ONO Hitron CDE-30364 Router - Denial of Service

ONO Hitron CDE-30364 Router - Denial of Service !/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famo...

ONO Hitron CDE-30364 Router - Denial of Service

!/usr/bin/python ----------------------------------------------------------------------------------------- Description: ----------------------------------------------------------------------------------------- Hitron Technologies CDE-30364 is a famous ONO Router. The Hitron Technologies CDE-30364...

Anonymous Search engine 'DuckDuckGo' Android app offers Tor integration

The world of mobile search is about to get a bit more anonymous. Thanks to the fears over government surveillance and corporate tracking, Anonymous Search Engine DuckDuckGo continues to break its own search records. DuckDuckGo Search & Stories - Android app deliver the same functionality as...

Discuz推广功能任意刷分

简要描述： DZ的访问加分的推广功能存在缺陷 详细说明： 这里是定义IP的地方 当XFORWARDEDFOR头存在并且不为那几种情况时使用这个作为IP地址 因为推广积分是跟访问IP有关的，所以只要修改XFORWARDEDFOR就可以任意刷积分了 漏洞证明： array'method' = "GET",'ignoreerrors'=true, 'header' = "XFORWARDEDFOR: $ip"; $url = "http://www.xxx.com/forum.php?fromuid=3007"; $contents =...

Cisco Application Control Engine Login Administrator IP Address Overlap (cisco-sa-20120620-ace)

The Cisco Application Control Engine ACE software installed on the remote Cisco IOS device is earlier than A42.3 / A51.1. It, therefore, potentially does not properly share a management IP address among multiple contexts when multicontext mode is enabled. This might allow an administrative user t...

CVE-2013-2791

MatrikonOPC SCADA DNP3 OPC Server 1.2.0 allows remote attackers to cause a denial of service master-station daemon crash via a malformed DNP3 TCP packet from the IP address of an outstation...

[(D)DoS Deflate] Script designed to block a denial of service attack

DoS+Deflate.gif DDoS Deflate is a lightweight bash shell script designed to assist in the process of blocking a denial of service attack. It utilizes the command below to create a list of IP addresses connected to the server, along with their total number of connections. It is one of the simplest...

NETGEAR ProSafe - Information Disclosure

NETGEAR ProSafe - Information Disclosure !/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php...

BIND Vulnerablilty Enables DNS Cache Poisoning Attack

A vulnerability in the BIND domain name system DNS software could give an attacker the ability to easily and reliably control queried name servers chosen by the most widely deployed DNS software on the Internet, according to new research presented at the Woot Conference in Washington D.C. today...

Java based cross platform malware found in wild

Other than Windows, Now other platforms are becoming more popular every day and attracting bad guys who are starting to create malicious code for other systems. Java applications can run on multiple platforms with ease, thus no surprise that malicious code written in Java that is designed to targ...

Galil-RIO Modbus - Denial of Service

Exploit Title: Galil RIO-47100 Date: 05-01-2013 Exploit Author: Sapling Vendor Homepage: www.galilmc.com Version: Rio Firmware Prior to 1.1d CVE : CVE-2013-0699 ICSA: ICSA-13-116-01 / There are many different ways to crash this PLC but most of them are centralized around the repeating a request i...

whois-ip NSE Script

Queries the WHOIS services of Regional Internet Registries RIR and attempts to retrieve information about the IP Address Assignment which contains the Target IP Address. The fields displayed contain information about the assignment and the organisation responsible for managing the address space...

MGASA-2013-0228 Updated squid packages fix security vulnerabilities

Due to incorrect data validation Squid is vulnerable to a buffer overflow attack when processing specially crafted HTTP requests. This problem allows any trusted client or client script who can generate HTTP requests to trigger a buffer overflow in Squid, resulting in a termination of the Squid...

Nginx 1.3.9 / 1.4.0 Buffer Overflow

encoding: ASCII abort"$0 host port" if ARGV.length 2 require 'ronin' $count = 0 rop address taken from nginx binary find in the repo poprdi = 0x00427006 poprsi = 0x0043a00e poprdx = 0x0041b8fa poprax = 0x00442c80 mmap64 = 0x4029b0 mmapgot = 0x67f290 mmapaddr = 0x00410000 rsitorax = 0x0042afcb...

Download Tortilla Tool - Anonymize everything through Tor

Recent disclosures by whistleblower Edward Snowden claiming that internet traffic is being intercepted and used by the Americans in their war on terror, force to re-think about the user's privacy and online anonymity. It has been relatively common knowledge for years that wherever we go on the we...

AVAST Internet Security Suite - Persistent Vulnerabilities

Title: ====== AVAST Internet Security Suite - Persistent Vulnerabilities Date: ===== 2013-06-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=969 VL-ID: ===== 969 Common Vulnerability Scoring System: ==================================== 3.4 Introduction: =============...

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass

Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote authentication bypass vulnerability affects TRENDnet TE100-P1U Print Serve...

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass

TRENDnet TE100-P1U Print Server Firmware 4.11 - Authentication Bypass Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote...

TRENDnet TE100-P1U Authentication Bypass

Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako Firmware Version: 4.11 Tested on: Windows 7 Description: ===================== A remote authentication bypass vulnerability affects TRENDnet TE100-P1U Print Serve...

TRENDnet TE100-P1U Authentication Bypass Vulnerability

TRENDnet TE100-P1U with print server firmware 4.11 suffers from an authentication bypass vulnerability that allows reset to factory settings or IP address change. Exploit Title: TRENDnet TE100-P1U Print Server Firmware 4.11 Authentication Bypass Vulnerability Date: 2013/6/20 Exploit Author: Chako...