1120 matches found
Usermin Null Byte Filtering Information Disclosure
The version of Usermin installed on the remote host is affected by an information disclosure vulnerability due to the Perl script 'miniserv.pl' failing to properly filter null characters from URLs. An attacker could exploit this to reveal the source code of CGI scripts, obtain directory listings,...
Grand MA 300 Fingerprint Reader Weak PIN Verification
=== LSE Leading Security Experts GmbH - Security Advisory 2014-07-13 === Grand MA 300 Fingerprint Reader - Weak Pin Verification ------------------------------------------------------------------------ Affected Versions ================= Grand MA 300/ID with firmware 6.60 Issue Overview...
LSE Leading Security Experts GmbH - LSE-2014-07-13 - Granding Grand MA 300 - Weak Pin Verification
=== LSE Leading Security Experts GmbH - Security Advisory 2014-07-13 === Grand MA 300 Fingerprint Reader - Weak Pin Verification ------------------------------------------------------------------------ Affected Versions ================= Grand MA 300/ID with firmware 6.60 Issue Overview...
CVS 1.10.7 - Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1136/info CVS stands for Concurrent Versions Software and is an open-source package designed to allow multiple developers to work concurrently on a single source tree, recording changes and controlling versions. It is...
Cisco Aironet AP1x00 Malformed HTTP GET Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8290/info Cisco Aironet AP1x00 series devices are prone to a denial of service vulnerability upon receipt of a malformed HTTP GET request. Such a request will cause the device to reload. !/usr/bin/perl Cisco Global...
phpBB Links MOD 1.2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl print q phpBB = 2.0.22 - Links MOD = v1.2.2 Remote SQL Injection Exploit Bug discovered by Don Dork: allinurl:links.php?t=search or: Links MOD v1.2.2 by phpBB2.de SQL INJECTION: Exploit:...
CesarFTP 0.99 g Remote CWD Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging,...
Golden FTP Server <= 2.02b Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w Barabas - www.whitehat.co.il - cheers to muts and all peeps at WH. XPSP2 goldenftpserver sploit - bind 4444 use strict; use Net::FTP; my $payload=\x41x260; $payload .=\x65\x82\xa5\x7c;jmpesp $payload .=\x90x32;not really necessary...blah...
ZipWrangler 1.20 (.zip) SEH 0day exploit
No description provided by source. !/usr/bin/perl Title: ZipWrangler 1.20 .zip SEH 0day exploit Author: TecR0c & Sud0 Date: April 24th, 2010 Corelan Reference: http://www.corelan.be:8800/advisories.php?id=CORELAN-10-031 Download: http://www.softpedia.com/get/Compression-tools/ZipWrangler.shtml...
AKoff MIDI Player 1.00 - Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r cr4wl3r\x40linuxmail\x2Eorg gr33tz: str0ke, opt!x hacker, xoron, EA ngel, zvtral, Hmei7, mywisdom, cyberlog, irvian, and all my friend thanks: milw0rm, darkc0de, exploit-db, inj3ct0r,...
gAlan 0.2.1 - Buffer Overflow 0day Exploit
No description provided by source. !/usr/bin/perl kpasa.pl AKA gAlan Buffer Overflow 0day Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 From Static Analysis to 0day Exploit Originally a SecurityTubeCon Presentation, which I'm guessing was canceled...
Apache Tomcat Remote Exploit (PUT Request) and Account Scanner
No description provided by source. ISOWAREZ RELEASE By KINGCOPE - YEAR 2012 -== Apache Tomcat Remote Exploit and Account Scanner ==- the modified pnscan scanner utility scans a range of IPs to find open apache tomcat servers by trying the following login access combinations: tomcat:tomcat...
Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...
SGI InfoSearch 1.0,SGI IRIX 6.5.x fname Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1031/info The InfoSearch package converts man pages and other documentation into HTML web content. The search form uses infosrch.cgi which does not properly parse user input in the 'fname' variable, allowing commands to b...
Simple Machines Forum 1.1.3 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...
Tr Forum 2.0 - SQL Injection / Bypass Security Restriction Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...
TPTEST <= 3.1.7 Stack Buffer Overflow PoC
No description provided by source. !/usr/local/bin/perl TPTEST = 3.1.7 maby also 5.0.2? tptest.sourceforge.net stackbased buffer overflow poc in server client can also be exploit author: ffwd use IO::Socket;$host,$port=@ARGV; $rem=IO::Socket::INET-newProto=tcp,PeerAddr=$host,PeerPort=$port;...
My Gaming Ladder Combo System <= 7.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl host path cmd Dork: Ladder Scripts by http://www.mygamingladder.com...
BL4 SMTP Server < 0.1.5 - Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/perl use IO::Socket; use Socket; my$socket = ; if$ARGV 1 | $ARGV 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = 25 ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto=tcp, PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die Error: cant connect to...
Abe Timmerman zml.cgi File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3759/info zml.cgi is a perl script which can be used to support server side include directives under Apache. It recognizes a simple set of commands, and allows access to cgi parameters and environment variables. It can ru...