BSS Continuity CMS 4.2.22640.0 Code Execution

Vulnerability title: Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS CVE: CVE-2014-3448 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: The ASPX executable which is responsible for handling file...

BSS Continuity CMS 4.2.22640.0 Authentication Bypass

Vulnerability title: Insufficient ACLs in BSS Continuity CMS CVE: CVE-2014-3449 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: 4.2.22640.0 Hotfix Reported by: Jerzy Kramarz Details: The following URL was found to expose the administrative interface of the CMS to...

BSS Continuity CMS 4.2.22640.0 SQL Injection

Vulnerability title: Unauthenticated Blind SQL Injection in BSS Continuity CMS CVE: CVE-2014-3446 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: he following URL and parameters have been confirmed to suffer from Blind SQL...

Linux Kernel Sendpage Local Privilege Escalation

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require...

Windows Gather Wireless BSS Info

This module gathers information about the wireless Basic Service Sets available to the victim machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Wireless BSS Info',...

RarCrack 0.2 Proof Of Concept

The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...

RarCrack 0.2 - 'Filename init() .bss' (PoC)

The software can be downloaded here: http://rarcrack.sourceforge.net/ Author: stoke Date: 2010-09-20 Download: http://rarcrack.sourceforge.net/ Tested on: Backtrack 4 Site: http://devilcode.it | http://hack2web.altervista.org Special greetz to: nex, for reassure me when i sayed "WHY EIP IT'S NOT...

Debian Security Advisory DSA 1573-1 (rdesktop)

The remote host is missing an update to rdesktop announced via advisory DSA 1573-1. OpenVAS Vulnerability Test $Id: deb15731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1573-1 rdesktop Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1573-1 : rdesktop - several vulnerabilities

Several remote vulnerabilities have been discovered in rdesktop, a Remote Desktop Protocol client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-1801 Remote exploitation of an integer underflow vulnerability allows attackers to execute arbitrary...

rdesktop 1.5.0 process_redirect_pdu() BSS Overflow Vulnerability PoC

Exploit for linux platform in category dos / poc ==================================================================== rdesktop 1.5.0 processredirectpdu BSS Overflow Vulnerability PoC ==================================================================== !/usr/bin/perl...

rdesktop 1.5.0 process_redirect_pdu() BSS Overflow Vulnerability PoC

No description provided by source. !/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; my $evil =...

rdesktop 1.5.0 - process_redirect_pdu() BSS Overflow (PoC)

rdesktop 1.5.0 - processredirectpdu BSS Overflow PoC !/usr/bin/perl http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=697 use strict; use IO::Socket; my $sock = IO::Socket::INET-newLocalAddr = '0.0.0.0', LocalPort = '3389', Listen = 1, Reuse = 1 || die$!; my $evil =...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

No description provided by source. !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ [email protected] Date: 07/05/2008...

tftpwin-bssoverflow.txt

!/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ Date: 07/05/2008 Tested on Windows XP SP2 French not patched TFTPServer SP v1.4 is vulnerable to a very long...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

Exploit for unknown platform in category remote exploits ========================================================== TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit ========================================================== !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss...

iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability

iDefense Security Advisory 05.07.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 07, 2008 I. BACKGROUND rdesktop is an open source client that speaks the Remote Desktop Protocol RDP. This allows Unix-based users to login to Windows Terminal Servers. More information is available at...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow

NETGEAR WG311v1 Wireless Driver 2.3.1.10 - SSID Heap Buffer Overflow source: https://www.securityfocus.com/bid/21251/info NetGear WG311v1 Wireless devices are prone to a heap-based buffer-overflow vulnerability because the driver fails to properly bounds-check user-supplied data before copying it...

tiffsplit (libtiff <= 3.8.2) bss & stack buffer overflow...

Affected product: tiffsplit libtiff = 3.8.2 tiffsplit from libtiff http://www.remotesensing.org/libtiff/ is vulnerable to a bss-based and stack-based overflow, but, I just wrote the concept c0de for stack-based b0f 'cause I don't know how to take advantage of the overwritten bss data after the...

Nokia N70 - L2CAP Packets Remote Denial of Service

source: https://www.securityfocus.com/bid/16666/info Nokia N70 is reportedly prone to a remote denial-of-service vulnerability. A successful attack can allow an attacker to corrupt memory and to trigger a denial-of-service condition. Arbitrary code execution may be possible as well, but this has...