WPAD Listener

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, browsers are...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Upgrade Attack

Added: 09/30/2013 Background The LLMNR Local Link Multicast Name Resolution protocol is used to answer wpad requests sent by Microsoft Windows. A rogue WPAD server delivers a wpad.dat file to poisoned hosts forcing them to proxy web requests through the SAINT server. In addition, HTTP requests ar...

Remote Anything Player 5.60.15 Denial Of Service

!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...

Windows Object Packager Insecure Execution

Added: 01/24/2012 CVE: CVE-2012-0009 BID: 51297 OSVDB: 78212 Background Windows Object Packager is a tool that can be used to create a package that can be inserted into a file. Problem A vulnerability exists in the way the Windows Object Packager registers and implements packages stored on networ...

#OccupyLondon : The Night of Thousand Masks on 5th November

OccupyLondon : The Night of Thousand Masks on 5th November Anonymous Mask = "A symbol that unites them behind one universal message" . Activists plan to protest on 5th November ,2011 at Saint Pauls Cathedral London 9:00pm - 11:00pm. This going to be "The Night of Thousand Masks". Message By...

#OccupyLondon : The Night of Thousand Masks on 5th November

OccupyLondon : The Night of Thousand Masks on 5th November Anonymous Mask = "A symbol that unites them behind one universal message " . Activists plan to protest on 5th November ,2011 at Saint Pauls Cathedral London 9:00pm - 11:00pm. This going to be "The Night of Thousand Masks ". Message By...

Apple Safari libxslt File Create

Added: 10/24/2011 CVE: CVE-2011-1774 BID: 48840 OSVDB: 74017 Background Safari is a web browser for Mac OS X and Windows. Problem Safari versions prior to 5.0.6 use unsafe security settings when implementing libxslt. An attacker may leverage this weakness by creating a web page that references a...

MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the parsing of an overly long string found in a malicious SAMI subtitle...

Saint Corporation Cross Site Scripting / HTML Injection

SAINT Corporation XSS Defacement Vulnerability Management, Assessment, Penetration Testing SAINT Corporation provides network security tools to financial, government and educational institutions around the world SAINT customers. The SAINT® vulnerability assessment tools are recognized as industry...

Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit)

$Id: quicktftppromode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Design/Logic Flaw

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

CVE-2008-6895

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

CVE-2008-6895

CVE-2008-6895 affects 3CX Phone System 6.0.806.0. The vulnerability enables remote attackers to cause a denial of service (unstable service or crash) via unspecified vectors, as demonstrated by Nessus/SAINT scans. The NVD metrics show a CVSSv2 base score of 7.8 (HIGH) with network access, no auth...

CVE-2008-6895

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

CVE-2008-6895: Undefined Security Weakness

3CX Phone System 6.0.806.0 allows remote attackers to cause a denial of service unstable service or crash via unspecified vectors, as demonstrated by vulnerability scans from Nessus or SAINT...

pumpkin-dos.txt

require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached quicker when hammered repeatedly. , 'Author' = 'Saint...

PumpKIN TFTP Server 2.7.2.0 Denial of Service Exploit (meta)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Udp def initializeinfo = superupdateinfoinfo, 'Name' = 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided wi...

PumpKIN TFTP Server 2.7.2.0 - Denial of Service (Metasploit)

require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached quicker when hammered repeatedly. , 'Author' = 'Saint...

PumpKIN TFTP Server 2.7.2.0 - Denial of Service (Metasploit)

PumpKIN TFTP Server 2.7.2.0 - Denial of Service Metasploit require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached...