3427 matches found
HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution
!/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork: "Already have an account?" "Enter your...
zawhttpd Web server DoS
DoS on GET request with large number of slashes...
Fenice OMS 1.10 (long get request) Remote Buffer Overflow Exploit
Exploit for linux platform in category remote exploits ================================================================= Fenice OMS 1.10 long get request Remote Buffer Overflow Exploit ================================================================= / IHS Iran Homeland Security public source cod...
CVE-2006-1951
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
Directory traversal
Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." triple dot sequences in a GET request...
Directory traversal
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering...
CVE-2006-1951
The CVE-2006-1951 entry targets SolarWinds TFTP Server versions 8.1 and earlier. A directory traversal flaw allows remote attackers to download arbitrary files by issuing crafted GET requests containing sequences like ....//, which are collapsed into ../ by filtering. This bypass enables access o...
Directory traversal
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
Format string
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1159
Format string vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request...
CVE-2006-1026
CVE-2006-1026 affects JFacets before 0.2. The issue allows remote attackers to escalate privileges to any account by issuing a GET request with a modified account profileID. The description directly states privilege escalation via crafted request; no exploitation specifics are provided beyond tha...
D-Link DWL-G700AP wireless access point DoS
Device crashes on HTTP "GET nn" request via web interface...
CVE-2006-0328
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a 1 GET or 2 SEND request...
Tftpd32 2.81 (GET Request) Format String Denial of Service PoC
Exploit for unknown platform in category dos / poc ============================================================== Tftpd32 2.81 GET Request Format String Denial of Service PoC ============================================================== !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical...
Valdersoft Shopping Cart 3.0 - Remote Command Execution
!/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store [email protected] /$ id;uname -a uid=2526apache gid=2524apache groups=2524apache, 10004psaserv FreeBSD valdersoft.com...
SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)
No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...
CVE-2004-2614
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...
CVE-2004-2614
CVE-2004-2614 describes a buffer overflow in MyWeb 3.3 exploitable by a long HTTP GET request. Consequence: remote denial of service and potential arbitrary code execution. Affected software: MyWeb 3.3. Root cause: buffer overflow. Exploitation details, affected versions beyond 3.3, and remediati...