3490 matches found
Essentia Web Server 2.15 (GET Request) Remote DoS Exploit
Exploit for unknown platform in category dos / poc ========================================================= Essentia Web Server 2.15 GET Request Remote DoS Exploit ========================================================= !/usr/bin/perl use IO::Socket; use Getopt::Std; getopts'h:', %args; if...
CVE-2006-5596
Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ dot dot backslash sequences in an HTTP GET request...
Utility for generating HTTP/1.x requests for shellcodes
Utility for generating HTTP/1.x requests for shellcodes. Shellcode exploit for generator platform / genhttpreq.c, utility for generating HTTP/1.x requests for shellcodes SIZES: HTTP/1.0 header request size - 18 bytes+ HTTP/1.1 header request size - 26 bytes+ NOTE: The length of the selected HTTP...
CVE-2006-5210
Directory traversal vulnerability in IronWebMail before 6.1.1 HotFix-17 allows remote attackers to read arbitrary files via a GET request to the IMFILE identifier with double-url-encoded "../" sequences "%252e%252e/"...
CVE-2006-5112
CVE-2006-5112 reflects a buffer overflow in the NaviCOPA Web Server 2.01 caused by handling of long HTTP GET requests, enabling remote code execution. Connected sources confirm a public proof-of-concept/exploit vector: a Metasploit module named navicopa_get_overflow (and related exploit reference...
CVE-2006-5112
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request...
NaviCOPA Web Server buffer overflow
Buffer overflow on oversized GET request...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Multithreaded TFTP And any-one else i forgot ^ ^. \DEBUG INF0// First chance exceptions are reported before any exception handling. This exception may be expected and handled...
Multi-Threaded TFTP 1.1 - GET Denial of Service
Multi-Threaded TFTP 1.1 - GET Denial of Service !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is...
Multithreaded TFTP <= 1.1 (Long Get Request) Denial of Service Exploit
No description provided by source. !/usr/bin/python Multithreaded TFTP 1.1 Server d0s exploit by n00b the following is affected causing a denial of service Due to an overly long GET request to the ftp server Tested on winx xp sp1,sp2 eng. Vendor dont know but s00n will :p n00b is credited for...
CVE-2006-4523
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...
CVE-2006-4523
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...
PT-2006-5318 · 2Wire · Officeportal +1
Name of the Vulnerable Software and Affected Versions: 2Wire, Inc. HomePortal and OfficePortal Series modems and routers affected versions not specified Description: The issue concerns the web-based management interface, which can be crashed by remote attackers through a specific sequence in a GE...
CVE-2006-4450
usercpavatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request...
NewsLetter <= 3.5 (NL_PATH) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= NewsLetter v3.5 = NLPATH Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://knusperleicht.at/ | |...
CVE-2006-3534
The SHOUTcast DSP server is affected by two CVEs: CVE-2006-3534 (pre-1.9.6) and CVE-2006-3535 (pre-1.9.7). The underlying issue is a directory traversal filter bug that decodes input after treating encoded sequences, enabling remote attackers to read arbitrary files via encoded dot-dot (%2E%2E) i...
GLSA-200607-05 : SHOUTcast server: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200607-05 SHOUTcast server: Multiple vulnerabilities The SHOUTcast server is vulnerable to a file disclosure when the server receives a specially crafted GET request. Furthermore it also fails to sanitize the input passed to the...
CVE-2006-3252
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request...