Barracuda Firewall 6.1.2 #36 - Exception Vulnerability

Document Title: =============== Barracuda Firewall 6.1.2 36 - Exception Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1102 Barracuda Networks Security ID BNSEC: BNSEC-2398 https://www.barracuda.com/support/knowledgebase/501600000013m1P...

Barracuda Networks FW - Bypass & Exception Vulnerability

Document Title: =============== Barracuda Networks FW - Bypass & Exception Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1210 View Video: http://www.youtube.com/watch?v=-cTO7ork6Hg Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1102 Release...

GE Proficy HMI/SCADA DNP3 Driver Input Validation

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on October 14, 2014, and is being released to the NCCIC/ICS-CERT web site. Independent researcher Adam Crain of Automatak has identified an improper input validation in the DNP3 driver provided by Catapult Software...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

AASync 2.2.1.0 - (Win32) Stack Buffer Overflow (LIST)

No description provided by source. $Id: aasynclistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

SafeNet Sentinel Keys Server Crash PoC

No description provided by source. Exploit Title: SafeNet Sentinel Keys Server DoS Date: 10 Sep 2012 Exploit Author: retset https://twitter.com/ret5et Vendor Homepage: http://www.safenet-inc.com/ Version: Sentinel Protection Installer v7.6.5 sntlkeyssrvr.exe ver. 1.3.1.3 Download link:...

RM Downloader .m3u BOF (SEH)

No description provided by source. !/usr/bin/perl -w Author: Jacky Version: 3.0.2.1 Tested on: Windows XP SP2 RM Downloader m3u Buffer Overflow SEH Perl Edition Discovered by :: Peter Van Eeckhoutte VERY BIG GREETZ TO HIM ;- Written by Jacky All Greetz for Peter Van Eeckhoutte and Corelan Team !!...

siemens automation license manager <= 500.0.122.1 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Window...

Nuance PDF Reader 6.0 - Launch Stack Buffer Overflow

No description provided by source. $Id: nuancepdflaunchoverflow.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

WebBBS Pro 1.18 - GET Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7890/info A vulnerability has been discovered in WebBBS Pro, which may allow a remote attacker to trigger a denial of service condition in the WebBBS HTTP server. It has been reported that a remote attacker may cause the...

Novell eDirectory 8.x iMonitor HTTPSTK Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An...

Winamp <= 5.06 IN_CDDA.dll Remote Buffer Overflow Exploit

No description provided by source. / Credits go to the author How to fix and study the bug: - The cdda library only reserves 20 bytes for names when files are .cda - run Winamp with ollye - when loaded locate and break at: 10009BBB 8D4C24 20 LEA ECX,DWORD PTR SS:ESP+20 10009BBF 84C0 TEST AL,AL...

Static HTTP Server 1.0 - SEH Overflow

No description provided by source. !/usr/bin/env python import os TitleStatic HTTP Server SEH Overflow - HTTP Config - httptiplist Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy, Security Analyst @ Independent Security Evaluators...

Mocha LPD 1.9 - Remote Buffer Overflow DoS PoC

No description provided by source. !/usr/bin/python Mocha LPD v1.9 Remote Heap Overflow Exploit ol skool 'write 4' whoops, I said it was a DoS. My bad. btw yes, I know its 2010 :0 CVE: 2010-1687 tested on XP sp1 use anti debugging to see it work - !hidedebug zwqueryinformationprocess call trace:...

AT-TFTP Server 2.0 - Stack Based Buffer Overflow DoS

No description provided by source. Exploit Title: AT-TFTP 2.0 long filename stack based buffer overflow - DOS Date: 12.04.2013 Exploit Author: xisone@STM Solutions Vendor Homepage: http://www.alliedtelesis.com/ Software Link:...

VicFTPS < 5.0 (CWD) Remote Buffer Overflow Exploit PoC

No description provided by source. / VicFTPs Server CWD Remote Buffer Overflow Vulnerability DoS Proof of concept r0ut3r writ3r at gmail.com Thanks to: Marsu Marsupilamipowa at hotmail.fr for helping me out with this vulnerability. Greets Marsu, and Timq. Description: Sending a long argument to C...

Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit

No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...

VCDGear 3.50 (.cue) - Stack Buffer Overflow Exploit

No description provided by source. !/usr/bin/ruby ''' Author: Provensec www.provensec.com [email protected] Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on...

Webchat 2.0 Module Path Disclosure Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7774/info Webchat has been reported prone to a path disclosure weakness. Reportedly an attacker may make a malicious HTTP request for several Webchat PHP scripts to trigger the condition. Under some circumstances the...

MS Internet Explorer <= 6.0.2900 SP2 (CSS Attribute) Denial of Service

No description provided by source. !-- Internet Explorer = 6.0.2900 SP2 suffers from a DoS vulnerability in which a remote users Internet Explorer session can be crashed when hovering their cursor over a specially made table. The fault occurs when the position CSS attribute is set to a table. Thi...