Lucene search
+L

5683 matches found

seebug.org
seebug.org
added 2010/05/28 12:0 a.m.44 views

FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)

No description provided by source. FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc...

9.3CVSS9.5AI score0.219EPSS
SaveExploits5
zdt
zdt
added 2010/05/27 12:0 a.m.25 views

FreeBSD 8.0 ftpd off-by one PoC (FreeBSD-SA-10:05)

Exploit for freebsd platform in category dos / poc ================================================== FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 ================================================== PoC: Connected to localhost. Escape character is '^'. 220 127.cx FTP server Version 6.00LS read...

7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/05/27 12:0 a.m.92 views

FreeBSD 8.0 - 'ftpd' (FreeBSD-SA-10:05) Off-By-One (PoC)

FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.asc http://blog.pi3.com.pl/?p=111 PoC: Connected to...

9.3CVSS8.2AI score0.219EPSS
SaveExploits5
exploitpack
exploitpack
added 2010/05/27 12:0 a.m.37 views

FreeBSD 8.0 - ftpd (FreeBSD-SA-10:05) Off-By-One (PoC)

FreeBSD 8.0 - ftpd FreeBSD-SA-10:05 Off-By-One PoC FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.a...

9.3CVSS9.5AI score0.219EPSS
SaveExploits5
FreeBSD Advisory
FreeBSD Advisory
added 2010/05/27 12:0 a.m.13 views

FreeBSD-SA-10:05.opie

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-10:05.opie Security Advisory The FreeBSD Project Topic: OPIE off-by-one stack overflow Category: contrib Module: contribopie Announced: 2010-05-27 Credits:...

9.3CVSS7.4AI score0.219EPSS
SaveExploits5
CVE
CVE
added 2010/05/26 6:0 p.m.80 views

CVE-2010-1640

CVE-2010-1640 is an off-by-one/read out-of-bounds vulnerability in ClamAV 0.96 (parseicon in libclamav/pe_icons.c) that can cause a remote denial of service via a crafted PE icon. Connected advisories and public feeds corroborate the issue as a remote DoS, tied to improper rounding during scaling...

4.3CVSS6.2AI score0.02889EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2010/05/26 6:0 p.m.43 views

CVE-2010-1640

Off-by-one error in the parseicon function in libclamav/peicons.c in ClamAV 0.96 allows remote attackers to cause a denial of service crash via a crafted PE icon that triggers an out-of-bounds read, related to improper rounding during scaling...

4.3CVSS6.2AI score0.02889EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2010/05/26 12:0 a.m.6 views

PT-2010-3302 · Cisco · Clamav

Name of the Vulnerable Software and Affected Versions: ClamAV version 0.96 Description: The issue is related to an off-by-one error in the parseicon function, which can cause a denial of service crash when processing a crafted PE icon. This occurs due to an out-of-bounds read triggered by imprope...

4.3CVSS5.8AI score0.02889EPSS
SaveExploits0References14
ATTACKERKB
ATTACKERKB
added 2010/05/24 5:30 p.m.4 views

CVE-2010-2012

SQL injection vulnerability in function.php in MigasCMS 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categorie parameter in a catalogo action. NOTE: some of these details are obtained from third party information...

6.8CVSS6.4AI score0.0128EPSS
SaveExploits1References6
Exploit DB
Exploit DB
added 2010/05/21 12:0 a.m.27 views

Online University - Authentication Bypass

'/ -.- --------------------oOO------OOo----------------------------- | Online University Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3r ! Homepage: http://h4ckb0x.org/ !...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2010/04/26 12:0 a.m.40 views

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

10CVSS0.9AI score0.64448EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2010/04/26 12:0 a.m.34 views

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

10CVSS6.3AI score0.64448EPSS
SaveExploits1References1
Oracle linux
Oracle linux
added 2010/04/08 12:0 a.m.43 views

krb5 security and bug fix update

1.6.1-36.el55.3 - add upstream patch to fix a few use-after-free bugs, including one in kadmind CVE-2010-0629, 578185 1.6.1-36.el55.2 - pull changes to libkrb5 to properly handle and chase off-path referrals back from 1.7 574387...

4CVSS0.4AI score0.05469EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2010/03/20 12:0 a.m.29 views

PHPWind 6.0 Cross Site Scripting

I found the PHPWind v6.0 just filter the xss code when the visitors login in, but it doesnt do it when login off. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This flaw makes its all the parameters...

SaveExploits0
Packet Storm
Packet Storm
added 2010/03/08 12:0 a.m.22 views

BigForum 4.5 SQL Injection

Exploit Title: BigForum 4.5 SQL INJECTION EXPLOIT Date: 07.03.2010 Author: Ctacok Software Link: http://sourceforge.net/projects/npage-bigforum/ Version: 4.5 Tested on: Ubuntu 9.10 !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL INJECTION \n"; print "...

0.3AI score
SaveExploits0
exploitpack
exploitpack
added 2010/03/07 12:0 a.m.12 views

BigForum 4.5 - SQL Injection

BigForum 4.5 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL INJECTION \n"; print " Author: Ctacok Russian \n"; print " Blog : www.Ctacok.ru \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print " Require : Magicquote...

0.5AI score
SaveExploits0
zdt
zdt
added 2010/03/07 12:0 a.m.26 views

BigForum Version 4.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ BigForum Version 4.5 SQL Injection Vulnerability ================================================ !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2010/03/05 12:0 a.m.43 views

ONECMS 2.5 SQL Injection

Exploit Title: ONECMS v2.5 SQL INJECTION Date: 05.03.2010 Author: Ctacok and .:melkiy:. Software Link: http://sourceforge.net/projects/onecms/ Version: 2.5 Tested on: Ubuntu 9.10 Apache2+PHP5 !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " ONECMS v2.5 SQL INJECTION \n"; print " Bu...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2010/02/28 12:0 a.m.16 views

RCA DCM425 Cable Modem - micro_httpd Denial of Service (PoC)

RCA DCM425 Cable Modem - microhttpd Denial of Service PoC !/usr/bin/python Title: RCA DCM425 Cable Modem microhttpd DoS/PoC Date: 02/27/10 Author: ad0nis [email protected] Info: This script causes a Denial of Service on a DCM425 cable modem. Sending 1040 bytes causes a reboot of the device...

7.3AI score
SaveExploits0
exploitpack
exploitpack
added 2010/02/27 12:0 a.m.19 views

Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection

Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...

SaveExploits0
Rows per page
Query Builder