Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit (php)

Exploit for windows platform in category remote exploits =================================================================== Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit php =================================================================== ? printr' IIS 6 WEBDAV Exploit &&...

ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption

ZDI-08-049: Microsoft Windows Graphics Rendering Engine PICT Heap Corruption http://www.zerodayinitiative.com/advisories/ZDI-08-049 August 12, 2008 -- CVE ID: CVE-2008-3021 -- Affected Vendors: Microsoft -- Affected Products: Microsoft File Format Vulnerability -- TippingPointTM IPS Customer...

X.org MIT-SHM extension arbitrary memory read

Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...

SHOUTcast DNAS/Linux 1.9.4 Format String Remote Exploit

No description provided by source. / SHOUTcast DNAS/Linux v1.9.4 format string remote exploit / / Damian Put [email protected] Cyber-Crime Team www.CC-Team.org / / Tested on slackware 9.1 and 10.0 0xbf3feee0 / / When exploit only crash SHOUTcast we should calculate new address: / / / / bash-2.05b...

Ubuntu 5.04 / 5.10 / 6.06 LTS : imagemagick vulnerability (USN-337-1)

Damian Put discovered a buffer overflow in imagemagick's SGI file format decoder. By tricking an user or automated system into processing a specially crafted SGI image, this could be exploited to execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted t...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

ia64 crash

perfmon perfmon.c in Linux kernel on IA64 architectures allows local users to cause a denial of service crash by interrupting a task while another process is accessing the mmstruct, which triggers a BUGON action in the putpagetestzero function...

WordPress Core 2.2 - 'wp-app.php' Arbitrary File Upload

!/usr/bin/env perl Wordpress 2.2 and Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-advisory.html use Digest::MD5 qwmd5hex; use LWP::UserAgent; my $ua = new LWP::UserAgent; my $blog = $ARGV0; my $user = $ARGV1; my $pass = $ARGV2; my...

Design/Logic Flaw

The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...

Kiwi CatTools TFTP 3.2.8 - Directory Traversal

Path traversal security vulnerability in Kiwi CatTools TFTP up to 3.2.8 server can lead to information disclosure and remote code execution Risk: High DISCUSSION Kiwi CatTools TFTP server doesn.t properly verify filename in PUT and GET request which can be used to download/upload any file from/to...

GNU InetUtils ftpd 1.4.2 (ld.so.preload) Remote Root Exploit

No description provided by source. FTP server GNU inetutils 1.4.2 Remote Root Exploit This program remotely exploits the most recent versions of GNU inetutils ftpd on linux systems. Requirements: 1. There MUST be a chroot'ed environment for the logged in user 2. Directory etc must be writeable by...

[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability

Sophos Antivirus CHM File Heap Overflow Vulnerability iDefense Security Advisory 12.08.06 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 08, 2006 I. BACKGROUND Sophos AntiVirus offers protection from the latest Trojans, worms and Viruses. More information is available on the vendors...

CVE-2006-6183

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via a long mode field aka transporting mode in a 1 GET or 2 PUT command...

Telnet-FTP Server目录遍历及远程拒绝服务漏洞

Telnet-Ftp Server是一款Windows平台上的多用户Telnet/Ftp服务器。 Telnet-Ftp Server的GET和PUT等命令的处理过程中存在输入验证错误，允许攻击者通过目录遍历攻击列出并下载FTP根目录外的任意文件。 此外，攻击者还可以通过发送两个连续的RETR命令导致服务崩溃。 Sorin Chitu Telnet-FTP Server 1.0 build 1.250 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://slimbyte.sufx.net/...

AT-TFTP / 3CTftpSvc TFTP servers buffer overflow

Buffer overflows in GET and PUT commands...

3Com TFTP Service <= 2.0.1 (Long Transporting Mode) Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================ 3Com TFTP Service = 2.0.1 Long Transporting Mode Overflow PoC ================================================================ !/usr/bin/python Buffer Overflow Long transporting mod...

Tftpd32 GET/PUT Command File Name Handling Overflow

The remote host appears to be running Tftpd32, a tftpd server for Windows. The version of Tftpd32 installed on the remote host appears to be affected by a buffer overflow vulnerability involving long filenames. By leveraging this flaw, a remote attacker may be able to crash the server or to execu...

security flaw

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

CVE-2006-5925 : A flaw in Elinks (and affected smb:// handling) allows a remote attacker to execute arbitrary code when smbclient is installed, by processing crafted smb:// URIs. The issue affects Elinks 0.9.2 and related configurations; Red Hat/CentOS and Ubuntu advisories (RHSA-2006:0742, USN-8...