkas Kolibri WebServer version 2.0 is vulnerable to remote code execution via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the application's binary itself, which once executed, will allow the...
Senkas Kolibri WebServer 2.0 Buffer Overflow
Exploit Details ------------------ Senkas Kolibri WebServer 2.0 available at http://www.senkas.com/kolibri/download.php is vulnerable to RCE via an overly long POST request. Sending the exploit will result in a SEH overwrite, which can then be use to redirect execution to a POP POP RET within the...
Raritan PowerIQ 4.1.0 - SQL Injection Vulnerability
Exploit for linux platform in category web applications =begin Raritan PowerIQ suffers from an unauthenticated SQL injection vulnerability within an endpoint used during initial configuration of the licensing for the product. This endpoint is still available after the appliance has been fully...
D-Link Devices - 'info.cgi' POST Buffer Overflow (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link info.cgi POST Request Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerabili...
D-Link info.cgi POST Request Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link info.cgi POST Request Buffer Overflow', 'Description' = %q This module exploits an anonymous remote code execution vulnerabili...
BoltWire 4.10 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Vulnerability in BoltWire, which can be exploited to execute arbitrary PHP code on the target system and gain complete control over vulnerable web application. 1 Unrestricted Upload of File with Dangerous Type in BoltWire: CVE-2014-4169 The...
Wordpress Booking Calendar 4.1.4 - CSRF Vulnerability
No description provided by source. Exploit Title: CSRF Plugin Booking Calendar 4.1.4 ? WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Version : 4.1.4 Contacts...
WireShark < 0.99.6 MMS Remote Denial of Service Exploit
No description provided by source. include winsock2.h include stdio.h pragma commentlib, ws232 char http = POST / HTTP/1.0\r\n Content-Type: application/vnd.wap.mms-message\r\n; char hoststr = Host: %s:%d\r\n; char contentlenstr = Content-Length: %d\r\n\r\n; unsigned char mms =...
LibHTTPD 1.2 POST Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6172/info LibHTTPD is vulnerable to a buffer overflow condition. By passing a POST request of excessive length, it is possible to overrun a static buffer. This may result in sensitive locations in memory being overwritten...
Beetel 450TC2 Router Admin Password CSRF Vulnerability
No description provided by source. ??!-- Exploit Title: Beetel 450TC2 Router Admin Password Cross Site Request Forgery Vulnerability Date: 30/04/2014 Exploit Author: shyamkumar somana Vendor Homepage: www.beetel.in Version: 450TC2 - Firmware version : TX6-0Q-005retail Tested on: Windows 8 Beetel...
Ultra Mini HTTPD 1.21 - POST Request Stack Buffer Overflow
No description provided by source. Exploit Title: Ultra Mini HTTPD stack buffer overflow POST request Date: 16 Feb 2014 Exploit Author: Sumit Vendor Homepage: http://www.picolix.jp/ Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Version: 1.21 Tested on: Windows XP Professiona...
Monkey HTTP Server 0.4/0.5 Invalid POST Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6096/info A denial of service vulnerability has been reported for Monkey HTTP server. The vulnerability is due to inadequate checks being performed when decoding POST requests. An attacker can exploit this vulnerability b...
Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval() Perl Code Evaluation RCE
No description provided by source. Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnteval Perl Code Evaluation RCE pre auth/SYSTEM Tested against: Microsoft Windows 2003 r2 sp2 download url: http://download.novell.com/index.jsp search Privileged User Manager file tested:...
HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflow
No description provided by source. $Id: hpnnmovwebsnmpsrvovutil.rb 12096 2011-03-23 15:44:55Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
DBHcms <= 1.1.4 - Remote File Inclusion exploit
No description provided by source. !/usr/bin/perl DBHcms = 1.1.4 Remote File Inclusion exploit Vendor url: www.drbenhur.com exploit is hard to execute through a browser -possible though- since it's with POST Iron http://www.randombase.com require LWP::UserAgent; Shell: ?php...
FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution
No description provided by source. ?php / -------------------------------------------------------------------------- FreeWebshop = 2.2.9 R2 ajaxsavename.php Remote Code Execution Exploit -------------------------------------------------------------------------- author.............: Egidio Romano...
Microsoft Foundation Class Library 7.0 ISAPI Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5188/info The Microsoft Foundation Class Library is a library used to develop applications for Microsoft Windows. Some versions of the MFC include an ISAPI class, which can be used to construct applications which extend w...
HP OpenView NNM nnmRptConfig nameParams Buffer Overflow
No description provided by source. $Id: hpnnmnnmrptconfignameparams.rb 12085 2011-03-23 03:37:18Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...