Sybase EAServer WebConsole buffer overflow

Added: 11/04/2005 CVE: CVE-2005-2297 BID: 14287 OSVDB: 17995 Background Sybase EAServer is a web application server. Problem A buffer overflow in the Sybase EAServer WebConsole allows a remote attcker to execute arbitrary commands by requesting /WebConsole/Login.jsp with a long query string...

ICECast crafted URL DoS

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.11. This version is affected by a remote denial of service because Icecast server does not properly sanitize user-supplied input. An remote attacker could send specially crafted URL...

Jetty < 4.2.19 Denial of Service

The remote host is running a version of Jetty which is older than 4.2.19. The version is vulnerable to a unspecified denial of service. OpenVAS Vulnerability Test $Id: jetty419dos.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Jetty Fixes by Tenable: - added CVE and OSVDB xrefs. Copyright:...

CVSTrac filediff vulnerability

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of filediff has a flaw in the input sanitation which, when exploited, can lead to a remote attacker executing arbitrary commands on the system. OpenVAS has determined the vulnerability...

phpBB < 2.0.10 Multiple Vulnerabilities

phpBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb"; ifdescription...

Snort 2.4.0 < 2.4.3 - Back Orifice Pre-Preprocessor Remote (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Snort Back...

Snort 2.4.0 - 2.4.3 Back Orifice Pre-Preprocessor Remote Exploit

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Snort 2.4.0 2.4.3 - Back Orifice Pre-Preprocessor Remote (Metasploit)

Snort 2.4.0 2.4.3 - Back Orifice Pre-Preprocessor Remote Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Linksys WRT54G 4.20.7 WRT54GS 1.05.2 - apply.cgi Remote Buffer Overflow (Metasploit)

Linksys WRT54G 4.20.7 WRT54GS 1.05.2 - apply.cgi Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'Linksys apply.cgi buffer overflow', 'Description' = %q This module exploits a stack overflow in apply.cgi on the Linksys WRT54G and WRT54GS routers. According to iDefense who...

mdaemon_imap.pm.txt

package Msf::Exploit::mdaemonimap; use strict; use base 'Msf::Exploit'; use Msf::Socket::Tcp; use Pex::Text; my $advanced = ; my $info = 'Name' = 'Mdaemon 8.0.3 IMAD CRAM-MD5 Authentication Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'anonymous', , 'Arch' = 'x86' , 'OS' = 'win32', 'Pri...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit ============================================================ This file is part of the Metasploit Framework and may be...

MDaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Novell eDirectory 8.7.3 iMonitor Remote Stack Overflow

Exploit for unknown platform in category remote exploits ====================================================== Novell eDirectory 8.7.3 iMonitor Remote Stack Overflow ====================================================== This file is part of the Metasploit Framework and may be redistributed...

dvbbsXSS.txt

DVBBS Multiple variable Cross site scripting vendor url:http://down.dvbbs.net/ SoftView/SoftView2455.html Advisory:http://lostmon.blogspot.com/2005/08/ dvbbs-multiple-variable-cross-site.html vendor notify:yes exploit available:yes OSVDB ID:18512 DVBBS contains a flaw that allows a remote cross...

quickCart.txt

Quick.cart 'sWord' variable XSS and 'iCategory' SQL injection vendor url:http://qc.dotgeek.org/os/index.php?p=productsQuickCart advisore:http://lostmon.blogspot.com/2005/05/quickcart-sword-variable-xss-and.html vendor notify: yes exploit available: yes Quick.cart contais a flaw which can be...

oneworldSQL.txt

OneWorldStore DisplayResults.asp sIDSearch Variable XSS and SQL Injection vendor url:http://oneworldstore.com/ vendor notified : yes exploit available: yes advisory:http://lostmon.blogspot.com/2005/04/ oneworldstore-sidsearch.html OSVDB ID: 15659 and 15660 related vendor´s security bulletin:...

Berlios GPSD 1.91-1 - 2.7-2 Format String Vulnerability

No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::Tcp def initializeinfo = superupdateinfoinfo, 'Name' = 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in th...

Berlios GPSD 1.91-1 < 2.7-2 - Format String

require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...

Salim Gasmi GLD 1.0 - 1.4 Postfix Greylisting Buffer Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Veritas NetBackup Remote Command Execution

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...