Orbital Viewer v1.04 (.orb) 0day Local Universal SEH Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit ===================================================================== !/usr/bin/python Orbital Viewer...

Joomla! Component user_id com_sqlreport - Blind SQL Injection

============================================================================== »Joomla Component userid comsqlreport Blind SQL Injection Vulnerability ============================================================================== » Script: Joomla » Language: PHP » Founder: Snakespc...

Sun Java System Web Server Multiple Vulnerabilities - Windows

Sun Java Web Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

http-methods NSE Script

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. It tests those methods not mentioned in the OPTIONS headers individually and sees if they are implemented. Any output other than 501/405 suggests that the method is if not in the...

dotProject 2.1.3 - Cross-Site Scripting Improper Permissions

dotProject 2.1.3 - Cross-Site Scripting Improper Permissions Exploit Title: dotProject 2.1.3 XSS and Improper Permissions Date: Dec 15 2009 Author: h00die [email protected] & S0lus Software Link:...

dotProject 2.1.3 - Cross-Site Scripting / Improper Permissions

Exploit Title: dotProject 2.1.3 XSS and Improper Permissions Date: Dec 15 2009 Author: h00die [email protected] & S0lus Software Link: http://sourceforge.net/projects/dotproject/files/dotproject/dotProject%20Version%202.1.3/dotproject213.zip/download Version: 2.1.3 Tested on: BT4 pre-final Greetz to...

Ubuntu: Security Advisory (USN-803-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpNagios 'conf[lang]' Parameter Local File Inclusion Vulnerability

The host is running phpNagios and is prone to local file include Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpnagioslfivuln.nasl 5373 2017-02-20 16:27:48Z teissa $ phpNagios 'conflang' Parameter Local File Inclusion Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Stack overflow

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

CVE-2010-0361

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

CVE-2010-0361: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to cause a denial of service daemon crash and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request...

Mandriva Update for run-parts MDVA-2010:009 (run-parts)

Check for the Version of run-parts OpenVAS Vulnerability Test Mandriva Update for run-parts MDVA-2010:009 run-parts Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

JunOS Malformed TCP Options Denial Of Service

!/usr/bin/perl my $host = shift; my $port = shift; use Net::Packet qw$Env; use Net::Packet::IPv4; my $ip = Net::Packet::IPv4-newdst = $host; use Net::Packet::TCP; my $tcp = Net::Packet::TCP-new dst = $port, options = "\x65\x02\x01\x01", ; use Net::Packet::Frame; my $frame = Net::Packet::Frame-new...

2^6 TCP Control Bit - Fuzzer (No ECN or CWR)

!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...

ABB 1.1 - Forum Remote Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » ABB v1.1 Forum Remote Database...

Juniper Warns Customers of Network Spoofing

In an advisory sent Wednesday afternoon, Juniper said a variety of devices could be forced to reboot by sending them internet packets with maliciously formed TCP options. Read the full article. The Register...

HTTP Methods Allowed (per directory)

By calling the OPTIONS method, it is possible to determine which HTTP methods are allowed on each directory. The following HTTP methods are considered insecure: PUT, DELETE, CONNECT, TRACE, HEAD Many frameworks and languages treat 'HEAD' as a 'GET' request, albeit one without any body in the...

XM Easy Personal FTP Server File/Folder Denial of Service Vulnerability

This host is running XM Easy Personal FTP Server and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbxmeasyftpdircreatedosvuln.nasl 4970 2017-01-09 15:00:59Z teissa $ XM Easy Personal FTP Server File/Folder Denial of Service Vulnerability Authors: Sujit Ghosal...

Directory traversal

Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magicquotesgpc is disabled, allow remote authenticated users with editor or administrative application access to read arbitrary files via a .. dot dot in the source parameter in a 1 list or 2 editnews action to the...

CVE-2009-4116: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in CutePHP CuteNews 1.4.6, when magicquotesgpc is disabled, allow remote authenticated users with editor or administrative application access to read arbitrary files via a .. dot dot in the source parameter in a 1 list or 2 editnews action to the...