Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date : 11.06.2008-14.06.2008 Exploit writer : Heretic2 [email protected]...

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow

Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow / Dreatica-FXP crew ---------------------------------------- Target : Alt-N SecurityGateway v1.00-1.01 ---------------------------------------- Exploit : Alt-N SecurityGateway v1.00-1.01 Remote Stack Overflow Exploit Exploit date :...

sg-overflow.txt

SecurityGateway 1.0.1 Remote Buffer Overflow username Vendor: http://www.altn.com/ risk : critical SecurityGateway open port 4000 for remote administration/managment, EIP get owned when the username field is filled with 720 chars eax=00000000 ebx=00000000 ecx=63636363 edx=7c9137d8 esi=00000000...

Debian DSA-1578-1 : php4 - several vulnerabilities

Several vulnerabilities have been discovered in PHP version 4, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3799 The sessionstart function allows remote attackers to insert arbitrary attributes int...

Debian DSA-1572-1 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3806 The glob function allows context-dependent attackers to cause a denial of service and possibly...

DSA-1572-1 php5 - several vulnerabilities

Bulletin has no description...

CVE-2008-2051

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...

Design/Logic Flaw

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...

CVE-2008-2051

The escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent attack vectors related to "incomplete multibyte chars."...

PHP < 5.2.6 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is older than 5.2.6. Such versions may be affected by the following issues : - A stack-based buffer overflow in FastCGI SAPI. - An integer overflow in printf. - An security issue arising from improper calculation of the leng...

IBM Domino Web Access Upload Module inotes6.dll BoF Exploit

No description provided by source. !-- written by e.b. IBM Domino Web Access Upload Module inotes6.dll SEH Overwrite Exploit Bad chars: 0x80+ CVE-2007-4474 Tested on Windows XP SP2fully patched English, IE6, inotes6.dll version 6.0.40.0 and version 6.0.48.0...

CVE-2007-6526

Cross-site scripting XSS vulnerability in tiki-specialchars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web script or HTML via the areaname parameter...

fsfdt-overflow.txt

$ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000 Microsoft Corp. E:\draft\fsd1110\windows ------------------------------------------- !/usr/bin/perl FSFDT remote exploit by weakatfraglab.at spawns reverse shell to 10.0.0.100:4321 tested against 'FSFDT Windows FSD Bet...

FSFDT v3.000 d9 (HELP) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== FSFDT v3.000 d9 HELP Remote Buffer Overflow Exploit ===================================================== $ nc -l -p 4321 Microsoft Windows 2000 Version 5.00.2195 C Copyright 1985-2000...

TurboFTP Server 5.30 Build 572 - newlineLIST Multiple Remote Denial of Service Vulnerabilities

TurboFTP Server 5.30 Build 572 - newlineLIST Multiple Remote Denial of Service Vulnerabilities / TurboFTP 5.30 Build 572 Multiple Remote DoS Several vulnerabilities have been discovered in TurboFTP 1 The app does not correctly handle reponses that contains 7000 newline chars 2 there's a heap...

BtitTracker 1.4 XSS

BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...

CVE-2006-5133

Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."...

CVE-2006-5133

Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."...

dSMTP Mail Server 3.1b (Linux) - Format String

dSMTP Mail Server 3.1b Linux - Format String / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a...

dSMTP Mail Server 3.1b Linux Remote Root Format String Exploit

No description provided by source. / dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit cybertronicatgmxdotnet 05/05/2005 This exploits the "xtellmail" command! bindc0de breaks somehow, cb works fine! remote buffer space is about 256 bytes bad chars: 0x00, 0x20, 0x0a and prolly...