TCP TIMESTAMPS Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================== TCP TIMESTAMPS Denial of Service Exploit ======================================== / TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323...

TCP TIMESTAMPS - Denial of Service

/ TCP does not adequately validate segments before updating timestamp value http://www.kb.cert.org/vuls/id/637934 RFC-1323 TCP Extensions for High Performance 4.2.1 defines how the PAWS algorithm should drop packets with invalid timestamp options: R1 If there is a Timestamps option in the arrivin...

CVE-2005-1600

A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key...

CVE-2005-1600

Technical details (affected product/version/root cause/mitigation) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2004-1861

CVE-2004-1861 relates to Invision NetSupport School Pro, which uses a weak encryption algorithm to encrypt passwords, enabling local users to obtain passwords. The available documents state the affected product and the underlying issue (weak encryption) but do not specify the exact vulnerable com...

Soldier of Fortune 2 1.03 - cl_guid Server Crash

Soldier of Fortune 2 1.03 - clguid Server Crash / by Luigi Auriemma / include include include include / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some variables and the...

Soldier of Fortune 2 1.03 - 'cl_guid' Server Crash

/ by Luigi Auriemma / include include include include / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some variables and the prototype of the decompressing and compressing...

PT-2005-1108

Name of the Vulnerable Software and Affected Versions SHA-1 affected versions not specified Description The issue is related to the SHA-1 algorithm not being collision resistant, making it easier for attackers to conduct spoofing attacks. This has been demonstrated by attacks on the use of SHA-1 ...

Painkiller <= 1.35 in-game cd-key alpha-numeric Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Painkiller packet's password encoder/decoder 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ When you want to...

Painkiller <= 1.35 in-game cd-key alpha-numeric Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ======================================================================= Painkiller include include include / Painkiller packet's password encoder/decoder 0.1 by Luigi Auriemma e-mail: email protected web: http://aluigi.altervista.org INTRODUCTION...

Portcullis Security Advisory 05-002 Spectrum Cash Receipting System Weak Password Encryption

Portcullis Security Advisory Vulnerable System: Spectrum Cash Receipting System Vulnerability Title: Spectrum Cash Receipting System Weak Password Protection Vulnerability. Vulnerability discovery and development: Portcullis Security Testing Services. Affected systems: All known versions of...

MD5 - Message Digest Algorithm Hash Collision

source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result in the same output fingerprint. It has been...

MD5 - Message Digest Algorithm Hash Collision

MD5 - Message Digest Algorithm Hash Collision source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result i...

IPSwitch IMail Server 8.1 - Local Password Decryption Utility

IPSwitch IMail Server 8.1 - Local Password Decryption Utility / IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In...

Imailpwdump.cpp

/ IpSwitch IMail Server IpSwitch IMail Server uses weak encryption algorithm to encrypt its user passwords. It uses polyalphabetic Vegenere cipher to encrypt its user passwords. This encryption scheme is relatively easy to break. In order to decrypt user password we need a key. IMail uses usernam...

Unreal ircd ip cloacking protection bypass

To hide real IP hash of IP address with simple hashing algorithm is used...

CVE-2004-0459

CVE-2004-0459 concerns the Clear Channel Assessment (CCA) in IEEE 802.11 using DSSS. The vulnerability arises in the CCA algorithm that can be exploited by a remote attacker transmitting a crafted RF signal to make the channel appear busy, causing denial of service and preventing wireless devices...

CVE-2004-1861

Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords...

CVE-2003-0141

CVE-2003-0141 involves RealOne Player 6.0.11.x and earlier and RealPlayer 8/RealPlayer Plus 8 6.0.9.584 (and related RealPlayer variants) where the PNG deflate algorithm can trigger heap corruption by processing a PNG containing compressed data using fixed trees with length values 286–287, treate...

WFVote

Product : WFVote Version : 0.2 WebSite : http://jid.2yd.ru Problem : Admin access rus Description: ------------ setadmpw.php ========= ... myflock; $f=fopen"votepwd.dat","w"; fputs$f,md5$admpwd1; fclose$f; myfunlock; ... ========= votepwd.dat ======= 21232f297a57a5a743894a0e4a801fc3 =======...