513 matches found
CVE-2014-4643
Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service application crash and possibly execute arbitrary code via a long string in a reply to a 1 USER, 2 PASS, 3 PASV, 4 SYST, 5 PWD, or 6 CDUP command...
Race condition
Race condition in the libreswan.spec files for Red Hat Enterprise Linux RHEL and Fedora packages in libreswan 3.6 has unspecified impact and attack vectors, involving the /var/tmp/libreswan-nss-pwd temporary file...
SuSE 10 Security Update : coreutils (ZYPP Patch Number 7658)
This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. It also fixes a bug : - 702995: Added -L and -P commandline options to...
FreeBSD : tptest -- pwd Remote Stack Buffer Overflow (5486669e-ea9f-11de-bd9c-00215c6a37bb)
SecurityFocus reports : TPTEST is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. %NASLMINLEVEL 70300 C...
KnFTP 1.0.0 Buffer Overflow
!/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/ Date Found: Sept 18th 2011 Tested on: Windows XP SP2/SP3...
KnFTP 1.0.0 Server - Multiple Buffer Overflows (PoC) (SEH)
!/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/ Date Found: Sept 18th 2011 Tested on: Windows XP SP2/SP3...
CrushFTP HTTP Server Stack Buffer Overflow (PWD)
Exploit for windows platform in category remote exploits $Id: CrushFTPHTTPServer.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information ...
SuSE 10 Security Update : coreutils (ZYPP Patch Number 7655)
This update of coreutils fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling users terminal via the TIOCSTI ioctl. This update also fixes the following non-security issues :...
WeBid v1.0.2 Multiple Remote (CSRF) Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
PHP Script Directory Software (sbcat_id) SQL Injection Vulnerability
Exploit for php platform in category web applications == Author: BorN To K!LL - h4ck3r Contact: email protected == Script: PHP script directory software Version: n/a Link: http://www.softbizsolutions.com/script-directory-software.php == 3xploit: path/showcats.php?sbcatid=SQL-Injection 3xample:...
FTPShell 5.1 Stack Buffer Overflow
$Id: ftpshell51pwdreply.rb 10660 2010-10-12 18:39:21Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
NetSarang Xftp 3.0 PWD响应栈溢出漏洞
BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...
Xftp client 3.0 - 'PWD' Remote Overflow
Exploit Title: Xftp client 3.0 PWD Remote Exploit Date: 2010-04-21 Author: zombiefx Software Link: http://www.netsarang.com/download/downxft3.html Version: Xftp 3.0 build 0238 Tested on: Windows XP SP3 Usage: ./xftpexploit The BOF occurs when sending an overly long PWD response. EDB Testing Notes...
Format string
Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow 1 remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP server component when logging is enabled, and allow 2 remote authenticated users t...
stftp <= 1.10 (PWD Response) Remote Stack Overflow PoC
Exploit for linux platform in category dos / poc ====================================================== stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:...
stftp 1.10 - PWD Response Remote Stack Overflow (PoC)
stftp 1.10 - PWD Response Remote Stack Overflow PoC !/usr/bin/python stftp C: " + command else: print"S - C: " + command0:80 + " ..." self.s.sendcommand+'\r\n' def getCommandself, size=1024: ret = self.s.recvsize; if lenret S: " +ret else: print "C - S: " +ret0:80 + " ..." return ret def initself...
CVE-2008-6639
Cross-site request forgery CSRF vulnerability in admin.php in AjaXplorer 2.3.3 and 2.3.4 allows remote attackers to hijack the authentication of administrators for requests that modify passwords via the updateuserpwd action...
CVE-2008-6258
SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...
Graugon Forum 1 - id Command Injection SQL Injection
Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...