h2o -- fix DoS attack vector

Frederik Deweerdt reported a denial-of-service attack vector due to an unhandled error condition during socket connection...

Error: "Cannot add account" When Connecting Through iOS Receiver 6.1.4

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is received when connecting through iOS Receiver 6.1.4: "Cannot add account" The...

CCTV-DVR Vendors - Remote Code Execution

Exploit for hardware platform in category remote exploits !/usr/bin/python Blog post: http://www.kerneronsec.com/2016/02/remote-code-execution-in-cctv-dvrs-of.html ''' Vendors List Ademco ATS Alarmes technolgy and ststems Area1Protection Avio Black Hawk Security Capture China security systems...

Squid 3.5.13 / 4.0.4 / 4.0.5 Server Connection Error Handling DoS

According to its banner, the version of Squid running on the remote host is 3.5.13, 4.0.4, or 4.0.5. It is, therefore, potentially affected by a denial of service vulnerability due to improper handling of server connection errors in the FwdState::connectedToPeer function. A remote attacker can...

SSL VPN Split Tunnel Issue Through NetScaler

Split tunneling does not allow to access internal websites. When WorxWeb is launched "The VPN service has failed to connect" error message is displayed. With split tunneling disabled customer is able to view website fine traffic is routed to internal network. When trying to hit external network...

Users Unable to Connect After Rebuilding Licensing Server With qfarm Showing Load of 20000

After rebuilding the XenApp licensing server users are unable to connect. XenApp Licensing installed without issueand its services are running. Running qfarm /load on any of the XenApp servers in the farm shows a load of 20000 meaning the servers are unable to acquire a connection license for the...

Database Connection Issues in XenDesktop and Provisioning Services

When adding a Delivery Controller to a site, the following error appearsin the XenDesktop studio: “The services could not connect to the database. Possible reason for message: The database server may not be allowing remote connections. Ensurethe database server is setup correctly and that the...

Error:"Cannot Connect to the vCenter Server due to a Certificate Error"

When adding a host connection to a vmware server the following error message is displayed: "Cannot connect to the vCenter server due to a certificate error. Make sure that the appropriate certificates are installed on the VCenter server, and install appropriate certificates on every controller in...

Error: "Connection Timed Out (0x4c126035) When Connecting to vDisk on Citrix Provisioning Services

Error 1 : "Connection timed out 0x4c126035 with tftp://0.0.0.0/ARDBP32.bin"" Error 2 :"Could not boot from file name “ARDP32.bin”"...

httpdx 1.5 'MKD' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...

DLink DIR-645 / DIR-815 Command Execution Vulnerability

Exploit for hardware platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core...

D-Link DIR 645 Password Extractor

This module exploits an authentication bypass vulnerability in DIR 645 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' , 'BID', '58231' , 'PACKETSTORM', '120591' , 'Author' = 'Roberto Paleari ',...

SAP SOAP Service RFC_PING Login Brute Forcer

This module attempts to brute force SAP username and passwords through the /sap/bc/soap/rfc SOAP service, using RFCPING function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, o...

Could not open a connection to SQL Server

This article describes a solution for when a job fails with the error: "Could not open a connection to SQL Server"...

Epic Games Database Hacked by Contra

Epic Games Database Hacked by Contra Epic Games https://www.epicgames.com/ Database Hacked by Contra Hacker , He hack whole database and Leak all database structure online at https://pastebin.com/X455ZARH . The Site of Epic Games is currently showing Database connection error. About EPIC GAMES:...

rsh Authentication Scanner

This module will test a shell rsh service on a range of machines and report successful logins. NOTE: This module requires access to bind to privileged ports below 1024. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

IMAP4 Banner Grabber

IMAP4 Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IMAP4 Banner Grabber', 'Description' = 'IMAP4 Banner Grabber', 'Author' = 'hdm', 'License' = MSFLICENSE end def runhostip...

iOS Serversman 3.1.5 - HTTP Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS exploit Found by: Steven Seeley mrme seeleymagic at hotmail dot com Homepage: http://serversman.com/indexen.jsp Download: From the app store Free - use your Itunes account Tested on: Iphone 3G - firmware 3.1.2 Darwin kernel...

Core FTP Server 1.0 Build 319 - Denial of Service

Core FTP Server 1.0 Build 319 - Denial of Service Note: FTP account is not required for exploitation http://www.mertsarica.com I discovered a denial-of-service vulnerability on Core FTP Server product. When you send "USER test\r\n" and then kills the connection immediately, cpu increases to 100%...

Home FTP Server - 'MKD' Directory Traversal

!/usr/bin/python import socket import sys def Usage: print "Usage: ./expl.py \n" print "Example:./expl.py 192.168.48.183 anonymous anonymous\n" if lensys.argv 4: Usage sys.exit1 else: hostname=sys.argv1 username=sys.argv2 passwd=sys.argv3 sock = socket.socketsocket.AFINET, socket.SOCKSTREAM try:...