1557 matches found
Drupal HTTP Parameter Key/Value SQL Injection Vulnerability
This Metasploit module exploits the Drupal HTTP Parameter Key/Value SQL Injection aka Drupageddon in order to achieve a remote shell on the vulnerable instance. This Metasploit module was tested against Drupal 7.0 and 7.31 was fixed in 7.32. This module requires Metasploit:...
OpenVPN vulnerable to Shellshock Bash vulnerability
OpenVPN wasn’t immune to the Heartbleed vulnerability in OpenSSL, and it’s not going to sidestep Shellshock either. Fredrick Stromberg, cofounder of Mullvad, a Swedish VPN company, reported that OpenVPN servers are vulnerable to Shellshock , the vulnerability in Bash plaguing Linux, UNIX and Mac ...
httpdx 1.5.3b - Multiple Remote Pre-Authentication DoS (PoC)
No description provided by source. Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested...
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9631/info The FTP server that is distributed with EvolutionX has been reported prone to multiple buffer overflow vulnerabilities. The first of these vulnerabilities exists post-authentication, and is due to a lack of...
DameWare Mini Remote Control Server 3.7x Pre-Authentication Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts...
DameWare Mini Remote Control Server 3.7x Pre-Authentication Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9213/info A problem has been identified in the handling of pre-authentication packets by DameWare Mini Remote Control Server. Because of this, it may be possible for a remote attacker to gain unauthorized access to hosts...
httpdx 1.5.2 - Remote Pre-Authentication DoS (PoC)
No description provided by source. Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferret Hat's off to dookie2000ca Discovered on: 06/02/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod to the Exploit-DB Team...
IPComp encapsulation pre-auth kernel memory corruption
No description provided by source. //source: http://lists.grok.org.uk/pipermail/full-disclosure/2011-April/080031.html BSD derived RFC3173 IPComp encapsulation will expand arbitrarily nested payload ------------------------------------------------------------------------------- Gruezi, this...
eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS (PoC)
No description provided by source. Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link:...
Sysax <= 5.53 SSH Username BoF Pre Auth RCE (Egghunter)
No description provided by source. !/usr/bin/python Title: Sysax = 5.53 SSH Username BoF Pre Auth RCE Egghunter Author: Craig Freyman @cd1zz OS Tested: XP SP3 32bit, 2003 Server SP2 No DEP Software Versions Tested: 5.53, 5.52, 5.50 Date Discovered: Febrary 22, 2012 Vendor Contacted: Febrary 23,...
Open and Compact FTPd Pre-Authentication Crash (PoC)
No description provided by source. Title: Open & Compact FTPd Pre-Authentication Crash PoC Found by: loneferret Hat's off to dookie2000ca Date Found: 07/02/2010 Software link: https://sourceforge.net/projects/open-ftpd/ Tested on: Windows XP SP2/SP3 Professional Nod to the Exploit-DB Team It's...
Open & Compact FTPd Pre-Authentication Remote Exploit
No description provided by source. Title: Open & Compact FTPd Pre-Authentication Remote Exploit Written by: Lincoln Originally discovered by: loneferret Reference: http://www.exploit-db.com/exploits/11391 Tested on: XPSP2 root@box: ./ftpd.py 192.168.139.130 Try connecting to host on port 4444...
H-Sphere Webshell 2.4 remote root exploit
No description provided by source. source: http://www.securityfocus.com/bid/6527/info A vulnerability has been discovered in H-Sphere Webshell. During the pre-authentication phase Webshell fails to perform sufficient bounds checking on user-supplied HTTP parameters. As a result, a malicious...
MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow
No description provided by source. MS Windows Server 2003 AD Pre-Auth BROWSER ELECTION Remote Heap Overflow Release date: 2011-02-14 Author: Cupidon-3005 Greet: Winny Thomas, Laurent Gaffie, h07 Bug: Heap Overflow Remote Exploitability: Unlikely Local Exploitability: Likely Context: Broadcast,...
Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow
!/usr/bin/python Tested on 6.1.19.0 import sys,socket banner = """ Coded by: Muhammad Alharmeel Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets overwritten at 749 bytes when using U...
Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check
Sophos Web Protection Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Novell NetIQ Privileged User Manager 2.3.1 - auth.dll pa_modify_accounts() Remote Code Execution
Novell NetIQ Privileged User Manager 2.3.1 - auth.dll pamodifyaccounts Remote Code Execution Novell NetIQ Privileged User Manager 2.3.1 auth.dll pamodifyaccounts Remote Code Execution pre auth / SYSTEM privileges Tested against: Microsoft Windows 2003 r2 sp2 download url:...
Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll Code Execution
Novell NetIQ Privileged User Manager version 2.3.1 suffers from a perl code evaluation remote command execution vulnerability in ldapagnteval in ldapagnt.dll. The secure web interface contains a flaw which allows, without prior authentication, to execute a Perl script with SYSTEM privileges. This...
Volume of Malware Targeting Java CVE-2012-1723 Flaw Spikes
It’s been nearly two months since Oracle patched the CVE-2012-1723 Java vulnerability, a serious remote pre-authentication flaw that’s present in the Java Runtime Environment. It’s taken a little time, but the attacker community has decided that this bug deserves some serious attention, and as a...
Remote Pre-Authentication Flaw Fixed in Samba
There is a serious remotely exploitable vulnerability in the Samba open-source software that could enable an attacker to gain root privileges without any authentication. The bug is in all versions of Samba from 3.0.x to 3.6.3, but has been fixed in Samba 3.6.4, which is the current stable release...