Slackware: Security Advisory (SSA:2004-239-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Clipbucket 2.5 Blind SQL Injection

Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia Management Script Provided Free to th...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

WordPress Plugin Mz-jajak 2.1 - SQL Injection Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d0...

httpdx 1.5.4 Heap Overflow

!/usr/bin/perl -w ====================================================================== Exploit Title: httpdx UnhandledExceptionFilter ====================================================================== use strict; use IO::Socket::INET; target my $host = "127.0.0.1"; The perl|php|py|.. page t...

httpdx 1.5.4 - Remote Heap Overflow

httpdx 1.5.4 - Remote Heap Overflow !/usr/bin/perl -w ====================================================================== Exploit Title: httpdx UnhandledExceptionFilter ====================================================================== use strict; use IO::Socket::INET; target my $host =...

httpdx 1.5.4 - Remote Heap Overflow

!/usr/bin/perl -w ====================================================================== Exploit Title: httpdx UnhandledExceptionFilter ====================================================================== use strict; use IO::Socket::INET; target my $host = "127.0.0.1"; The perl|php|py|.. page t...

Null HTTPd Server Content-Length HTTP Header Buffer Overflow Vulnerability

Null HTTPd Server is prone to heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Samsung AllShare 2.1.1.0 - Null Pointer Dereference

Samsung AllShare 2.1.1.0 - Null Pointer Dereference Luigi Auriemma Application: Samsung AllShare http://www.samsung.com/global/allshare/pcsw/ Versions: = 2.1.1.0 Platforms: Windows Bug: NULL pointer Exploitation: remote Date: 18 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web:...

python: SimpleXMLRPCServer CPU usage DoS via malformed XML-RPC request

SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an XML-RPC POST request that contains a smaller amount of data than specified...

PT-2012-2901 · Python +3 · Python +3

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.6.8 Python versions 2.7.x prior to 2.7.3 Python versions 3.x prior to 3.1.5 Python versions 3.2.x prior to 3.2.3 Description: The issue allows remote attackers to cause a denial of service, resulting in infinite loo...

MiniWeb Content-Length Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/env python miniweb Content-Length DoS PoC Not a 0day, sadly. aluigi found this ages back, I independantly rediscovered it fuzzing and noticed it was still unpatched. Oh well, better disclose so! vuln version at code.google.com/p/miniweb...

MiniWeb Content-Length Denial Of Service

!/usr/bin/env python miniweb Content-Length DoS PoC Not a 0day, sadly. aluigi found this ages back, I independantly rediscovered it fuzzing and noticed it was still unpatched. Oh well, better disclose so! vuln version at code.google.com/p/miniweb/ affects WinCC also : Oh, them SCADA... Massive...

Feifei television systems PHP version v1. 9 injection exploit-vulnerability warning-the black bar safety net

Article author: honglousy Yesterday the whole hacking Forum next station on the program, found that people also really many. Simply write the exp. Boring as... ? php / Fly fly video management system SQL injection Feifei television systems PHP version v1. 9 injection exploit by:www.08sec.com fans...

http-traceroute NSE Script

Exploits the Max-Forwards HTTP header to detect the presence of reverse proxies. The script works by sending HTTP requests with values of the Max-Forwards HTTP header varying from 0 to 2 and checking for any anomalies in certain response values such as the status code, Server, Content-Type and...

PHP 'Content-Length'标头远程服务访问漏洞

BUGTRAQ ID: 52704 PHP是一种在电脑上运行的脚本语言，主要用途是在于处理动态网页，包含了命令行运行接口或者产生图形用户界面程序。 PHP在实现上存在远程拒绝服务漏洞，如果发送带有较大的Content-Length标头值的HTTP请求到内置的PHP网络服务器，攻击者可利用此漏洞耗尽可用的内存，拒绝服务合法用户。 0 PHP 5.5.0-DEV PHP 5.4.1RC1-DEV 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.php.net !/usr/bin/python Title: PHP 5.4....

PHP 5.4.0 Built-in Web Server DoS PoC

No description provided by source. !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

This host is running PHP Built-in WebServer and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbuiltinwebsrvdosvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

PHP Built-in WebServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 5.4.0 Built-in Web Server - Denial of Service (PoC)

PHP 5.4.0 Built-in Web Server - Denial of Service PoC !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the...