LiteServe 2.81 - 'PASV' Denial of Service

!/usr/bin/python Title: LiteServe 2.81 PASV Command DoS Author: Craig Freyman @cd1zz Date: Bug found July 25, 2011 - Vendor approved release August 7, 2011 Tested on Windows XP SP3 and Server 2003 SP2 Software: http://www.cmfperception.com/liteserve.html Notes: In certain conditions that I could...

Ruby随机数字生成本地拒绝服务漏洞

BUGTRAQ ID: 49015 CVE ID: CVE-2011-2686 Ruby是一种功能强大的面向对象的脚本语言。 Ruby在处理随机数字生成的实现上存在本地拒绝服务漏洞，本地攻击者可利用此漏洞造成拒绝服务。 Yukihiro Matsumoto Ruby 1.8.7 x 厂商补丁： Yukihiro Matsumoto ------------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ruby-lang.org/ !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Serv...

Omnicom Alpha 4.0e LPD Server - Denial of Service

Omnicom Alpha 4.0e LPD Server - Denial of Service !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendor...

Omnicom Alpha 4.0e LPD Server DoS

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendo...

Kolibri HTTP Server 2.0 - HEAD Buffer Overflow (Metasploit)

$Id: kolibrihttp.rb 10887 2011-08-03 12:19:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Omnicom Alpha 4.0e LPD Server Denial Of Service

!/usr/bin/python Title: Omnicom Alpha 4.0e LPD Server DoS Author: Craig Freyman @cd1zz Software Download: http://www.omnicomtech.com/download/bin/lpd.exe Tested on: Windows XP SP3 English, Server 2003 SP2 English Dates: Bug Found 7/27/2011, Vendor Notified 8/1/2011, Vendor Responded 8/2/2011,...

Actfax FTP Server 4.27 USER Command Stack Buffer Overflow

$Id: actfaxretrftp.rb 12540 2011-05-04 20:43:19Z mrme $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Actfax FTP Server 4.27 - USER Stack Buffer Overflow (Metasploit)

Actfax FTP Server 4.27 - USER Stack Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Actfax FTP Server 4.27 - 'USER' Stack Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Actfax FTP Server...

Actfax FTP Server <= v4.27 USER Command Stack Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Actfax FTP Server &lt;= v4.27 USER Command 0day Stack Buffer Overflow (MSF)

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

CA ARCserve D2D r15 GWT RPC Multiple Vulnerabilities

Exploit for jsp platform in category web applications Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE :...

CA ARCserve D2D r15 Bypass / Disclosure / Command Execution

Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution Google Dork: / Date: 25 July 2011 Author: rgod Software Link: / Version: r15.0 Tested on: Microsoft Windows Server 2003 r2 sp2 CVE : none ?php / CA ARCserve D2D r15 GWT RPC Request Auth...

HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow

Added: 07/18/2011 CVE: CVE-2011-1865 BID: 48486 OSVDB: 73571 Background HP Data Protector is a backup solution for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The OmniInet process omniinet.exe is...

HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.0 and 7.53. By sending a CGI request with a specially OvOSLocale cookie to Toolbar.exe, an attacker may be able to execute arbitrary code. Please note that this module only works against a specific build i.e. NNM...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

The host is installed with Microsoft Windows operating system and is prone to spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmswindowsfraudulentdigitalcertspoofingvuln.nasl 5362 2017-02-20 12:46:39Z cfi $ Fraudulent Digital Certificates Spoofing Vulnerability 2524375 Authors: Antu Sana...

Windows CSRSS子系统SrvSetConsoleLocalEUDC权限提升漏洞(CVE-2011-1282)(MS11-056)

BUGTRAQ ID: 48598 CVE ID: CVE-2011-1282 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的CSRSS子系统在SrvSetConsoleLocalEUDC的实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleLocalEUDC函数存在输入验证错误，可被利用将某些数据写入到空页。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008...

Windows Win32k.sys本地权限提升漏洞(CVE-2011-1876)(MS11-054)

BUGTRAQ ID: 48590 CVE ID: CVE-2011-1876 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在实现上存在Win32k释放后重用漏洞，攻击者可利用此漏洞在内核模式下运行任意代码。 权限提升漏洞源于Windows内核模式驱动程序管理内核模式驱动程序对象的方式存在问题。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 厂商补丁： Microsof...

Windows CSRSS子系统SrvWriteConsoleOutput权限提升漏洞(CVE-2011-1284)(MS11-056)

BUGTRAQ ID: 48606 CVE ID: CVE-2011-1284 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统SrvWriteConsoleOutput在实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvWriteConsoleOutput函数缓冲区溢出漏洞，可造成内存破坏。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft...

Fraudulent Digital Certificates Spoofing Vulnerability (2524375)

Microsoft Windows operating system is prone to a spoofing vulnerability. This VT has been superseded by KB2641690 which is addressed in the VT SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...