quake3-master-getservers NSE Script

Queries Quake3-style master servers for game servers many games other than Quake 3 use this same protocol. Script Arguments quake3-master-getservers.outputlimit If set, limits the amount of hosts returned by the script. All discovered hosts are still stored in the registry for other scripts to us...

Microsoft confirms Windows BROWSER protocol zero-day !

A security researcher has released proof-of-concept code for an unpatched security vulnerability affecting all versions of Windows, prompting a warning from Microsoft that remote code execution attacks are theoretically possible. Details on the vulnerability were released on the Full Disclosure...

Automated Solutions Modbus/TCP Master OPC server Modbus TCP header vulnerability

Overview Automated Solutions OPC Server contains a heap corruption vulnerability in the Modbus/TCP Master OPC server. Description Automated Solutions Modbus/TCP Master OPC Server contains a heap corruption vulnerability. The server is vulnerable to an attacker writing an arbitrary number of doubl...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

Heap overflow

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a MODBUS response packet with a crafted length field...

CVE-2011-0651

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

CVE-2010-4709

CVE-2010-4709 = heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server (pre-3.0.2). A Modbus/TCP response with a crafted length field can crash the server and may allow arbitrary code execution, per NVD/ICS-CERT reporting. The most reliable public mitigation is to upgrade ...

PT-2011-1659

Name of the Vulnerable Software and Affected Versions Automated Solutions Modbus/TCP Master OPC Server versions prior to 3.0.2 Description The issue is related to a heap-based buffer overflow that can be triggered by a MODBUS response packet with a crafted length field. This can cause a denial of...

CVE-2011-0651: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the key exchange functionality in Icon Labs Iconfidant SSL Server before 1.3.0 allows remote attackers to execute arbitrary code via a client master key packet in which the sum of unspecified length fields is greater than a certain value...

CVE-2010-4709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Automated Solutions Modbus/TCP Master OPC Server before 3.0.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a MODBUS response packet with a crafted length field...

BSD x86 connect back Shellcode 81 bytes

BSD x86 connect back Shellcode 81 bytes. Shellcode exploit for bsdx86 platform / -------------- FreeBSD/x86 - connect back /bin/sh. 81 bytes ---------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : [email protected] / include include include char shellcode =...

New Seftad Ransomware Attacks Master Boot Record

One day after a new version of the GpCode ransomware popped up, researchers have discovered another piece of malware that overwrites the master boot record on infected machines and demands a payment of $100 to reverse the damage. The new MBR-infecting ransomware is known as Seftad and it has a...

Apache Hadoop HDFS NameNode Web Detection

The web interface for a NameNode was detected on the remote host. A NameNode is the master server in a Hadoop Distributed File System HDFS cluster. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50306; scriptversion"1.8"; scriptcvsdate"Date: 2019/11/25";...

kernel: drivers/net/eql.c: reading uninitialized stack memory

The eqlgmastercfg function in drivers/net/eql.c in the Linux kernel before 2.6.36-rc5 does not properly initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an EQLGETMASTRCFG ioctl call...

CVE-2010-3780: Undefined Security Weakness

Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service master process outage by simultaneously disconnecting many 1 IMAP or 2 POP3 sessions...

Intel Finds BluRay HDCP Crack

Intel has confirmed Blu-ray HDCP encryption is cracked after admitting a leaked master key is the real deal. High-bandwidth Digital Content Protection HDCP copy protection technology is designed to protect high-definition video content as it travels across digital interfaces. Read the full...

apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

HP-UX PHSS_39886 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 PA-RISC Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenab...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...