6518 matches found
Microsoft Exchange Server - Remote Code Execution (MS05-021)
!/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author: Evgeny Pinchuk For educational purposes only. Tested on: Windows 2000 Server SP4 EN Microsoft Exchange 2000 SP3 Thanks and greets: Halvar Flake thx for the right directions Alex Behar, Yuri Gushin, Ishay Sommer, Ziv Gadot and Dave...
CVE-2005-1036
The CVE-2005-1036 issue affects FreeBSD/amd64 5.x up to 5.4 where the IO permission bitmap was not properly initialized, allowing unprivileged local users to bypass access restrictions and potentially cause denial of service, disclosure of sensitive information, or privilege escalation. Relevant ...
PT-2005-2058 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD versions 5.x through 5.4 on AMD64 Description: The issue allows local users to bypass intended access restrictions, potentially causing a denial of service, obtaining sensitive information, and possibly gaining privileges due to the...
The Includer CGI <= 1.0 Remote Command Execution (new version2)
Exploit for cgi platform in category web applications =============================================================== The Includer CGI .\n"; print STDERR "Exploitation Types:\n \t\t1: includer.cgi?|command|\n \t\t2: includer.cgi?template=|command|\n\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $pa...
CVE-2005-0204
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...
security flaw
Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction...
Siteman 1.1.10 - Remote Administrative Account Addition
Siteman 1.1.10 - Remote Administrative Account Addition !/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path...
CVE-2004-2536
The exitthread function process.c in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS iobitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers,...
CVE-2004-2660
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service memory consumption via certain ODIRECT direct IO write requests...
CVE-2004-2660
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service memory consumption via certain ODIRECT direct IO write requests...
Secure Network Messenger <= 1.4.2 Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print "\nSecure Network Messenger Crasher by ClearScreen\n"; print "\nEnter host to crash: "; $h = STDIN; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host.";...
CVE-2004-1683
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...
Apache - Arbitrary Long HTTP Headers (Denial of Service)
/usr/bin/perl exploit for apache apgetmimeheaderscore vuln adv is here: http://www.guninski.com/httpd1.html version: apache 2 newPeerAddr = $host,PeerPort = $port, Proto = 'tcp' || die "new error$@\n"; binmode$sock; $hostname="Host: $host"; $buf2='A'x50; $buf4='A'x8183; $len=length$buf2; $buf="GE...
Bug in IO bitmap handling? Probably exploitable (2.6.5)
Hello. The attached is the small program that tries to write 0x20 to port 0x20. Normally this should cause SIGSEGV, so the program should crash. I think there is a bug in the 2.6 kernels though, which makes it to not crash if some trivial conditions are met. Basically it seems that if any process...
xploit_dbg.cpp.txt
/ Discovered and coded Jan 25, 2004 Copyright C2004 [email protected] / include include typedef int NTSTATUS; define NTAPI stdcall const IA32SYSENTERCS = 0x174; const IA32SYSENTERESP = 0x175; const IA32SYSENTEREIP = 0x176; const SelCodeKernel = 0x8; const CmosIndx = 0x0E; // CMOS Diagnostic...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. Multiple signedness errors mixed signed and unsigned numbers in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsy...
SQL Server data corruption when a memory range is accessed by the SetFileIoOverlappedRange function and an I/O operation in Windows Vista, in Windows Server 2008, in Windows 7, or in Windows Server 2008 R2
None None...
PT-2013-6341 · Linux +3 · Linux Kernel +7
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.14.1 SUSE Linux Enterprise kernel-pae-devel affected versions not specified SUSE Linux Enterprise kernel-xen-devel affected versions not specified SUSE Linux Enterprise gfs2-kmp-xen affected versions not...