Ventrilo <= 2.3.0 - Remote Denial of Service Exploit (all platforms)

No description provided by source. / by Luigi Auriemma Windows compiled version: http://aluigi.altervista.org/poc/ventboom.zip /str0ke / include stdio.h include stdlib.h include string.h / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: [email protected] web:...

phf buffer overflow exploit for Linux-x86

No description provided by source. / | phx.c -- phf buffer overflow exploit for Linux-ix86 | Copyright c 2000 by proton. All rights reserved. | | This program is free software; you can redistribute it and/or modify | it under the terms of the GNU General Public License as published by | the Free...

LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...

Microsoft Visual Studio .NET msdds.dll Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14594/info Microsoft Visual Studio .NET is prone to a vulnerability that could allow remote arbitrary code execution. This is due to a buffer overflow that is exposed during COM object instantiation. The list of vulnerabl...

Data General DG/UX 5.4 inetd Service Exhaustion Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/1071/info A Denial of service DoS attack is possible with the default version of inetd distributed with Data General's DG/UX operating system. By performing a scan utilizing nmap's OS detection option -O, the inetd daemon...

DG/UX 4.20 lpsched Long Error Message Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2509/info DGUX is the Data General revision of UNIX. It is designed as a solution for Intel systems produced by Data General. A problem in the handling of error messages by the printer scheduler could allow arbitrary...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Cisco/Protego CS-MARS 4.2.1 remote command execution, system compromise via insecure JBoss installation. Fully functional POC code by Jon Hart [email protected] Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by...

Windows NT 4.0 - Remote Registry Request Dos Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1331/info In special circumstances while handling requests to access the Remote Registry Server, Windows NT 4.0 can crash due to winlogon.exe's inability to process specially malformed remote registry requests. Rebooting...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

Linux Kernel 2.4/2.6 - sock_sendpage() Local Root Exploit (PPC Edition)

No description provided by source. / Linux socksendpage NULL pointer dereference Copyright 2009 Ramon de Carvalho Valle [email protected] This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

glibc and eglibc 2.5, 2.7, 2.13 - Buffer Overflow Vulnerability

No description provided by source. / Exploit-DB Note: Reportedly does not work. See output at the bottom of the entry. $FILE: bug-mangle.c Comment: Proof of concept $VERSION$ Author: Hector Marco [email protected] Ismael Ripoll [email protected] $LICENSE: This program is free software; you can...

Jupiter CMS 1.1.5 - Remote File Upload Exploit

No description provided by source. ? / Title: Jupiter CMS 1.1.5 File Upload Vulnerability Advisory ID: 12070214 Risk level: High Author: DarkFig [email protected] URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = ' http://localhost/jupiter/'; $xpl =...

Flynax General Classifieds 4.0 - CMS Multiple Vulnerabilities

No description provided by source. Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System:...

Pandora FMS <= 3.1 Path Traversal and LFI

Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as...

Joomla Joaktree Component 1.0 - SQL Injection Vulnerability

No description provided by source. / ! Joomla! Joaktree component SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information +...

IBM DB2 9.8 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.8 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists in the GSKit component when initiating SSL/TLS connections due t...

AT&T Warns Customers of Data Breach

AT&T has notified some of its mobile customers that employees of one of its contractors accessed some customer information, including birth dates and Social Security numbers, in an effort to generate codes that could be used to unlock devices. The company did not specify how many customers were...

openSUSE Security Update : fail2ban (openSUSE-SU-2014:0348-1)

The fail2ban tool was updated to version 0.8.12 to fix various security issues and also brings bugfixes and features. Security issues fixed: A remote unauthenticated attacker may cause arbitrary IP addresses to be blocked by Fail2ban causing legitimate users to be blocked from accessing services...

Python Detection (SSH Login / Mac OS X)

SSH login-based detection of Python for Mac OS X. Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Debian Security Advisory DSA 2953-1 (dpkg - security update)

Multiple vulnerabilities were discovered in dpkg that allow file modification through path traversal when unpacking source packages with specially crafted patch files. This update had been scheduled before the end of security support for the oldstable distribution squeeze, hence an exception has...