6938 matches found
CVE-2006-7178
CVE-2006-7178 affects the MadWifi driver prior to 0.9.3. The issue arises from improper handling of an AUTH frame by an IBSS node, allowing remote attackers within wireless range to cause a denial-of-service (system crash/hang). Publicly documented in various advisories (SUSE GLSA 200704-15, Gent...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Advisory soon if$argc 3 print" TITLE | Net Portal Dynamic System NPDS = 5.10 Remote Code Execution 0day AUTHOR | DarkFig / http://www.acid-root.new.fr / [email protected] NOTE | Works regardless of php settings...
Novell NetMail HTTP基本认证超长用户名远程缓冲区溢出漏洞
Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 Novell NetMail中默认绑定在TCP/89端口上的webadmin.exe进程处理用户认证请求存在栈溢出漏洞，远程攻击者可能利用此漏洞控制服务器s。 由于不安全的sprintf调用，如果在HTTP基本认证阶段发送了超过213字节的超长用户名，就会触发这个缓冲区溢出，导致执行任意指令。 Novell NetMail 3.52 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Asterisk <= 1.2.15 / 1.4.0 pre-auth Remote Denial of Service Exploit
No description provided by source. / this will cause asterisk to segfault, the bug that this exploits has been patched in release 1.2.16 & 1.4.1 CLI Program received signal SIGSEGV, Segmentation fault. Switching to Thread 1082719152 LWP 2510 registerverify p=0x81cf600, sin=0x4088e750,...
CVE-2007-1160
webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...
freebsd/x86 portbind 4883 with auth shellcode
No description provided by source. / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka, nolife, white Listen on the port 4883 the /bin/sh / / void zugcodevoid //socket asm"xorl %eax, %eax"; asm"pushl %eax"; asm"pushl %eax"; asm"pushl $0x01";...
[SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service
------------------------------------------------------------------------ Debian Security Advisory DSA-1247-1 [email protected] http://www.debian.org/security/ Noah Meyerhans January 08, 2007 - ------------------------------------------------------------------------ Package :...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
Exploit for unknown platform in category web applications ============================================================== PHP-Update 126 $result.=" ."; else $result...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHPUpdate = 2.7 extract auth bypass / shell inject by rgod dork: "Powered by PHP-Update" -site:www.php-update.co.uk mail: retrog at alice dot it site:...
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerabl...
security flaw
Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...
CVE-2006-5989
Off-by-one error in the dergetoid function in modauthkerb 5.0 allows remote attackers to cause a denial of service crash via a crafted Kerberos message that triggers a heap-based buffer overflow in the component array...
BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities
No description provided by source. blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - U...
BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ BlogMe 3.0 XSS/Auth Bypass Multiple Remote Vulnerabilities ============================================================ blogme v3 admin login bypass & xss post vendor...
Debian DSA-935-1 : libapache2-mod-auth-pgsql - format string vulnerability
iDEFENSE reports that a format string vulnerability in modauthpgsql, a library used to authenticate web users against a PostgreSQL database, could be used to execute arbitrary code with the privileges of the httpd user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
Debian DSA-952-1 : libapache-auth-ldap - format string
'Seregorn' discovered a format string vulnerability in the logging function of libapache-auth-ldap, an LDAP authentication module for the Apache webserver, that can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service
!/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat fifo=/tmp/nc.$$ make the fifos mkfifo $fifo.in mkfifo...
freebsd/x86 portbind 4883 with auth shellcode
Exploit for freebsd/x86 platform in category shellcode ============================================= freebsd/x86 portbind 4883 with auth shellcode ============================================= / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka...
freebsd/x86 portbind 4883 with auth shellcode
freebsd/x86 portbind 4883 with auth shellcode. Shellcode exploit for freebsdx86 platform / THE ZUGCODE - SMALL REMOTE 6ACKD0R FreeBSD i386 bind shell with auth code by MahDelin Big thx SST kaka, nolife, white Listen on the port 4883 the /bin/sh / / void zugcodevoid //socket asm"xorl %eax, %eax";...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to 1 auth/extauth/drivers/mambo.inc.php or 2 auth/extauth/drivers/postnuke.inc.php...