FreeFloat FTP Server Arbitrary File Upload

This module abuses multiple issues in FreeFloat: 1. No credential is actually needed to login; 2. User's default path is in C:, and this cannot be changed; 3. User can write to anywhere on the server's file system. As a result of these poor implementations, a malicious user can just log in and...

Gong Da Exploit Kit Bundling Numerous Java Attacks

Don’t expect any relief from the current assault on Java. A new sandbox-escape exploit targeting a vulnerability in the Java Runtime Environment has been integrated into both the Black Hole and Gong Da exploit kits, setting the stage for additional attacks, researchers said. The exploit was...

Another IE Exploit Targeting Defense Industry Discovered

Another malicious website has been discovered hosting an exploit for the zero-day vulnerability Internet Explorer patched by Microsoft last week. This site, like the other exploits discovered, targets the defense and space industries, and is dropping an unknown payload, according to Barracuda Lab...

Trojan Downloader Determines OS, Infects Systems With Custom Malware

A new downloader uncovered by researchers at the Finnish security firm F-Secure is capable of sniffing out which operating system a user is running and infecting them with a custom malicious payload. F-Secure’s Karmina Aquino discovered the attack on a compromised Colombian transport website. The...

PHP Volunteer Management System v1.0.2 Arbitrary File Upload

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

PHP Volunteer Management System v1.0.2 Arbitrary File Upload Vulnerability

This module exploits a vulnerability found in PHP Volunteer Management System, version v1.0.2 or prior. This application has an upload feature that allows an authenticated user to upload anything to the 'uploads' directory, which is actually reachable by anyone without a credential. An attacker c...

Savant Web Server 3.1 Buffer Overflow Exploit (Egghunter)

Exploit for windows platform in category remote exploits !/usr/bin/python import socket targetaddress="10.10.10.129" targetport=80 buffer2 = "R0cX" + "R0cX" msfpayload windows/shellbindtcp LPORT=4444 R | msfencode -e x86/shikataganai -c 4 -t c buffer2 +=...

Oracle Java Rhino Script Engine Code Execution

Added: 12/02/2011 CVE: CVE-2011-3544 BID: 50218 OSVDB: 76500 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Java...

Disk Pulse Server 2.2.34 - Remote Buffer Overflow

Disk Pulse Server 2.2.34 - Remote Buffer Overflow !/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit Date: 10/11/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at gmail.com Software Link:...

EMC Replication Manager Client Control Service Remove Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the EMC Replication Manager Client. Authentication is not required to exploit this vulnerability. The specific flaw exists within the irccd.exe process which listens by default on a TCP port around...

[Full-disclosure] Persits Software XUpload Control Buffer Overflow Exploit

I tried posting this yesterday, don't know what happened, anyhow, my advance apologies for any double posts. I took a shot at writing an exploit for this, so here goes. Code is inline and attached. ------------------------- !-- written by e.b. Persits Software XUpload Control AddFolder Buffer...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

No description provided by source. / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org 脪脭脟掳脫脨脮芒啪枚脪禄啪枚imail碌脛exp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d host options Options: -d: Hostname to attack Required -...

MyDNS 1.1.0 Remote Heap Overflow PoC

Exploit for linux platform in category dos / poc ==================================== MyDNS 1.1.0 Remote Heap Overflow PoC ==================================== / mydns-rr-smash.c Copyright c 2007 by mydns remote exploit PoC x86-lnx by mu-b - Apr 2007 - Tested on: mydns-1.1.0 .tar.gz This program ...

GLSA-200406-20 : FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling

The remote host is affected by the vulnerability described in GLSA-200406-20 FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling All these IPsec implementations have several bugs in the verifyx509cert function, which performs certificate validation, that make them vulnerable ...