Microsoft Windows Server 2003 - AD BROWSER ELECTION Remote Heap Overflow

MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast, Pre-Auth Mrxsmb.sys, around...

amoeba CMS 1.01 - Multiple Vulnerabilities

amoeba CMS 1.01 - Multiple Vulnerabilities !/usr/bin/python """ Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the...

(Gabriels FTP Server) Open Compact FTP Server 1.2 - Universal Denial of Service

Gabriels FTP Server Open Compact FTP Server 1.2 - Universal Denial of Service !/usr/bin/python Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service Coded By: DrIDE Found By: Ma3sTr0-Dz Date: May 24, 2010 Download: http://sourceforge.net/projects/open-ftpd/ Tested: Windows 7 import...

iOS Udisk FTP Basic Edition - Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - Udisk FTP Basic Edition Remote 0day DOS exploit Found by: Steven Seeley mrme seeleymagic at hotmail dot com Homepage: http://6tags.com/n/ Price: $4.99 Download: From the app store use your itunes account Tested on: Iphone 3G - firmware 3.1.2 Darwin kernel Gree...

Cerberus FTP server 3.0.6 Pre-Auth DoS

No description provided by source. Application: Cerberus FTP 3.0.6 Platforms: Windows XP Professional SP2 Windows Vista SP1 crash: YES Exploitation: Remote DoS Date: 2009-09-30 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code =============== 1...

Core FTP Server 1.0 build 304 - Denial of Service

Core FTP Server 1.0 build 304 - Denial of Service !/usr/bin/env python Core FTP Server 1.0, build 304 Remote Denial of Service Exploit Pre Auth Found By: DrIDE Tested On: Windows XPSP3 Download: http://www.coreftp.com/server/ Notes: This will cause CPU usage to go to 100% and prevent new...

Core FTP Server 1.0 build 304 - Denial of Service

!/usr/bin/env python Core FTP Server 1.0, build 304 Remote Denial of Service Exploit Pre Auth Found By: DrIDE Tested On: Windows XPSP3 Download: http://www.coreftp.com/server/ Notes: This will cause CPU usage to go to 100% and prevent new connections Usage: ./script import socket, sys def banner:...

openSUSE Security Update : strongswan (strongswan-965)

This update fixes two denial of service bugs that can lead to a remote pre-auth crash while processing a IKESAINIT or a IKEAUTH request. CVE-2009-1957 and CVE-2009-1958 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

XRDP <= 0.4.1 Remote Buffer Overflow PoC (pre-auth)

Exploit for linux platform in category dos / poc =================================================== XRDP = 0.4.1 Remote Buffer Overflow PoC pre-auth =================================================== / XRDP = 0.4.1 pre-auth remote PoC exploit. xrdp.sourceforge.net 01:59:56 email protected:/xrdp...

IBM DB2 9.5 Pre-Auth Denial Of Service

Discovered by Dennis Yurichev DB2TEST database should be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 50000 sockobj.send "\x00\xBE\xD0\x41\x00\x01\x00\xB8\x10\x41\x00\x7F\x11\x5E\x97\xA8"...

NoticeWare E-mail Server 5.1.2.2 (POP3) Pre-Auth DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ NoticeWare E-mail Server 5.1.2.2 POP3 Pre-Auth DoS Exploit ============================================================ !/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2...

Noticeware E-mail Server 5.1.2.2 - 'POP3' Denial of Service

!/usr/bin/python Software: NoticeWare E-mail Sever POP3 5.1.2.2 Pre-Auth DoS Discovered and Coded by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Description: NoticeWare E-mail Server has many odd querks about it This DoS leverages the fact that the PO...

Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1

Luigi Auriemma Application: Ipswitch Instant Messaging http://www.ipswitch.com/products/instantmessaging Versions: = 2.0.8.1 Platforms: Windows Bugs: A pre-auth NULL pointer crash in decryption function B format string in logging C arbitrary empty files creation Exploitation: remote A versus both...

McAfee E-Business Server Remote pre-auth Code Execution / DoS PoC

No description provided by source. !/usr/bin/perl McAfeeR E-Business ServerTM 8.5.2 Remote preauth crash PoC - tested on Windows and Linux Leon Juranic [email protected], Infigo IS http://www.infigo.hr/en/ use IO::Socket; $saddr = "192.168.1.3"; $sport = 1718;...

barracude-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 09.21.2007 || .:: SUMMARY Barracuda Spam Firewall Cross-Site Scripting Version: Barracuda Spam Firewall firmware v3.4.10.102 It is suspected that all previous versions of Barracuda Sp...

[ISR] - Barracuda Spam Firewall. Cross-Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 09.21.2007 || .:: SUMMARY Barracuda Spam Firewall Cross-Site Scripting Version: Barracuda Spam Firewall firmware v3.4.10.102 It is suspected that all previous versions of Barracuda Sp...

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite

Mercury32 Mail Server 3.32 4.51 - SMTP EIP Overwrite / Dreatica-FXP crew ---------------------------------------- Target : Mercury/32 SMTP Server Found by : [email protected], http://www.offensive-security.com ---------------------------------------- Exploit : Mercury/32 v3.32-v4.51 SMT...

Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Overflow Exploit

No description provided by source. / Mercury/32 4.51 SMTPD CRAM-MD5 Pre-Auth Remote Stack OverflowUniversal Public Version 1.0 http://www.ph4nt0m.org 2007-08-22 Code by: Zhenhan.Liu Original POC: http://www.milw0rm.com/exploits/4294 Vuln Analysis:...

IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit

No description provided by source. !/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you...

IBM Lotus Domino Server 6.5 - Remote Overflow

!/usr/bin/python IBM Lotus Domino Server 6.5 PRE AUTH Remote Exploit Tested on windows 2003 server SP0. Coded by Mati Aharoni [email protected] http://www.offensive-security.com Notes: Not the the faint of heart. Iris, I love you Skeleton exploit shamelessly ripped off Winny Thomas bt...