Snort 2.4.0 < 2.4.3 - Back Orifice Pre-Preprocessor Remote (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Snort Back...

Oracle 9.0 iSQL*Plus - TLS Listener Remote Denial of Service

Oracle 9.0 iSQLPlus - TLS Listener Remote Denial of Service source: https://www.securityfocus.com/bid/15032/info Oracle iSQLPLUS is susceptible to a vulnerability that allows remote attackers to stop the TNS Listener service, denying further database service to legitimate users. By issuing a...

Oracle 9 - XML DB Cross-Site Scripting

Oracle 9 - XML DB Cross-Site Scripting source: https://www.securityfocus.com/bid/15034/info Oracle XML DB is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Oracle HTML DB 1.51.6 - f?p Cross-Site Scripting

Oracle HTML DB 1.51.6 - f?p Cross-Site Scripting source: https://www.securityfocus.com/bid/15031/info Oracle HTML DB is prone to cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context...

guppyTraverse.txt

BID 14752 is not only an XSS vulnerability, the real problem is a directory transversal flaw and affects Guppy versions less than 4.5.6a. PoC works for versions alertXSS" you receive an error that PHP can't include the file and the javascript gets executed. This assumes registerglobals and...

MailEnable IMAPD W3C Logging Buffer Overflow

This module exploits a buffer overflow in the W3C logging functionality of the MailEnable IMAPD service. Logging is not enabled by default and this exploit requires a valid username and password to exploit the flaw. MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1...

TWiki History Function Arbitrary Command Execution

This module exploits a vulnerability in the history component of TWiki. By passing a 'rev' parameter containing shell metacharacters, an attacker can execute arbitrary OS commands. Affected versions: - 20040902 - 20040901 - 20030201 - 20011201 - 20001201 Module Options msf use...

HP Openview connectedNodes.ovpl Remote Command Execution

This module exploits an arbitrary command execution vulnerability in the HP OpenView connectedNodes.ovpl CGI application. The results of the command will be displayed to the screen. Module Options msf use exploit/unix/webapp/openview/connectednodesexec msf undefinedconnectednodesexec show actions...

CA CAM log_security() Stack Buffer Overflow (Win32)

This module exploits a vulnerability in the CA CAM service by passing a long parameter to the logsecurity function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1. Module Options msf use exploit/windows/unicenter/cam/logsecurity msf undefinedlogsecurity sh...

mdaemon_imap.pm.txt

package Msf::Exploit::mdaemonimap; use strict; use base 'Msf::Exploit'; use Msf::Socket::Tcp; use Pex::Text; my $advanced = ; my $info = 'Name' = 'Mdaemon 8.0.3 IMAD CRAM-MD5 Authentication Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'Pri...

edirectory_imonitor.pm.txt

package Msf::Exploit::edirectoryimonitor; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'eDirectory 8.7.3 iMonitor Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp', 'win2k',...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit ============================================================ This file is part of the Metasploit Framework and may be...

Novell eDirectory 8.7.3 iMonitor Remote Stack Overflow

Exploit for unknown platform in category remote exploits ====================================================== Novell eDirectory 8.7.3 iMonitor Remote Stack Overflow ====================================================== This file is part of the Metasploit Framework and may be redistributed...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit)

package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'winxp',...

Veritas Backup Exec Remote File Access Exploit (windows)

Exploit for unknown platform in category remote exploits ======================================================== Veritas Backup Exec Remote File Access Exploit windows ======================================================== This file is part of the Metasploit Framework and may be redistributed...

eDirectory 8.7.3 iMonitor Remote Stack Buffer Overflow

This module exploits a stack buffer overflow in eDirectory 8.7.3 iMonitor service. This vulnerability was discovered by Peter Winter-Smith of NGSSoftware. NOTE: repeated exploitation attempts may cause eDirectory to crash. It does not restart automatically in a default installation. Module Option...

WordPress cache_lastpostdate Arbitrary Code Execution

This module exploits an arbitrary PHP code execution flaw in the WordPress blogging software. This vulnerability is only present when the PHP 'registerglobals' option is enabled common for hosting providers. All versions of WordPress prior to 1.5.1.3 are affected. Module Options msf use...

MS05-039 Microsoft Plug and Play Service Overflow

This module exploits a stack buffer overflow in the Windows Plug and Play service. This vulnerability can be exploited on Windows 2000 without a valid user account. NOTE: Since the PnP service runs inside the service.exe process, a failed exploit attempt will cause the system to automatically...

Microsoft Internet Explorer Unspecified SharePoint Portal Services Log Sink ActiveX Vulnerability

Description Microsoft Internet Explorer is prone to an unspecified vulnerability in the SharePoint Portal Service Log Sink ActiveX control. The vendor has not released any further information about this vulnerability other than to state the "kill bit" has been set on unsupported versions of the...