1885 matches found
firefly media server (mt-daapd) 2.4.1 svn 1699 - Multiple Vulnerabilities
firefly media server mt-daapd 2.4.1 svn 1699 - Multiple Vulnerabilities Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B...
MS Windows PNG File IHDR Block Denial of Service Exploit PoC
No description provided by source. !/usr/bin/perl Microsoft Windows PNG IHDR block DoS poc More info: http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=6 Written by Preddy don't create the poc png file on windows it won't work as it should when i create it on windows with activeper...
Symantec Enterprise Security Manager远程拒绝服务漏洞
Symantec Enterprise Security Manager(ESM)可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 ESM在处理请求连接时存在漏洞,远程攻击者可能利用此漏洞导致服务不可用。 如果某些网络扫描访问了ESM的网络端口的话,ESM解释某些信息可能会出现竞争条件,导致管理器和代理挂起,导致接近100%的CPU使用率。 Symantec Enterprise Security Manager 6.5.3 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Microsoft Visual Basic 6.0 Project (Company Name) Stack overflow PoC
Exploit for unknown platform in category dos / poc ==================================================================== Microsoft Visual Basic 6.0 Project Company Name Stack overflow PoC ==================================================================== !/usr/local/bin/perl Discovered By UmZ...
Microsoft Visual Basic 6.0 Project - Company Name Stack Overflow (PoC)
!/usr/local/bin/perl Discovered By UmZ Umair Manzoor comments are welcome at umz32.dllatgmail.com Dated 23-02-2007 Time : 02:00 AM PST Visual Basic Project Company Name Stack Overflow Affected Version : Tested on Visual basic 6 Threats : DoS, Previlidges Escilation System become unstable for more...
ie7-dos.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Internet Explorer Version 7.0.5730.11 Impact: Browser crash possibly more Author: Jesus Oquendo echo @infiltrated|sed 's/^/sil/g;s/$/.net/g' I. BACKGROUND Why bother? Who doesn't know what Internet Explorer and Microsoft are. II. DESCRIPTION ...
Sun Solaris IP实现远程拒绝服务漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 8/9的IP实现上存在安全漏洞,远程非特权用户可能利用此漏洞通过发送特制IP报文降低联网Solaris系统的性能。 Solaris系统上可见大量的伪造IP碎片和/或大量的IP碎片重组失败。例如,运行以下命令: % /usr/bin/netstat -s | /usr/bin/egrep 'ReasmDuplicates|ReasmFails' 可能显示很高的ipv6ReasmDuplicates和ipv6ReasmFails计数器值。 此外,单处理器的Solaris...
MiniWebsvr <= 0.0.6 Remote Resource Consumption DoS Exploit
No description provided by source. import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...
MiniWebsvr <= 0.0.6 Remote Resource Consumption DoS Exploit
No description provided by source. import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail: shinnaiatautisticidotorg" print...
MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service
MiniWebsvr 0.0.6 - Remote Resource Consumption Denial of Service import socket print "-----------------------------------------------------------------------" print "MiniWebsvr 0.0.6 0-Day Resource Consumption" print "url: http://miniwebsvr.sourceforge.net/" print "author: shinnai" print "mail:...
RevilloC MailServer 1.x - 'RCPT TO' Remote Denial of Service
/ ============================================================= 0-day RCPT TO DoS Exploit for RevilloC SMTP version 1.x ============================================================= Sending a large buffer 4080 bytes in conjunction with the "MAIL FOR:" or "RCPT TO:" and other commands can cause a...
GLSA-200609-17 : OpenSSH: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200609-17 OpenSSH: Denial of Service Tavis Ormandy of the Google Security Team discovered a Denial of Service vulnerability in the SSH protocol version 1 CRC compensation attack detector. Impact : A remote unauthenticated attacker...
openssh -- multiple vulnerabilities
Problem Description The CRC compensation attack detector in the sshd8 daemon, upon receipt of duplicate blocks, uses CPU time cubic in the number of duplicate blocks received. CVE-2006-4924 A race condition exists in a signal handler used by the sshd8 daemon to handle the LoginGraceTime option,...
MS Windows PNG File IHDR Block Denial of Service Exploit PoC
Exploit for unknown platform in category dos / poc ============================================================ MS Windows PNG File IHDR Block Denial of Service Exploit PoC ============================================================ !/usr/bin/perl Microsoft Windows PNG IHDR block DoS poc More...
ISS RealSecure / BlackICE DoS
Bug in SMBMailSlotHeapOverflow MS06-035/KB917159 vulnerability attack detection leads to 100 CPU usage...
DEBIAN-CVE-2006-2659
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service CPU consumption via unknown vectors involving usernames that contain the "=" equals character, which is not properly handled during encoding...
TippingPoint IPS intrusion prevention system DoS
Large CPU consumption on HTML documents parsing...
CUPS Server <= 1.1 (Get Request) Denial of Service Exploit
No description provided by source. / dl-cups.c v0.1 CUPS server freeze and processor load "fuckup" exploit bug found and exploit coded by tracewar darklogic team for educaional purposes only. greetz goes to: setuid, matan. / include stdio.h include sys/types.h include sys/socket.h include...
ZyxelIPHandling.txt
|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...
BisonFTP 4R1 - Remote Denial of Service
source: https://www.securityfocus.com/bid/14079/info BisonFTP is prone to a remote denial-of-service vulnerability. A remote attacker may exploit this issue to deny service for legitimate users. Reports indicate that the issue may be exploited only after successful authentication. !/usr/bin/pytho...