643 matches found
NetDecision NOCVision Server Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NetDecision NOCVision Server Directory Traversal', 'Description' = %q This module exploits a directory traversal bug in NetDecision's...
Sockso Music Host Server 1.5 Directory Traversal
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sockso Music Host Server 1.5 Directory Traversal', 'Description' = %q This module exploits a directory traversal bug in Sockso on port 4444. This...
MS12-020 Microsoft Remote Desktop Use-After-Free Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS12-020 Microsoft Remote Desktop Use-After-Free DoS', 'Description' = %q This module exploits the MS12-020 RDP vulnerability originally discover...
auriemma.group Cross Site Scripting vulnerability OBB-3289535
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GLEG Agora SCADA+ Exploit Pack
OVERVIEW On March 15, 2011, GLEG Ltd. announced the Agora SCADA+ Exploit Pack for Immunity’s CANVAS system. CANVAS is a penetration testing framework that is extensible using CANVAS Exploit Packs. On March 25, 2011, GLEG announced it would be adding exploits for the 35 vulnerabilities released by...
Carel PlantVisor 2.4.4 - Directory Traversal Vulnerability
Exploit for windows platform in category web applications Application: Carel PlantVisor http://www.carel.com/carelcom/web/eng/catalogo/prodottodett.jsp?idprodotto=310 Versions: = 2.4.4 Platforms: Windows Bug: directory traversal Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail...
Microsoft Reader <= 2.1.1.3143 Integer Overflow
No description provided by source. Source: http://aluigi.org/adv/msreader1-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version the Origami 2.6.1.7169 version doesn't seem vulnerable the non-PC versions have not been tested...
Pigeon Server <= 3.02.0143 Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h include winerr.h define close closesocket else include unistd.h include sys/socket.h include sys/types.h include arpa/inet.h include netdb.h include netinet/in....
Icecast <= 2.0.1 Win32 Remote Code Execution Exploit
No description provided by source. / by Luigi Auriemma Shellcode add-on by Delikon www.Delikon.de Because of all the forbidden bytes in a http get request i had to use a very small shellcode, which was blown up by Msf::Encoder::PexAlphaNum. Great encoder...
NetPanzer <= 0.8 - Remote Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h void stderrvoid ch...
AdPlug 2.0 - Multiple Remote File Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18859/info The AdPlug library is affected by multiple remote buffer-overflow vulnerabilities. These issues are due to the library's failure to properly bounds-check user-supplied input before copying it into insufficientl...
simple httpd <= 1.38 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Simple HTTPD http://shttpd.sourceforge.net Versions: = 1.38 Platforms: Windows, nix, QNX, RTEMS only Windows seems vulnerable Bugs: A directory traversal B scripts and CGI viewing/downloading %20 char found by Shay priel in Jun 2007...
OpenTTD <= 0.4.7 (multiple vulnerabilities) Denial of Service Exploit
No description provided by source. Luigi Auriemma Application: OpenTTD http://www.openttd.org Versions: = 0.4.7 Platforms: Windows, nix, BSD, Mac and others Bugs: A program termination through big error number B broadcast clients disconnection in multiplayer menu Exploitation: A remote, versus...
libmikmod <= 3.2.2 (GT2 loader) Local Heap Overflow PoC
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER 0.1 define cpyx,y strncpyx, y, sizeofx; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void fwstrFILE fd, uint8t str; void...
Rockwell RSLogix <= 19 Denial of Service
No description provided by source. Luigi Auriemma Application: Rockwell RSLogix http://www.rockwellautomation.com/rockwellsoftware/design/rslogix5000/ Versions: = 19 RsvcHost.exe 2.30.0.23 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma...
Xpand Rally <= 1.0.0.0 (Server/Clients) Crash Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / inserted winerr.h /str0ke / / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...
Virtools Web Player <= 3.0.0.100 Buffer Overflow DoS Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include sys/stat.h ifdef WIN32 include io.h typedef unsigned char uchar; typedef unsigned int uint; define ftruncate chsize else include unistd.h include sys/types.h endif define VER 0.1...
OPC Systems.NET <= 4.00.0048 Denial of Service
No description provided by source. Luigi Auriemma Application: OPC Systems.NET http://www.opcsystems.com/opcsystemsnet.htm Versions: = 4.00.0048 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 10 Oct 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...
Open Cubic Player <= 2.6.0pre6 / 0.1.10_rc5 Multiple BOF Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdint.h define VER 0.1 define POCNAME proof-of-concept void fwbofFILE fd, int len, int chr; void fwi08FILE fd, int num; void fwi16FILE fd, int num; void fwi32FILE fd, int num; void...
Painkiller <= 1.35 in-game cd-key alpha-numeric Buffer Overflow Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Painkiller packet's password encoder/decoder 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ When you want to...