Ultra Mini HTTPD Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Ultra Mini HTTPD...

CVE-2013-5019

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request...

Stack overflow

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request...

CVE-2013-5019

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request...

CVE-2013-5019

CVE-2013-5019 involves Ultra Mini HTTPD (notably v1.21) and a stack-based buffer overflow triggered by a long resource name in an HTTP GET request. The underlying flaw allows remote attackers to potentially execute arbitrary code. Public references document a PoC and exploits (Exploit-DB entries ...

CVE-2013-5019: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Ultra Mini HTTPD 1.21 allows remote attackers to execute arbitrary code via a long resource name in an HTTP request...

PT-2013-5330

Name of the Vulnerable Software and Affected Versions Ultra Mini HTTPD version 1.21 Description The issue allows remote attackers to execute arbitrary code via a long resource name in an HTTP request, due to a stack-based buffer overflow. Recommendations For Ultra Mini HTTPD version 1.21, update ...

Ultra Mini HTTPD Stack Buffer Overflow Vulnerability

Ultra Mini HTTPD server is prone to stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ultra Mini HTTPd 1.21 Buffer Overflow

? 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 Exploit Title: Ultra Mini HTTPD stack buffer overflow Date: 10 July 2013 Exploit Author: superkojiman -...

Ultra Mini HTTPd 1.21 - Remote Stack Buffer Overflow

Exploit Title: Ultra Mini HTTPD stack buffer overflow Date: 10 July 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: http://www.picolix.jp/ Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Version: 1.21 Tested on: Windows XP Professional SP2,...

Ultra Light Forum Cross Site Scripting

Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed...

Ultra Light Forum - Persistent Cross-Site Scripting

Ultra Light Forum - Persistent Cross-Site Scripting Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in...

Ultra Light Forum - Persistent Cross-Site Scripting

Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed...

Classified Ultra ScriptsGenie Cross Site Scripting / SQL Injection

Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link; http://www.hotscripts.com/listing/classified-ultra-scriptsgenie/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo...

Classified Ultra ScriptsGenie XSS / SQL Injection Vulnerabilities

Classified Ultra ScriptsGenie suffers from cross site scripting and remote SQL injection vulnerabilities. Note that this finding houses site-specific data. Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link;...

Scripts Genie Classified Ultra - SQL Injection Cross-Site Scripting

Scripts Genie Classified Ultra - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/57465/info Classified Ultra is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

Scripts Genie Classified Ultra - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info Classified Ultra is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120710)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A NULL pointer dereference flaw was found in the nfctfrag6reasm function in the Linux kernel's netfilter IPv6 connection tracking implementation. A remote...

Oracle Database Multiple Vulnerabilities (January 2008 CPU)

The remote Oracle database server is missing the January 2008 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Advanced Queuing - Core RDBMS - Oracle Spatial - Oracle Ultra Search - Upgrade/Downgrade - XML DB %NASLMINLEVEL 70300 C...

Balaji Plus Cloud Antivirus Released - Mix of 32 antivirus Engines for ultra Protection

Balaji Plus Cloud Antivirus Released - Mix of 32 antivirus Engines for ultra Protection Leo Impact Launch World first Antivirus scanning software which protects your PC from viruses, trojans, spyware, rootkits and other malicious programs zero day exploits by using 32+ antivirus on cloud. Most of...