CVE-2009-3295

The prepreprocessreq function in kdc/dotgsreq.c in the cross-realm referral implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 before 1.7.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a ticket request...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

No description provided by source. import socket import sys print "----------------------------------------------------------------" print " ARD-9808 DVR Card Security Camera = Remote Denial Of Service " print " author: Stack " print...

ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit

Exploit for hardware platform in category dos / poc ================================================================== ARD-9808 DVR Card Security Camera GET Request Remote DoS Exploit ================================================================== import socket import sys print...

0DayDB 2.3 - id Remote Authentication Bypass

0DayDB 2.3 - id Remote Authentication Bypass !/usr/bin/perl Autor : Pr0metheuS Script : 0DayDB v2.3 Version : v2.3 Dork : "Powered By 0DayDB v2.3" Gr33tz-Team.org use LWP::UserAgent; if@ARGV!=3 print "\n"; print "0DayDB v2.3 Remote Admin Bypass\n"; print "perl $0 \n"; print "downloads ID for...

Security Advisory: Login bypass in LedgerSMB 1.2.0 through 1.2.6

A security issue has been found which allows an unauthenticated user to bypass the authentication system in LedgerSMB 1.2.0 through 1.2.6. Severity: Highly Critical Versions affected: 1.2.0 through 1.2.6 Status: Vendor solution available upgrade to 1.2.7 Effect: Authentication bypass. Required...

Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit

No description provided by source. usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mail:...

Essentia Web Server 2.15 (GET Request) Remote DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================= Essentia Web Server 2.15 GET Request Remote DoS Exploit ========================================================= !/usr/bin/perl use IO::Socket; use Getopt::Std; getopts'h:', %args; if...

SQL injection exploit IPB <= 2.1.4

This exploit has only been tested on 2.1.4. Others are most likely vulnerable but have not yet been tested. Simple SQL injection in funcmsg.php on line 448. tobyid is not properly sanitized. It's passed to the class via an instance of the messenger class, which takes it from the ipb sanitized inp...

RED QUEEN Path Disclosure

RED QUEEN Path Disclosure Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/red-queen-path-disclosure.html vendor:http://www.randommouse.com/cgi-bin/rms/ product/about/aboutproduct.cgi?sku=REDQN &referer=hotscripts&creative=linkindexing affected...

Remote IIS 5.x and IIS 6.0 Server Name Spoof

Remote IIS 5.x and IIS 6.0 Server Name Spoof It is possible to remotely spoof the "SERVERNAME" Microsoft® Internet Information Server® 5.0, 5.1 and 6.0 server variable by doing a modified HTTP request. Thus potentially revealing sensitive ASP code through the IIS 500-100.asp error page, the spoof...

CVE-2002-1874

CVE-2002-1874 affects AstroCam 0.9-1-1 through 1.4.0 (astrocam.cgi). The vulnerability allows remote attackers to execute arbitrary commands by injecting shell metacharacters in an HTTP request, indicating a command-injection risk in the CGI handler. The description notes vendor clarification tha...

CVE-2004-2114

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL...

RHEL 2.1 / 3 : libxml (RHSA-2004:650)

An updated libxml package that fixes multiple buffer overflows is now available. Updated 24 May 2005 Multilib packages have been added to this advisory The libxml package contains a library for manipulating XML files. Multiple buffer overflow bugs have been found in libxml versions prior to 2.6.1...

KorWeblog 1.6.2 - Remote Directory Listing

source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing directory traversal sequences. When properly...

CVE-2004-0313

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long 1 GET argument or 2 method name...

Icecast <= 2.0.1 Win32 Remote Code Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================== Icecast iceexec 127.0.0.1 Icecast nc 127.0.0.1 9999 Microsoft Windows XP Version 5.1.2600 C Copyright 1985-2001 Microsoft Corp. C:Icecast2 Win32...

CVE-2001-1186

Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection...

PlaySMS <= 0.7 SQL Injection Exploit

Exploit for linux platform in category remote exploits ==================================== PlaySMS new Proto = "tcp", PeerAddr = $host, PeerPort = "80" ; unless $remote die "cannot connect to http daemon on $host" print "connected "; $remote-autoflush1; my $http = "GET /playsms/frleft.php HTTP/1...

Squid < 2.4.STABLE2 mkdir-only PUT Request DoS

Binary data 1524.prm...

Crob FTP Server 3.5.1 - Denial of Service

Crob FTP Server 3.5.1 - Denial of Service source: https://www.securityfocus.com/bid/9549/info A vulnerability has been reported in the Crob FTP server, which occurs due to a lack of validation of input from the user. By issuing a malformed request a malevolent user may be able to force the server...