Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service

!/usr/bin/perl Novell Netware CIFS And AFP Remote Memory Consumption DoS Platform: Novell Netware 6.5 SP8 Found by Francis Provencher for Protek Research Lab's http://protekresearch.blogspot.com/ PRL Novell Netware CIFS.nlm Remote Memory Consumption Denial of Service Here is a modified version fr...

Smart Vision Script News - newsdetail.php SQL Injection (2)

Smart Vision Script News - newsdetail.php SQL Injection 2 !usr/bin/perl Exploit Title: Smart Vision Script News newsdetail SQL Injection Exploit Date: 01-04-2010 Author: darkmasking This was written for educational purpose only. Use it at your own risk. Author will be not responsible for any...

pL-PHP <= beta 0.9 Local File Include Exploit

Exploit for unknown platform in category web applications ============================================= pL-PHP = beta 0.9 Local File Include Exploit ============================================= !/usr/bin/perl pL-PHP = beta 0.9 Local File Include Exploit Discovered by cr4wl3r Contact :...

Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

Xerox WorkCentre - PJL Daemon Buffer Overflow PoC source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

pL-PHP Beta 0.9 - Local File Inclusion

pL-PHP Beta 0.9 - Local File Inclusion !/usr/bin/perl pL-PHP = beta 0.9 Local File Include Exploit Discovered by cr4wl3r Contact : cr4wl3r!linuxmail.org use IO::Socket; use LWP::Simple; @apache= "../apache/logs/error.log", "../apache/logs/access.log", "../../apache/logs/error.log",...

Xerox WorkCentre - PJL Daemon Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/38010/info Xerox WorkCentre is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code with the privileges of the...

[SECURITY] Fedora 11 Update: tomcat-native-1.1.18-1.fc11

Tomcat can use the Apache Portable Runtime to provide superior scalability, performance, and better integration with native server technologies. The Apache Portable Runtime is a highly portable library that is at the heart of Apache HTTP Server 2.x. APR has many uses, including access to advanced...

KDE XMLHttpRequest安全绕过和kioslave输入验证漏洞

KDE是一款UNIX工下开源图形桌面环境。 KDE存在多个安全漏洞，具体如下： Ark输入过滤错误： KDE归档工具，由于不充分的校验可导致特殊构建的归档文件，使用未知的MIME类型，当使用KHTML实例渲染时，可触发不可控的XMLHTTPRequests给远程站点。 IO Slaves输入过滤错误： KDE协议处理器执行不充分的输入校验，攻击者可以构建恶意URI可触发JavaScript执行，另外'help://'协议处理器存在目录遍历攻击。不过注意此问题的恶意URI不能嵌入在Internet域内容中。 KMail输入过滤错误：...

Mandriva Security Advisory MDVSA-2009:252-1 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory MDVSA-2009:252-1. OpenVAS Vulnerability Test $Id: mdksa20092521.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:252-1 perl-IO-Socket-SSL Authors: Thomas Reinke Copyrigh...

Mandriva Security Advisory MDVSA-2009:252-1 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory MDVSA-2009:252-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Polipo 1.0.4 Remote Memory Corruption

!/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel like waiting two weeks for them to sit on it,...

kernel: megaraid_sas permissions in sysfs

The pollmodeio file for the megaraidsas driver in the Linux kernel 2.6.31.6 and earlier has world-writable permissions, which allows local users to change the I/O mode of the driver by modifying this file...

PT-2009-6204 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.32-rc7 Description: The issue is related to the fuse direct io function in the fuse subsystem, which might allow attackers to cause a denial of service, potentially through vectors related to a...

Serv-U Web客户端HTTP请求远程溢出漏洞

BUGTRAQ ID: 36895 Serv-U FTP是一款FTP服务程序。 Serv-U产品捆绑有一个简单的基于浏览器的传输客户端，这个客户端在处理超长的会话Cookie时存在缓冲区溢出漏洞。如果用户受骗连接到了恶意服务器并向WebClient HTTP服务返回了超长的会话Cookie，就可能触发这个溢出，导致在用户机器上执行任意指令。 RhinoSoft Serv-U 9.0.0.5 临时解决方法： 禁用WebClient服务，仅使用Serv-U FTP/SFTP组件。 厂商补丁： RhinoSoft ---------...

FreeBSD : KDE -- multiple vulnerabilities (6f358f5a-c7ea-11de-a9f3-0030843d3802)

oCERT reports : Ark input sanitization errors: The KDE archiving tool, Ark, performs insufficient validation which leads to specially crafted archive files, using unknown MIME types, to be rendered using a KHTML instance, this can trigger uncontrolled XMLHTTPRequests to remote sites. IO Slaves...

KDE -- multiple vulnerabilities

oCERT reports: Ark input sanitization errors: The KDE archiving tool, Ark, performs insufficient validation which leads to specially crafted archive files, using unknown MIME types, to be rendered using a KHTML instance, this can trigger uncontrolled XMLHTTPRequests to remote sites. IO Slaves inp...

[oCERT-2009-015] KDE multiple issues

2009-015 KDE multiple issues Description: KDE, an open source desktop environment, suffers from several bugs that pose a security risk. The oCERT team was contacted by Portcullis Security requesting help in handling a series of issues reported to the KDE project back in July 2007. Because of an...

KDE 4.3.2 - Multiple Input Validation Vulnerabilities

KDE 4.3.2 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/36845/info KDE is prone to multiple input-validation vulnerabilities that affect 'Ark', 'IO Slaves', and 'Kmail'. An attacker can exploit these issues by tricking an unsuspecting victim into opening a...

KDE 4.3.2 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/36845/info KDE is prone to multiple input-validation vulnerabilities that affect 'Ark', 'IO Slaves', and 'Kmail'. An attacker can exploit these issues by tricking an unsuspecting victim into opening a malicious file. A successful attack will allow arbitra...

Pegasus Mail Client 4.51 - Remote Buffer Overflow

Pegasus Mail Client 4.51 - Remote Buffer Overflow Application: Pegasus Mail Client Platforms: Windows XP Professional SP2 Exploitation: remote BoF Date: 2009-10-06 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code Only DoS =============== 1 Introductio...