BL4 SMTP Server < 0.1.5 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================== BL4 SMTP Server 2 usage if$ARGV 2 $prt = $ARGV1 else $prt = "25" ; $adr = $ARGV0; $prt = $ARGV1; $socket = IO::Socket::INET-newProto="tcp", PeerAddr=$adr, PeerPort=$prt, Reuse=1 or die "Error: ca...

crossfire-server <= 1.9.0 SetUp() Remote Buffer Overflow Exploit

Exploit for linux platform in category remote exploits ================================================================ crossfire-server include include include include include include include include define PORT 13327 // default port define SCPORT 33333 // default shellcode port define SCHOST...

Cerberus FTP Server <= 2.32 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Cerberus FTP Server include include include include define POCSTR "%s" int header; int usagechar filename; int remoteconnect char ip, unsigned short port ; int header printf"\ni KAPDA - Comput...

HomeFtp 1.1 - 'NLST' Denial of Service

/ HomeFtp v1.1 Denial of Service original advisory: http://kapda.ir/advisory-202.html homeftpv1.1xpl.c ---------------------------------------- / include include include include include define POCSTR "USER %s\x0d\x0aPASS %s\x0d\x0aNLST\x0d\x0a" int header; int usagechar filename; int remoteconnec...

CUPS Server 1.1 - GET Denial of Service

/ dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0...

CVE-2002-1921: Undefined Security Weakness

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database...

CVE-2005-1216: Undefined Security Weakness

Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS all predefined packet filter...

CrystalFTP Pro 2.8 - Remote Buffer Overflow

/ CrystalFTP Pro v2.8 Buffer Overflow Exploit 04/25/2005 despite the fact that nobody uses CrystalFTP i had to release a new version that replaces the first one. this overwrites the structured exception handler with a "pop edx pop eax ret" in kernel32.dll. this takes us to a pointer of the next...

[SECURITY] [DSA 687-1] New bidwatcher packages fix format string vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 687-1 [email protected] http://www.debian.org/security/ Martin Schulze February 18th, 2005 http://www.debian.org/security/faq -...

CVE-2002-1463

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

ProFTPd 1.2.9 RC1 - 'mod_sql' SQL Injection

!/usr/bin/perl ProFTPD 1.2.9 rc1 modsql SQL Injection remote Exploit Spaine - 2003 use IO::Socket; if@ARGC 1=Alternate query\n\n"; exit0; ; $server = $ARGV0; $query = $ARGV1; $remote = IO::Socket::INET-newProto="tcp",PeerAddr=$server,PeerPort="21",Reuse=1 or die "Can't connect. \n"; ifdefined$lin...

CVE-2003-0361: Undefined Security Weakness

gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp...

Pserv 2.0 - HTTP Request Parsing Buffer Overflow

Pserv 2.0 - HTTP Request Parsing Buffer Overflow source: https://www.securityfocus.com/bid/6287/info A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this...

DB4Web 3.4/3.6 - Connection Proxy

source: https://www.securityfocus.com/bid/5725/info DB4Web is an application server that allows read and write access to relational databases and other information sources, via the web. The application is available for Windows, Linux, and various Unix platforms. By requesting a specially crafted...

CVE-2001-0751

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers ISN, which allows remote attackers to spoof or hijack TCP connections...

CVE-1999-1291

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...

CVE-2000-1167: Undefined Security Weakness

ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system...

CVE-2001-0163

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

PT-2001-1393 · Microsoft · Wince

Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption (Denial of Service)

Microsoft Internet Explorer 5.0.15.5 - mstask.exe CPU Consumption Denial of Service source: https://www.securityfocus.com/bid/2129/info Microsoft Internet Explorer ships with a task scheduler engine mstask.exe. By default mstask.exe listens between port 1025 to 1220. It is possible for a user to...