Hikvision NVRs Devices HTTP Buffer Overflow (CVE-2015-4408)

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service service interruption via a crafted HTTP request, aka the ISAPI issue. This plugin only works with Tenable.ot. Please visit...

Stack overflow

handlerequest in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in the web-based management interface of three wireless routers models RV110W, RV130W, and RV215W. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages...

HTTP Buffer Overflow Vulnerability in Multiple D-Link Products

D-Link is an internationally renowned provider of network equipment and solutions, with products that include a wide range of router devices. A buffer overflow vulnerability exists in the implementation of multiple D-Link products, which can be exploited by an attacker to execute arbitrary code i...

OneHTTPD 0.7 - Denial of Service

OneHTTPD 0.7 - Denial of Service !/usr/bin/env python Exploit Title: onehttpd 0.7 Denial of Service Date: 12 Aug 2013 Exploit Author: superkojiman - http://www.techorganic.com Vendor Homepage: https://code.google.com/p/onehttpd/ Version: onehttpd 0.7 Tested on: Windows 7 Ultimate English Windows ...

IBM Tivoli Endpoint 4.1.1 - Remote SYSTEM

IBM Tivoli Endpoint 4.1.1 - Remote SYSTEM !/usr/bin/python tiv-sys.py IBM Tivoli Endpoint 4.1.1 Remote SYSTEM Exploit Jeremy Brown 0xjbrown41-gmail-com June 2011 Discovered by: Brian Adeloye of Tenable Network Security This exploit makes use of two vulnerabilities: 1 Base64 authentication...

Streamripper HTTP头字段解析缓冲区溢出漏洞

StreamRipper能够将网上的MP3流媒体保存到硬盘中，特别适合录制网络MP3广播。 StreamRipper在处理服务器返回的某些HTTP头字段时存在缓冲区溢出，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果用户受骗访问了攻击设置的恶意服务器的话就可能触发这个漏洞，导致执行任意指令。 Streamripper Streamripper 1.61.25 Streamripper Streamripper 1.61.24 Debian ------ Debian已经为此发布了一个安全公告（DSA-1158-1）以及相应补丁: DSA-1158-1：New...