9424 matches found
MadWifi: Multiple vulnerabilities
Background The MadWifi driver provides support for Atheros based IEEE 802.11 Wireless Lan cards. Description The driver does not properly process Channel Switch Announcement Information Elements, allowing for an abnormal channel change. The ieee80211input function does not properly handle AUTH...
Mandrake Linux Security Advisory : madwifi-source (MDKSA-2007:082)
The athratesample function in the athrate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial of service failed KASSERT and system crash by moving a connected system to a location with low signal strength, and possibly other vectors related to a race...
IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit
No description provided by source. !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you...
frontbase427v2-remote.txt
/ Dreatica-FXP crew ---------------------------------------- Target : Frontbase = 4.2.7 for Windows Site : http://www.frontbase.com Found by : Netragard, L.L.C Advisory ---------------------------------------- Exploit : Frontbase = 4.2.7 POST-AUTH remote buffer overflow Exploit date : 02.04.2007...
IBM Lotus Domino Server 6.5 - Remote Overflow
!/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton exploit shamelessly ripped off Winny Thomas bt...
CVE-2006-7178
MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service system crash via a certain AUTH frame...
CVE-2006-7178
CVE-2006-7178 affects the MadWifi driver prior to 0.9.3. The issue arises from improper handling of an AUTH frame by an IBSS node, allowing remote attackers within wireless range to cause a denial-of-service (system crash/hang). Publicly documented in various advisories (SUSE GLSA 200704-15, Gent...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Advisory soon if$argc 3 print" TITLE | Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 0day AUTHOR | DarkFig / http://www.acid-root.new.fr / [email protected] NOTE | Works regardless of php settings...
Novell NetMail HTTP基本认证超长用户名远程缓冲区溢出漏洞
Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 Novell NetMail中默认绑定在TCP/89端口上的webadmin.exe进程处理用户认证请求存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器s。 由于不安全的sprintf调用，如果在HTTP基本认证阶段发送了超过213字节的超长用户名，就会触发这个缓冲区溢出，导致执行任意指令。 Novell NetMail 3.52 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...
CVE-2007-1160
webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...
freebsd/x86 portbind 4883 with auth shellcode
No description provided by source. / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka, nolife, white Listen on the port 4883 the /bin/sh / / void zugcodevoid //socket asm"xorl %eax, %eax"; asm"pushl %eax"; asm"pushl %eax"; asm"pushl $0x01";...
[SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1247-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 08, 2007 - ------------------------------------------------------------------------ Package :...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
Exploit for unknown platform in category web applications ============================================================== PHP-Update 126 $result.=" ."; else $result...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHPUpdate = 2.7 extract auth bypass / shell inject by rgod dork: "Powered by PHP-Update" -site:www.php-update.co.uk mail: retrog at alice dot it site:...
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerabl...
security flaw
Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...
CVE-2006-5989
Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...
BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities
No description provided by source. blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - U...
BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ BlogMe 3.0 XSS/Auth Bypass Multiple Remote Vulnerabilities ============================================================ blogme v3 admin login bypass & xss post vendor...