17-year-old Arrested for Massive DDoS Attack on Norway’s Financial Sector

The Norwegian police have arrested and charged a 17-year-old for a massive distributed denial-of-service DDoS attack earlier this week that disabled the websites of major financial institutions and other businesses in the country. Distributed Denial of Service DDoS attack is designed to sabotage,...

Infosec A-Team to Launch NSA-Proof Invisible Messenger for Whistleblowers

If a whistleblower discloses an activity to the public, then there should be a trust-based mechanism that ensure the protection of truth-tellers on an international level by hiding their identities. In an effort to provide this kind of service and security, Security experts grouped together to...

SalesLogix Corporation eViewer 1.0 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1089/info SalesLogix eViewer is a web application integrated with the SalesLogix 2000 package. eViewer will not perform authorization on administrative commands if they are requested directly in the URL. Therefore, the UR...

linux x86 nc -lvve/bin/sh -p13377 shellcode

No description provided by source. linux x86 nc -lvve/bin/sh -p13377 shellcode This shellcode will listen on port 13377 using netcat and give /bin/sh to connecting attacker Author: Anonymous Site: http://chaossecurity.wordpress.com/ Here is code written in NASM ///////////////////////////// secti...

Pablo Software Solutions FTP Service 1.2 Anonymous Users Privileges Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7799/info An issue in Pablo FTP Service may make it possible for remote users to perform unauthorized actions. It has been reported that Pablo FTP Service does not sufficiently restrict the anonymous user account, which i...

Victory FTP Server 5.0 - Denial of Service Exploit

No description provided by source. !/usr/bin/python xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxx xxx xxx xxx xxx xxx xxx xxxxxx xxx xxx xxx xxx xxx xxx xxx xxxxxxxx xxxxxxxx xxxxxxxxx xxxxxx x...

BSD ftpd 0.3.2 Single Byte Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2124/info The ftp daemon derived from 4.x BSD source contains a serious vulnerability that may compromise root access. There exists a one byte overflow in the replydirname function. The overflow condition is due to an...

EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow

No description provided by source. $Id: easyftpcwdfixret.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Chilkat Software FTP2 ActiveX Component Remote Code Execution

No description provided by source. !-- Chilkat Software FTP2 ActiveX Component ChilkatFtp2.DLL 2.6.1.1 Remote Code Execution poc by rgod tested against Internet Explorer 7 on Vista should also work with 8/9 ActiveX Settings: CLSID: 302124C4-30A0-484A-9C7A-B51D5BA5306B Progid:...

Mambo Site Server 4.0.14 emailarticle.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

Mambo Site Server 4.0.14 contact.php Unauthorized Mail Relay

No description provided by source. source: http://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous...

wu-ftpd 2.4.2/2.5 .0/2.6 .0 - Remote Format String Stack Overwrite (1)

No description provided by source. source: http://www.securityfocus.com/bid/1387/info Washington University ftp daemon wu-ftpd is a very popular unix ftp server shipped with many distributions of Linux and other UNIX operating systems. Wu-ftpd is vulnerable to a very serious remote attack in the...

PHP 5.2.6 'create_function()' Code Injection Weakness (1)

No description provided by source. source: http://www.securityfocus.com/bid/31398/info PHP is prone to a code-injection weakness because it fails to sufficiently sanitize input to 'createfunction'. Note that the anonymous function returned need not be called for the supplied code to be executed. ...

Easy FTP Server 1.7.0.11 - CWD Command Remote Buffer Overflow Exploit (Post Auth)

No description provided by source. Exploit Title: Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit Post Auth Date: 2010-07-18 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org Software Link: Version: 1.7.0.11 Tested on: Windows XP SP3 en import socket import sys...

Virtualmin < 3.703 Multiple Local/Remote Vulnerabilities

No description provided by source. Virtualmin Multiple Vulnerabilities by Filip Palian filip dot palian at pjwstk dot edu dot pl Software affected: Virtualmin 3.703 Description from the vendor site: Virtualmin is the world's most powerful and flexible web server control panel. Manage your virtual...

War-FTPD 1.65 Password Overflow

No description provided by source. $Id: warftpd165pass.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Ralf S. Engelschall ePerl 2.2.12 Handling of ISINDEX Query Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/151/info A bug exists in ePerl's handling of the ISINDEX queries. When ISINDEX is used, the query is passed on the command line by the web server. This would allow an attacker to execute arbitrary code via the ePerl...

ProFTPD 1.2 SIZE Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2185/info A memory leak has been reported in all versions of ProFTPd. The SIZE FTP command causes the server to misallocate and leak small amounts of memory each time the command is executed. If a sufficient number of the...

Fortech Proxy+ 2.30 Remote Administration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can...

HP System Management Anonymous Access Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...