CVE-2006-5925

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements...

CVE-2006-5925

CVE-2006-5925 : A flaw in Elinks (and affected smb:// handling) allows a remote attacker to execute arbitrary code when smbclient is installed, by processing crafted smb:// URIs. The issue affects Elinks 0.9.2 and related configurations; Red Hat/CentOS and Ubuntu advisories (RHSA-2006:0742, USN-8...

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

No description provided by source. !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service PoC !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

Clam AntiVirus 0.88.4 - 'rebuildpe' Remote Heap Overflow (PoC)

Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2587.exe.bz2 10172006-clampetiteheap.exe.bz2 milw0rm.com 2006-10-17...

Clam AntiVirus 0.88.4 - rebuildpe Remote Heap Overflow (PoC)

Clam AntiVirus 0.88.4 - rebuildpe Remote Heap Overflow PoC Clam AntiVirus = 0.88.4 rebuildpe Remote Heap Overflow PoC Damian Put pucikatgazeta.pl [email protected] http://overflow.pl https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/2587.exe.bz2...

Clam AntiVirus <= 0.88.4 CHM Chunk Name Length DoS PoC

Exploit for multiple platform in category dos / poc ====================================================== Clam AntiVirus = 0.88.4 CHM Chunk Name Length DoS PoC ====================================================== !/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took...

Clam AntiVirus 0.88.4 - CHM Chunk Name Length Denial of Service (PoC)

!/usr/bin/perl Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability Took Damian Put's poc and shortened it just a little. All credits to Damian Put pucikatgazeta.pl [email protected] www.overflow.pl /str0ke my $clam =...

GLSA-200609-14 : ImageMagick: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200609-14 ImageMagick: Multiple Vulnerabilities Tavis Ormandy of the Google Security Team discovered a stack and heap buffer overflow in the GIMP XCF Image decoder and multiple heap and integer overflows in the SUN bitmap decoder...

Authentication flaw

publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write access to the calendars directory, which allows remote attackers to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filename containing a .php extension and...

PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on autisticiorg\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this works if "phpicalendarpublishing" is set to 1 in config.inc.php\r\n\r\n"; short explaination: phpICal lets users upload/delete files in WebDAV style through PUT / DELETE method;...

GLSA-200601-08 : Blender: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200601-08 Blender: Heap-based buffer overflow Damian Put has reported a flaw due to an integer overflow in the 'getbhead' function, leading to a heap overflow when processing malformed '.blend' files. Impact : A remote attacker...

USN-238-2: Blender vulnerability

Damian Put discovered that Blender did not properly validate a 'length' value in .blend files. Negative values led to an insufficiently sized memory allocation. By tricking a user into opening a specially crafted .blend file, this could be exploited to execute arbitrary code with the privileges o...

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

This module exploits a format string vulnerability in the Nullsoft SHOUTcast server for Windows. The vulnerability is triggered by requesting a file path that contains format string specifiers. This vulnerability was discovered by Tomasz Trojanowski and Damian Put. This module requires Metasploit...

SunFTP directory traversal

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. dot dot characters in various commands, including 1 GET, 2 MKDIR, 3 RMDIR, 4 RENAME, or 5 PUT. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a...

Test HTTP dangerous methods

Misconfigured web servers allows remote clients to perform dangerous HTTP methods such as PUT and DELETE. SPDX-FileCopyrightText: 2000 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Squid DoS Vulnerability

A problem exists in the way the remote Squid proxy server handles a special SPDX-FileCopyrightText: 2001 Adam Baldwin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

security flaw

Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service segmentation fault by aborting the connection during a 1 PUT or 2 POST request, which causes Squid to access previously freed memory...

USN-132-1: ImageMagick vulnerabilities

Damian Put discovered a buffer overflow in the PNM image decoder. Processing a specially crafted PNM file with a small "colors" value resulted in a crash of the application that used the ImageMagick library. CAN-2005-1275 Another Denial of Service vulnerability was found in the XWD decoder...