Cisco IOS System Timers Remote Overflow (CSCei61732)

The remote host is a CISCO router containing a version of IOS that is vulnerable to a heap overflow attack. An attacker may exploit this flaw to crash the remote device or to execute arbitrary code remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid20134;...

CVE-2005-3302

Eval injection vulnerability in bvhimport.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call...

wagora420_xpl.txt

W-agora 4.2.0 Remote code execution / cross site scripting poc exploit software: site: http://w-agora.net/en/index.php description: "W-Agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other information on you...

versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== versatileBulletinBoard 1.00 RC2 board takeover SQL Injection Exploit ====================================================================== ?php --- versatilexpl.php 4....

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

DEBIAN-CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

CVE-2005-3068

Summary : CVE-2005-3068 affects the Eric IDE (eric3). Debian security advisory DSA-869-1 states the vulnerability is caused by missing input sanitising in eric, which could lead to arbitrary code execution. Affected releases: eric before 3.7.2; the fix is in eric 3.7.2-1 (and 3.6.2-2 for the rele...

CVE-2005-3068: Undefined Security Weakness

Unspecified vulnerability in Eric Integrated Development Environment eric3 before 3.7.2 has unknown impact and attack vectors related to a "potential security exploit."...

GNU Mailutils imap4d 0.6 (search) Remote Format String Exploit (fbsd)

No description provided by source. / Copyright c 2005 Rosiello Security http://www.rosiello.org Permission is granted for the redistribution of this software electronically. It may not be edited in any way without the express written consent of Rosiello Security. Disclaimer: The author published...

Wireless Tools 26 (iwconfig) Local Root Exploit (some setuid)

No description provided by source. // if the iwconfig executable is setuid /str0ke include stdio.h include string.h include unistd.h include stdlib.h / 45 Byte /bin/sh http://www.milw0rm.com/id.php?id=1169 / char shellcode= "\x31\xc0\x31\xdb\x50\x68\x2f\x2f" "\x73\x68\x68\x2f\x62\x69\x6e\x89"...

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities

phpCommunityCalendar 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14767/info phpCommunityCalendar is prone to multiple remote cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An...

BNBT BitTorrent EasyTracker <= 7.7r3 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================== BNBT BitTorrent EasyTracker include pragma commentlib, "ws232.lib" char exploit = "GET /index.htm HTTP/1.0\r\n:\r\n\r\n"; int mainint argc, char argv WSADATA wsaData; WORD...

CUPS Server <= 1.1 (Get Request) Denial of Service Exploit

Exploit for linux platform in category dos / poc ========================================================== CUPS Server include include include include char EVIL = "\x2e\x2e\x5c\x2e\x2e"; void usagechar argv0 fprintfstdout, "cups/1.x server freeze and remote cpu usage fuckup\n"; fprintfstdout,...

mybb.pl.txt

!/usr/bin/perl -w SQL Injection Exploit for MyBulletinBoard MyBB .?/ && print "+ User ID is: $1\n"; print "- Unable to retrieve User ID\n" if!$1; $page = m/.?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1;...

Privilege escalation in Nortel Contivity VPN Client V05_01.030

Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...

ag231SQL.txt

There is an SQL Injection in Advanced Guestbook 2.3.1 For Example: http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=' or http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=%27 Yours, SpyHat...

NukeETXSS.txt

NukeET 'codigo' variable cross site scripting vendor url:http://www.truzone.org advisore:http://lostmon.blogspot.com/2005/05/ nukeet-codigo-variable-cross-site.html Vendor confirmed : yes exploit available: yes NukeET Contains a flaw too that allows a remote cross site scripting attack.This flaw...