436 matches found
PBLang <= 4.65 Remote Command Execution Exploit (2)
Exploit for unknown platform in category web applications =================================================== PBLang php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV =...
PHPNews SQL injection vulnerability
Product: PHPNews Version: 1.2.5 Release, bugfix 1.2.6 and previous URL: http://newsphp.sourceforge.net/ VULNERABILITY CLASS: SQL injection PRODUCT DESCRIPTION PHPNews is a popular script for news posting written in PHP MySQL based. VULNERABILITY Vulnerable script: auth.php code else...
FreeBSD : oops -- format string vulnerability (1033750f-cab4-11d9-9aed-000e0c2e438a)
A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the MySQL/PgSQL authentication module. Succesful exploitation may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Xoops = 2.0.11 xmlrpc.php sql injection exploit by RST/GHC based on http://www.gulftech.org/?node=research&articleid=00086-06292005 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru example: r57xoops.pl -u http://www.xoops2.ru/xmlrpc.php ...
Forum Russian Board 4.2 Full Command Execution Exploit
No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...
Mambo 4.5.2.1 - SQL Injection
Mambo 4.5.2.1 - SQL Injection !/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...
Mambo <= 4.5.2.1 SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================== Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE...
MercuryBoard 1.1.4 - SQL Injection
MercuryBoard 1.1.4 - SQL Injection !/usr/bin/perl MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf RST/GHC -...
MercuryBoard <= 1.1.4 SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================== MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if...
MercuryBoard <= 1.1.4 SQL Injection Exploit
No description provided by source. !/usr/bin/perl MercuryBoard =1.1.4, MySQL = 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf...
Forum Russian Board 4.2 - Full Command Execution
Forum Russian Board 4.2 - Full Command Execution !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru ,...
Mambo <= 4.5.2.1 SQL Injection Exploit
No description provided by source. !/usr/bin/perl Mambo = 4.5.2.1, MySQL = 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 3 $server = $ARGV0; $path = $ARGV1; $memberid = $ARGV2; $newsid = 1; $newsitemid = 1; $server =...
CVE-2004-2095
Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd...
CVE-2004-0230
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...
TCP RST packets spoofing
By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...
CVE-2004-0230
Technical details beyond the public description are not provided in the supplied documents. CVE-2004-0230 describes a TCP sequence-number guessing/RST-injection denial-of-service under large window size; no remediation details are given here.
Old IOS versions ACL protection bypass
Packets with RST+ACK flags are not filtered...
Обход блокировок на CISCO раутере при сканировании сети
Проблема жила достаточно долго, но только сейчас удалось найти причину, по которой пакеты от запрещенных нами адресов проникали в локальную сеть. Итак, есть раутер фирмы CISCO с "биосом" IOS tm 2500 Software C2500-F2IN-L, Version 11.211, RELEASE SOFTWARE fc1. Есть правила на раутере, которые...
Multiple Vendor - TCP Sequence Number Approximation (1)
Multiple Vendor - TCP Sequence Number Approximation 1 // source: https://www.securityfocus.com/bid/10183/info A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may perm...
CVE-2002-0514
PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL...