lexmark-config NSE Script

Retrieves configuration information from a Lexmark S300-S400 printer. The Lexmark S302 responds to the NTPRequest version probe with its configuration. The response decodes as mDNS, so the request was modified to resemble an mDNS request as close as possible. However, the port 9100/udp is listed ...

CVE-2010-0384

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...

CVE-2010-0384

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...

Design/Logic Flaw

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...

CVE-2010-0384

Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log...

HOUTcast 1.9.8/Win32 Cross Site Request Forgery

Exploit Title: HOUTcast Server Version Software Link: http://demo.safecms.co.il/ Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole Subnet Ex: IP: p1.p2.p3.0-255...

CVE-2009-4502

The NETTCPLISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attack...

Zabbix Agent net.tcp.listen Command Injection

$Id: zabbixagentexec.rb 7854 2009-12-14 20:09:46Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

TFTP Daemon v1.9 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================== TFTP Daemon v1.9 Denial of Service Exploit ========================================== Title: TFTP Daemon v1.9 Denial of Service Exploit CVE-ID: OSVDB-ID: Author: Socket0x03 Published: 2009-12-22 Verified...

IP Address Finder XSS Vulnerability

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + IP Address Finder XSS Vulnerability // Author Info x Author: bi0 x Contact: [email protected] x Homepage...

Zabbix Agent net.tcp.listen Command Injection

This module exploits a metacharacter injection vulnerability in the FreeBSD and Solaris versions of the Zabbix agent. This flaw can only be exploited if the attacker can hijack the IP address of an authorized server as defined in the configuration file. This module requires Metasploit:...

Acc Auto Dealer Script v5.0 Persistent XSS and SQL Backup

No description provided by source. Vendor : http://www.accscripts.com/autos/download.html Version: 5.0 /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc Auto Dealer Script Persistent XSS...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 / 9.10 : ntp vulnerability (USN-867-1)

Robin Park and Dmitri Vinokurov discovered a logic error in ntpd. A remote attacker could send a crafted NTP mode 7 packet with a spoofed IP address of an affected server and cause a denial of service via CPU and disk resource consumption. Note that Tenable Network Security has extracted the...

USN-867-1: Ntp vulnerability

Robin Park and Dmitri Vinokurov discovered a logic error in ntpd. A remote attacker could send a crafted NTP mode 7 packet with a spoofed IP address of an affected server and cause a denial of service via CPU and disk resource consumption...

NTP mode 7 denial-of-service vulnerability

Overview NTP contains a vulnerability in the handling of mode 7 requests, which can result in a denial-of-service condition. Description NTP mode 7 MODEPRIVATE is used by the ntpdc query and control utility. In contrast, ntpq uses NTP mode 6 MODECONTROL, while routine NTP time transfers use modes...

Ethereal EIGRP Dissector TLV_IP_INT Long IP Remote DoS Exploit

No description provided by source. / Ethereal network protocol analyzer EIGRP Dissector TLVIPINT Long IP Address Overflow vulnerability proof of concept code version 1.0 Mar 26 2004 by Rmi Denis-Courmont ethereal at simphalampin dot com www simphalempin com dev This vulnerability was found by:...

MiniShare 1.5.5 - Remote Buffer Overflow

/ MiniShare HTTP Server 1.5.5 Remote Buffer overflow Exploit by eMP3R0r TEAM This bug Expl0ited and Discovered by iM4n Sp Tnx2 : Shabgard & Aria Security FOrum The Crimson Idol / include include include include include pragma commentlib, "ws232.lib" define buffer 557 define PORT 80 define NOP 0x9...

CVE-2009-3457

Cisco ACE XML Gateway AXG and ACE Web Application Firewall WAF before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by 1 an OPTIONS request or 2 a crafted GET request, leading to a Message-handling Errors message containing a...

Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness (971888)

This host has Microsoft DNS Devolution and is prone to Third-Level Domain Name Resolving Weakness. OpenVAS Vulnerability Test $Id: secpodmsdnsdevolutionresolvingweakness.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows DNS Devolution Third-Level Domain Name Resolving Weakness 971888 Authors...

Cisco应用控制引擎(ACE) XML网关IP地址信息泄漏漏洞

Bugraq ID: 36522 Cisco ACE XML网关是Cisco应用控制引擎ACE家族产品的重要组件。 Cisco ACE XML网关缺少正确的错误处理管理，远程攻击者可以利用漏洞获得内部IP信息。 Cisco ACE XML网关在不能正确找到请求相匹配的处理器时，会直接对客户端提供包含内部IP地址的错误消息应答。 相关的请求不仅仅限于OPTIONS请求类型，如果GET请求使用的路径没有相应的处理器配置，也同样泄漏内部IP地址信息。 Cisco Application Control Engine ACE XML Gateway 6.0 Cisco Application...