DEBIAN-CVE-2015-8767

net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service deadlock via a crafted sctpaccept call...

UBUNTU-CVE-2015-8767

net/sctp/smsideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service deadlock via a crafted sctpaccept call...

TCP Bindshell with Password Prompt - 162 bytes

TCP Bindshell with Password Prompt - 162 bytes. Shellcode exploit for linux platform /--------------------------------------------------------------------------------------------------------------------- / Title: tcp bindshell with password prompt in 162 bytes Author: Sathish kumar Contact:...

x86_64 Linux bind TCP port shellcode

x8664 Linux bind TCP port shellcode. Shellcode exploit for linx86-64 platform /--------------------------------------------------------------------------------------------------------------------- / Exploit Title: bindshell TCP Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Dat...

Linux/x86-64 - Bind 4444/TCP Port Shellcode (103 bytes)

/--------------------------------------------------------------------------------------------------------------------- / Exploit Title: bindshell TCP Author: Scorpion Copyright: c 2016 iQube. http://iQube.io Release Date: January 1, 2016 Contact: https://www.facebook.com/sathish.royalmechanical...

PCRE 'match' Function Information Disclosure Vulnerability

PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A security vulnerability exists in the 'match' function in the pcreexec.c file in versions of PCRE prior to 8.37, which stems from the...

UBUNTU-CVE-2015-8382

The match function in pcreexec.c in PCRE before 8.37 mishandles the /?:abcd|?:?:?:?:abc|?:abcdefbabcdefghiabc|ACCEPT/ pattern and related patterns involving ACCEPT, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service partially initialized...

Hsecscan - A Security Scanner For HTTP Response Headers

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Usage $ ./hsecscan.py usage: hsecscan.py -h -P -p -u URL -R -U User-Agent -d 'POST data' -x PROXY A security scanner for HTTP response headers. optional arguments: -h, --help show this help message and exit -P,...

OS X x64 - tcp bind shellcode, NULL byte free 144 bytes

OS X x64 - tcp bind shellcode, NULL byte free 144 bytes. Shellcode exploit for osx platform ;OS X x64, TCP bind shellcode port 4444, NULL byte free, 144 bytes long ;ASM code ;compile: ;nasm -f macho64 bind-shellcode.asm ;ld -macosxversionmin 10.7.0 -o bindsc bind-shellcode.o BITS 64 global start...

WPML 2.9.3-3.2.6 - Cross-Site Scripting (XSS) in Accept-Language Header

The sitepress-multilingual-cms WordPress plugin was affected by a Cross-Site Scripting XSS in Accept-Language Header security vulnerability...

Endian Firewall 3.0.0 - OS Command Injection (Python)

Endian Firewall 3.0.0 - OS Command Injection Python !/usr/bin/env python Endian Firewall Proxy User Password Change /cgi-bin/chpasswd.cgi OS Command Injection Exploit POC Reverse TCP Shell Ben Lincoln, 2015-06-28 http://www.beneaththewaves.net/ Requires knowledge of a valid proxy username and...

Linux/x86 - TCP Bind Shell 96 bytes

Linux/x86 - TCP Bind Shell 96 bytes. Shellcode exploit for linx86 platform / Linux x86 - TCP Bind Shell - 96 bytes Author: xmgv Details: https://xmgv.wordpress.com/2015/02/19/28/ / / global start section .text start: xor ebx, ebx ; zero out ebx mul ebx ; zero out eax, edx ; socketAFINET,...

Information disclosure

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

CVE-2015-0598

The CVE-2015-0598 entry describes a denial-of-service in Cisco IOS/IOS XE due to the RADIUS implementation when processing crafted IPv6 Attributes in Access-Accept packets (Bug IDs CSCur84322 and CSCur27693). Affected products are Cisco IOS and IOS XE; the issue enables remote attackers to trigge...

Cisco IOS and IOS XE RADIUS Implementation Denial of Service Vulnerability

Cisco IOS and IOS-XE are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the RADIUS implementation of Cisco IOS and IOS XE. A remote attacker could exploit this vulnerability to cause a denial of service device reload with the help of speciall...

IBM Content Navigator Cross-Site Scripting Vulnerability

IBM Content Navigator is a Web client from IBM USA that supports searching and processing documents stored in content servers around the world from a Web browser. A cross-site scripting vulnerability exists in IBM Content Navigator, which can be exploited by remote attackers to inject arbitrary w...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP002 IF003 and 2.0.3 before 2.0.3.2 FP002 allows remote attackers to inject arbitrary web script or HTML via the Accept-Language HTTP header...

CVE-2014-8911

Cross-site scripting XSS vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP002 IF003 and 2.0.3 before 2.0.3.2 FP002 allows remote attackers to inject arbitrary web script or HTML via the Accept-Language HTTP header...

Mobile Vikings: Stored xss in user name (2) affected another user.

Again we have to users: A - attacker B - victim User A attacker has name - namealert1 and add auth to user B victim. User B receive a letter and get remider about new request on website. And open it https://mobilevikings.com/account/requests/ And probably press "Accept" and got xss fired. x:confi...

openssh: AcceptEnv environment restriction bypass flaw

It was found that OpenSSH did not properly handle certain AcceptEnv parameter values with wildcard characters. A remote attacker could use this flaw to bypass intended environment variable restrictions...