Design/Logic Flaw

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to 1 the Lock Server or 2 the Advanced Multithreaded Server...

CVE-2011-0489

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to 1 the Lock Server or 2 the Advanced Multithreaded Server...

CVE-2011-0489

CVE-2011-0489 affects Objectivity/DB 10.0 server components, where authentication is not required for administrative commands. This allows remote attackers to modify data, retrieve sensitive information, or cause a denial of service by sending commands over TCP to the Lock Server or the Advanced ...

Objectivity/DB Lack of Authentication Remote Exploit

!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...

Objectivity/DB unauthorized access

It's possible to execute commands without authentication...

Objectivity/DB - Lack of Authentication

!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...

Objectivity/DB Lack Of Authentication

!/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persistent object store is the enabling technology powering...

Objectivity/DB administration tools lack authentication

Overview The administration tools i.e. ookillls, oostopams, etc for Objectivity/DB do not require authentication for local or remote operation. Description Objectivity/DB comes with several administration tools for database maintenance. By design, these tools do not require authentication. An...

Objectivity/DB Lack of Authentication Remote Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persisten...

W-Agora 4.2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Packet Storm! I want to warn you about Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection and Denial of Service vulnerabilities in W-Agora. SecurityVulns ID: 11324. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was...

Winamp 5.5.8 Stack Overflow

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by fdisk This POC was already been released here without proper shellcode:...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

!/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at deniable.org This POC was already been released here...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow (SEH)

Winamp 5.5.8 inmod plugin - Local Stack Overflow SEH !/usr/bin/python finally got time to finish what I started... Winamp 5.5.8.2985 inmod plugin Stack Overflow SEH WINDOWS XP SP3 EN Fully Patched Bug found by http://www.exploit-db.com/exploits/15248/ POC and Exploit by @fdiskyou e-mail: rui at...

axdcms-0.1.1 - Local File Inclusion

axdcms-0.1.1 - Local File Inclusion \ \ \ / / / \ / / / |// / / // // / / / // // / // // / // // / //|| priasantai.uni.cc | team-elite.us axdcms-0.1.1 === Local File Include Vulnerbility Author : n0n0x Homepage: http://priasantai.uni.cc/ Download script :...

openSite 0.2.2 Beta - Local File Inclusion

openSite 0.2.2 Beta - Local File Inclusion opensite-v0.2.2-beta === Local File Include vuln By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/contentone/files/openSite/opensite-v0.2.2-beta/opensite-v0.2.2-beta.zip/download...

Music Animation Machine MIDI Player - Local Buffer Overflow (SEH)

Music Animation Machine MIDI Player - Local Buffer Overflow SEH Exploit Title: Music Animation Machine MIDI Player MAMX SEH BOF Date 1/4/2011 Author: Acidgen mailto:spama t hgrayhat.se Software Link: http://www.musanim.com/player/MAMPlayer2006aug19035.zip Version: 2006aug19 Release 035 Tested on:...

EUVD-2010-4318

admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid dbtype parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

EUVD-2010-4319

Directory traversal vulnerability in admin/upgradeunattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the dbtype parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP...

CoolPlayer 2.18 DEP Bypass

Exploit for windows platform in category local exploits Exploit Title: CoolPlayer 2.18 DEP Bypass Date: January 2, 2011 Author: Blake Version: 2.18 Tested on: Windows XP SP3 running in Virtualbox Uses SetProcessDEPPolicy to disable DEP for the process Thanks to mrme for the encouragement Exploit-...