MySQL Database Client Detection

Binary data 5136.prm...

trixbox Version Detection

Binary data 4576.prm...

Morpheus Detection

Binary data 2055.prm...

CGI:IRC Server Detection

Binary data 3530.prm...

POP SSL/TLS Server Detection

Binary data 4000.prm...

Sun Jconsole Detection

Binary data 4581.prm...

NFS File Detection

Binary data 5071.prm...

03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance

TITLE: 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance SUMMARY Cross Site Scripting bug in the 'delhomepage.cgi' CGI binary in the NetScreen-SA 5000 Series SSL VPN appliance. DETAILS There exists a cross-site scripting bug in 'row' parameter of the 'delhomepage.cgi' CGI binary...

CVE-2003-0790

...

[Full-Disclosure] MS03-039 - Exploit ...

from nessus lol The script code starts here function dcomrecvsocket localvar buf, len; buf = recvsocket:socket, length:10; ifstrlenbuf != 10return NULL; len = ordbuf8; len += ordbuf9256; buf += recvsocket:socket, length:len - 10; return buf; port = 135; if!getportstateportport = 593; else soc =...

The Analysis of LSD's Buffer Overrun in Windows RPC Interface by Xfocus [Moderator: new targets in exploit code]

The Analysis of LSD's Buffer Overrun in Windows RPC Interface Author:Flashsky site:www.xfocus.org WWW.VENUSTECH.COM.CN WWW.SHOPSKY.COM Email:[email protected] Translator:Benjurry Email:[email protected] Code by Flashsky and Benjurry http://www.xfocus.org/documents/200307/2.html Foreword On Ju...

[SecurityOffice] Enceladus Server Suite v3.9 Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Enceladus Server Suite v3.9 Buffer Overflow Vulnerability -- - -- Type Buffer Overflow - -- Release Date December 09, 2002 - -- Product / Vendor Enceladus Server Suite is an Internet/Intranet lightweight Web and FTP Server for Windows, provides...

SecuRemote usernames can be guessed or sniffed using IKE exchange

SecuRemote usernames can be guessed or sniffed using IKE exchange Introduction: ------------- While performing a VPN security analysis for one of our customers, I discovered a potential issue with Firewall-1 SecuRemote IKE which can allow usernames to be guessed. I also observed the related issue...

texis(CGI) Path Disclosure Vulnerability

Advisory: texisCGI Path Disclosure Vulnerability Application: Thunderstone's texisCGI Release Date: 02.05.02 Severity: Any user can send an invalid path to texisCGI causing it to reveal the full path to the webroot. In some cases texis will display system specific informationOS, processor type...

numerous holes

+-----------------------------------------------------------+ | Independent Security Analysis | | "Security Vulnerabilities That Matter" | | | ++ / wwwwais.c is a CGI-based application that provides a frontend to several WAIS query tools. I was unable to locate the main distribution site for it,...

Sendmail 8.11.x (Linuxi386) - Local Privilege Escalation

Sendmail 8.11.x Linuxi386 - Local Privilege Escalation / sendmail 8.11.x exploit i386-Linux by [email protected] sd@ircnet This code exploits well-known local-root bug in sendmail 8.11.x, 8.12.x may be vulnerable too, but I didn't test it. It gives instant root shell with +s sendmail 8.11.x, x 6 We're usi...

Microsoft Windows SMB Service Enumeration

This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain, using the SMB protocol, the list of active and inactive services of the remote host. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. include"compat.inc";...

unsigned.cab.exploit.txt

Vulnerability details and example exploit for Microsoft Active Setup control's unsigned CAB file execution vulnerability. Introduction Microsoft's Active Setup Control asctrls.ocx shipped with Internet Explorer 4 and above has a vulnerability in it as discovered by Juan Carlos Garcia Cuartango ,...

rfp2k01.txt

-- Advisory RFP2K01 ------------------------------ rfp.labs ------------ "How I hacked PacketStorm" A look at hacking wwwthreads via SQL ------------------------------- rain forest puppy / [email protected] --- Table of contents: -1. Scope of problem -2. Long explaination of SQL hacking -3. Soluti...

Microsoft Internet Explorer 4.x/5 / Outlook 2000 0/98 0/Express 4.x - ActiveX '.CAB' File Execution

Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 4,Internet Explorer 4.1 for Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Outlook 2000 0/98 0,Outlook Express...