Core FTP LE 2.1 Buffer Overflow

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

Core FTP LE 2.1 build 1612 local buffer overflow PoC

No description provided by source. !/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX...

Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

DEBIAN-CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024

CVE-2009-3024 affects the Perl IO::Socket::SSL module (versions 1.14–1.25). The verify_hostname_of_cert() function only matches the hostname prefix when no wildcard is used, allowing remote attackers to bypass hostname verification. Gentoo GLSA 201101-06 and related OpenVAS entries indicate vulne...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

CVE-2009-3024: Undefined Security Weakness

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...

gnutls security update

1.4.1-3.5 - fix NUL characters in DN and SAN cert fields issue, make sure gnutlsx509crtcheckhostname fails when certificate has no CN or SAN CVE-2009-2730 516231...

CVE-2008-6916

CVE-2008-6916 affects Siemens SpeedStream 5200 with NetPort Software 1.1. The issue is an authentication bypass that can be triggered by an invalid Host header, possibly involving a trailing dot in the hostname. The NVD entry reports a high risk with CVSS v2 base score 10.0 (Network, low access c...

Fedora Core 10 FEDORA-2009-7544 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7544. OpenVAS Vulnerability Test $Id: fcore20097544.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7544 perl-IO-Socket-SSL Authors: Thomas Reinke Copyrigh...

Fedora Core 11 FEDORA-2009-7435 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7435. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-7544 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7544. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Morcego CMS 1.7.6 SQL Injection

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , +\n". "- Ex. : php xpl.php localhost /MorcegoCMS/ root -\n". "+ +\n". "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-\n". "\n"; function hex...

d.net CMS Arbitrary Reinstall/Blind SQL Injection Exploit

No description provided by source. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , / / // / , / / / + - ,/,// //||/ ///||// - + // + - - +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + Arbitrary...

Microsoft DNS Server Internal Hostname Disclosure Detection

Microsoft DNS server might be prone to an internal hostname disclosure. SPDX-FileCopyrightText: 2009 Tim Brown Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...