CVE-2012-0250: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the OSPFv2 implementation in ospfd in Quagga before 0.99.20.1 allows remote attackers to cause a denial of service daemon crash via a Link State Update aka LS Update packet containing a network-LSA link-state advertisement for which the data-structure length is smaller than the...

FreeBSD : quagga -- multiple vulnerabilities (42a2c82a-75b9-11e1-89b4-001ec9578670)

CERT reports : The ospfd implementation of OSPF in Quagga allows a remote attacker on a local network segment with OSPF enabled to cause a denial of service daemon aborts due to an assert with a malformed OSPF LS-Update message. The ospfd implementation of OSPF in Quagga allows a remote attacker ...

Anfibia Remote Command Execution

Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...

Successful Shell Attack Detected - Linux Failed 'ls' Command

Binary data 6141.prm...

KnFTP 1.0.0 Buffer Overflow

!/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/ Date Found: Sept 18th 2011 Tested on: Windows XP SP2/SP3...

KnFTP 1.0.0 Server - Multiple Buffer Overflows (PoC) (SEH)

!/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/ Date Found: Sept 18th 2011 Tested on: Windows XP SP2/SP3...

Nmap NSE net: gopher-ls

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: gopher-ls

Lists files and directories at the root of a gopher service. SYNTAX: gopher-ls.maxfiles: If set, limits the amount of files returned by the script. If set to 0 or less, all files are shown. The default value is 10. OpenVAS Vulnerability Test $Id: gbnmapgopherlsnet.nasl 5505 2017-03-07 10:00:18Z...

CVE-2011-0729

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

PT-2011-2590

Name of the Vulnerable Software and Affected Versions language-selector versions prior to 0.6.7 Description The issue allows local users to modify system files, specifically /etc/default/locale and /etc/environment, by making certain calls to the D-Bus backend. This is possible because the dbus...

CVE-2011-0729: Undefined Security Weakness

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a 1 SetSystemDefaultLangEnv or 2...

afp-ls NSE Script

Attempts to get useful information about files from AFP volumes. The output is intended to resemble the output of ls. Script Arguments afp.password, afp.username See the documentation for the afp library. ls.checksum, ls.empty, ls.errors, ls.human, ls.maxdepth, ls.maxfiles See the documentation f...

CVE-2010-0134

Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow...

nfs-ls NSE Script

Attempts to get useful information about files from NFS exports. The output is intended to resemble the output of ls. The script starts by enumerating and mounting the remote NFS exports. After that it performs an NFS GETATTR procedure call for each mounted point in order to get its ACLs. For eac...

Removable media deaktivated (Windows)

This Script checks whether drives disables that containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives. OpenVAS Vulnerability GSHB $Id: GSHBWMIremovable-media.nasl 7061 2017-09-05 11:50:40Z teissa $ Removable media deaktivated Windo...

bash terminal characters injection

It's possible to inject ESC-sequences into ls command output...

GNU Bash 4.0 - ls Control Character Command Injection

GNU Bash 4.0 - ls Control Character Command Injection source: https://www.securityfocus.com/bid/37776/info GNU Bash is prone to a command-injection vulnerability because it fails to adequately sanitize control characters in the 'ls' command. Attackers can exploit this issue to execute arbitrary...

CVE-2009-3542

Summary: CVE-2009-3542 affects LittleSite (LittleSite.php) 0.1 and is a Local File Inclusion (LFI) vulnerability in ls.php. An attacker can craft the file parameter in index.php to perform directory traversal using .. to include and execute arbitrary local files. In some environments, this may en...

Qualiteam X-Cart远程命令执行漏洞

BUGTRAQ: 9560 X-Cart没有充分过滤URI的参数值，远程攻击者可以利用这个漏洞以WEB进程权限执行任意命令。 问题存在与'admin/general.php'脚本上，由于对perlbinary参数值缺少充分过滤，提交任意SHELL命令，可导致以WEB进程权限在系统上执行任意命令。 Qualiteam X-Cart 3.4.11 Qualiteam X-Cart 3.4.3 Qualiteam X-Cart 3.4 .0 Qualiteam X-Cart 3.3.2 Qualiteam X-Cart 3.3 .0 Qualiteam X-Cart 3.2.1 Qualite...

CVE-2009-2521: Uncontrolled Resource Consumption

Stack consumption vulnerability in the FTP Service in Microsoft Internet Information Services IIS 5.0 through 7.0 allows remote authenticated users to cause a denial of service daemon crash via a list ls -R command containing a wildcard that references a subdirectory, followed by a .. dot dot, ak...