176 matches found
w3tw0rk / Pitbul IRC Bot Remote Code Execution
This module allows remote command execution on the w3tw0rk / Pitbul IRC Bot. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'w3tw0rk / Pitbul IRC Bot Remote Code Execution', 'Description' = %q...
Legend Perl IRC Bot - Remote Code Execution
Legend Perl IRC Bot - Remote Code Execution legendrce.py Legend Perl IRC Bot Remote Code Execution PoC author: Jay Turla @shipcod3 description: This is a RCE PoC for Legend Bot which has been used in the Shellshock spam October 2014. reference:...
Hybrid Ircd 5.0.3 p7 Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/581/info Ircd hybrid-6 up to beta 58 has a vulnerability which can allow remote access to the irc server ircd. In most cases this attack results in the attacker gaining the privileges of the user 'irc'. This vulnerability...
XChat 2.8.7b - 'ircs://' URI Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29696/info XChat is prone to a vulnerability that allows remote attackers to execute arbitrary commands in the context of the vulnerable user. This issue may lead to a remote compromise. The issue arises because of improp...
XChat <= 2.8.7b (URI Handler) Remote Code Execution Exploit (ie6/ie7)
No description provided by source. Xchat = 2.8.7b Remote Code Execution tested on Windows XP SP1+SP2+SP3, IE6 & IE7 fully patched Vendor : http://xchat.org/ Affected Os : Windows Risk : critical This bug is related to the URI Handler vulnerability but the approch is a bit different. We don't use...
Jinais IRC Server 0.1.8 - NULL Pointer PoC
No description provided by source. / Jinais IRC Server 0.1.8 - NULL Pointer PoC This PoC will disconnect the affected target IRC server using a NULL Pointer vulnerability. Copyright 2010 Salvatore Fresta aka Drosophila This program is free software; you can redistribute it and/or modify it under...
PISG 0.54 IRC Nick HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be...
DALnet Bahamut IRCd 4.6.5 "SUMMON" Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1404/info Dalnet ircd is a server for a popular internet chat application, IRC Internet Relay Chat. The implementation for one of its features, the summon command, has a hole which could grant an attacker remote access on...
Crackalaka IRC Server 1.0.8 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10092/info It has been reported that Crackalaka may be prone to a remote denial of service vulnerability that may allow an attacker to crash the server by sending an excessive amount of data. Crackalaka version 1.0.8 is...
IRCnet IRCD 2.10 Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8817/info IRCnet IRCD has been reported prone to a buffer overflow vulnerability that may be exploited by local users. This issue may be exploited to crash the affected server. Although unconfirmed, due to the nature of...
Ruby on Rails exploit could hijack unpatched servers for botnet
Server Administrators are being urged to update their Ruby on Rails servers following the discovery of an active malware campaign targeting vulnerable versions of the web development framework. According to security researcher Jeff Jarmoc, Hackers are exploiting a known and patched vulnerability ...
Ruby on Rails exploit could hijack unpatched servers for botnet
Server Administrators are being urged to update their Ruby on Rails servers following the discovery of an active malware campaign targeting vulnerable versions of the web development framework. According to security researcher Jeff Jarmoc, Hackers are exploiting a known and patched vulnerability ...
ircd-hybrid 8.0.5 Denial Of Service
!/usr/bin/perl ircd-hybrid remote denial of service exploit for CVE-2013-0238 quick and dirty h4x by kingcope tested against ircd-hybrid-8.0.5 centos6 please modify below in case of buggy code. enjoy! use Socket; srandtime; $exploitingnick = "hybExpl" . intrand10000; sub connecttoserver $bool =...
Ra1NX PHP Bot Authentication Bypass Remote Code Execution
Exploit Title: "Ra1NX" PHP Bot pubcall Authentication Bypass Remote Code Execution Date: March 24, 2013 Exploit Author: bwall Software Link: https://defense.ballastsecurity.net/decoding/index.php?hash=69401ac90262f3855c23cd143d7d2ae0 Version: v2.0 Tested on: Ubuntu require 'msf/core' class...
Nmap NSE 6.01: irc-info
Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. OpenVAS Vulnerability Test $Id: gbnmap6ircinfo.nasl 7148 2017-09-15 13:01:14Z cfischer $ Autogenerated NSE wrapper Authors: NSE-Script: Doug Hoyte NASL-Wrapper: autogenerated Copyright:...
Debian DSA-2618-1 : ircd-hybrid - denial of service
Bob Nomnomnom reported a Denial of Service vulnerability in IRCD-Hybrid, an Internet Relay Chat server. A remote attacker may use an error in the masks validation and crash the server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 2618-1] ircd-hybrid security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2618-1 [email protected] http://www.debian.org/security/ Luciano Bello February 07, 2013 http://www.debian.org/security/faq -...
CVE-2011-5129
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long response string...
PHP IRC Bot pbot eval() Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PHP IRC Bot pbot eval Remote Code...
PHP IRC Bot pbot - 'eval()' Remote Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'PHP IRC Bot pbot eval Remote Code...