CVE-2009-3024

CVE-2009-3024 affects the Perl IO::Socket::SSL module (versions 1.14–1.25). The verify_hostname_of_cert() function only matches the hostname prefix when no wildcard is used, allowing remote attackers to bypass hostname verification. Gentoo GLSA 201101-06 and related OpenVAS entries indicate vulne...

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service

SolarWinds TFTP Server 9.2.0.111 - Remote Denial of Service !/usr/bin/perl SolarWinds TFTP Server newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $boom= "\x00\x06\x54\x9d\x68\x21\xde\x59\x30\x9a\x0b\xb5\xd4\x94\x94\x42\x3c\xeb\xc5"...

EesySec Personal Firewall Remote Buffer Overflow Exploit

!/usr/bin/perl + Bug : EesySec Personal Firewall Remote Buffer Overflow Exploit + program Download : http://www.effectmatrix.com/easysec/ + Author : theEdit0r + Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site: Expl0iters.ir Anti-security.i...

EasySec Personal Firewall Buffer Overflow

!/usr/bin/perl + Bug : EesySec Personal Firewall Remote Buffer Overflow Exploit + program Download : www.effectmatrix.com + Author : theEdit0r + Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site: Expl0iters.ir Anti-security.ir + Big thnx:...

Uploaderr Arbitrary File Upload

!/usr/bin/perl Title: Uploaderr Remote Arbitrary File Upload Exploit Credit: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v34tyahoodotcom Tehran - Iran Vendor: http://www.uploaderr.com/ Price: 9.95$ Remote: Yes Dork: "Powered by Uploaderr" Fix: Not Available Special thx: Neo limpizikneo4tyahoodotco...

Fedora Core 10 FEDORA-2009-7544 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7544. OpenVAS Vulnerability Test $Id: fcore20097544.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7544 perl-IO-Socket-SSL Authors: Thomas Reinke Copyrigh...

Fedora Core 11 FEDORA-2009-7435 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7435. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-7544 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory FEDORA-2009-7544. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora 10 : perl-IO-Socket-SSL-1.26-1.fc10 (2009-7544)

This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example www.example.org would match a certificate starting with www.exam. Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 11 : perl-IO-Socket-SSL-1.26-1.fc11 (2009-7435)

This update to version 1.26 fixes an issue where only the prefix of the hostname was checked if there was no wildcard present, so for example www.example.org would match a certificate starting with www.exam. Note that Tenable Network Security has extracted the preceding description block directly...

[SECURITY] Fedora 10 Update: perl-IO-Socket-SSL-1.26-1.fc10

This module is a true drop-in replacement for IO::Socket::INET that uses SSL to encrypt data before it is transferred to a remote server or client. IO::Socket::SSL supports all the extra features that one needs to write a full-featured SSL client or server application: multiple SSL contexts, ciph...

[SECURITY] Fedora 11 Update: perl-IO-Socket-SSL-1.26-1.fc11

This module is a true drop-in replacement for IO::Socket::INET that uses SSL to encrypt data before it is transferred to a remote server or client. IO::Socket::SSL supports all the extra features that one needs to write a full-featured SSL client or server application: multiple SSL contexts, ciph...

Oracle Secure Backup login.php ora_osb_lcookie command execution

Added: 06/22/2009 CVE: CVE-2008-4006 BID: 33177 OSVDB: 51343 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command execution vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...

Oracle Secure Backup login.php ora_osb_lcookie command execution

Added: 06/22/2009 CVE: CVE-2008-4006 BID: 33177 OSVDB: 51343 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command execution vulnerability in the Oracle Secure Backup web interface allows remote attackers to execute arbitrary...

The father of all bombs - another webdav fiasco

Apache moddav / svn Remote Denial of Service Exploit Google Dorks: inurl:svn inurl:trunk "powered by subversion version" Information on the bug XML Bomb: http://blog.didierstevens.com/2008/09/23/dismantling-an-xml-bomb/ Enjoy! -------------------------------------------------------------------...

Apache mod_dav svn - Remote Denial of Service

Apache moddav svn - Remote Denial of Service furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / June 2009 Will exhaust all system memory Needs Authentication on normal DAV This can be especially serious stuff when used against svn subversion servers!! Svn might let t...

Apache mod_dav / svn Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================== Apache moddav / svn Remote Denial of Service Exploit ===================================================== furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / Jun...

Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit (pl)

No description provided by source. !/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x ka0x01alt+64gmail.com Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Socke...

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass 2 !/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Sock...

Microsoft IIS 6.0 - WebDAV Remote Authentication Bypass (2)

!/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Socket ; my $host, $path = @ARGV ; my $port = 80 ; webserver...