PYSEC-2006-7

Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 Zope2 does not disable the "raw" command when providing untrusted users with restructured text reStructuredText functionality from docutils, which allows local users to read arbitrary files...

Symantec Sygate Management Server - LOGIN SQL Injection (Metasploit)

Symantec Sygate Management Server - LOGIN SQL Injection Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Symantec Sygate Management Server - 'LOGIN' SQL Injection (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Symantec Sygate Management Server (login) SQL Injection Exploit

Exploit for cgi platform in category web applications =============================================================== Symantec Sygate Management Server login SQL Injection Exploit =============================================================== This file is part of the Metasploit Framework and may...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007) (2)

No description provided by source. / MS06-007 Denial of Service POC exploit created by Firestorm, based on zloSend.exe win32 exploit http://www.securitylab.ru/poc/264136.php Tested on Windows XP SP2 as victim compiled/runned on Fedore Core 4 x86 FOR EDUCATIONAL PURPOSE ONLY !!! / include stdio.h...

MS Windows XP/2003 (IGMP v3) Denial of Service Exploit (MS06-007)

Exploit for unknown platform in category dos / poc ================================================================= MS Windows XP/2003 IGMP v3 Denial of Service Exploit MS06-007 ================================================================= / IGMP v3 DoS Exploit ref:...

linux/x86 HTTP/1.x GET Downloads and JMP - 68 bytes+

No description provided by source. / linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ This shellcode allows you to download a binary code straight off a standard HTTP server and execute it. The downloaded shellcode e.g. binary code will be executed on the stack. DEMONSTRATION: Starting by...

Based on the Webshell sniffer feasibility study-vulnerability warning-the black bar safety net

Information source: evil octal information security teamwww.eviloctal.com to The author of the article: bad bad Preface: Phantom Mix modified flashsky that port multiplexing under sniffing serv-u,tested,not for win2003 Server,specifically I do not know,do not know if the operation has the...

Ubuntu 4.10 / 5.04 : linux-source-2.6.8.1, linux-source-2.6.10 vulnerabilities (USN-131-1)

Colin Percival discovered an information disclosure in the 'Hyper Threading Technology' architecture in processors which are capable of simultaneous multithreading in particular Intel Pentium 4, Intel Mobile Pentium 4, and Intel Xeon processors. This allows a malicious thread to monitor the...

Based on the Webshell sniffer feasibility study-vulnerability warning-the black bar safety net

Preface: Phantom Mix modified flashsky that port multiplexing under sniffing serv-u,tested,not for win2003 Server,specifically I do not know,do not know if the operation has the knowledge,anyway I was not successful. I myself constructed an environment tried it,the Sniffer program is to write you...

Sun Solaris traceroute buffer overflow

Buffer overflow on large number of -g arguments, on malformed -s argument allow raw socket access...

security flaw

The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device...

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service

Snort 2.4.0 - SACK TCP Option Error Handling Denial of Service /------------------------------------------ ||------+ Snort thsum es 0 cero, por lo tanto, el primer Router por donde pase este paquete lo descartara por no tener una checksum valida. RFC 1072 - TCP Extensions for Long-Delay Paths 3.2...

CVE-2004-2185

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...

CVE-2004-2185

Multiple cross-site scripting XSS vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via 1 the UnicodeConverter extension, 2 raw page views, 3 SpecialIpblocklist, 4 SpecialEmailuser, 5 SpecialMaintenance, and 6 ImagePage...

Mandrake Linux Security Advisory : kernel (MDKSA-2005:110)

Multiple vulnerabilities in the Linux kernel have been discovered and fixed in this update. The following CVE names have been fixed in the LE2005 kernel : Colin Percival discovered a vulnerability in Intel's Hyper-Threading technology could allow a local user to use a malicious thread to create...

Stream / Raped Denial of Service Attack (win version)

No description provided by source. / Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded program! MSVC++ compile with /MT. Remember: This program requires raw socket support! You can't use it on Windows XP SP2 and if you've done MS05-019 update you'll have to re-enabl...

Stream / Raped Denial of Service Attack (win version)

Exploit for multiple platform in category dos / poc ===================================================== Stream / Raped Denial of Service Attack win version ===================================================== / Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded...

Stream / Raped (Windows) - Denial of Service

/ Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded program! MSVC++ compile with /MT. Remember: This program requires raw socket support! You can't use it on Windows XP SP2 and if you've done MS05-019 update you'll have to re-enable raw socket support! If you still...

Stream Raped (Windows) - Denial of Service

Stream Raped Windows - Denial of Service / Straped 1.0 author: Marco Del Percio 20/05/2005 Remember: this is a mulithreaded program! MSVC++ compile with /MT. Remember: This program requires raw socket support! You can't use it on Windows XP SP2 and if you've done MS05-019 update you'll have to...