8144 matches found
MyServer 0.4.3 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc =============================================== MyServer 0.4.3 Remote Denial of Service Exploit =============================================== / MyServer 0.4.3 DoS vendor: http://myserverweb.sourceforge.net Written and found by badpack3t at...
Samba 2.2.8 - Brute Force Method Remote Command Execution
/ Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by Schizoprenic\n"; ifargc != 3 usageargv0; scanargv1, argv2; return 0;...
Samba 2.2.8 - Brute Force Method Remote Command Execution
Samba 2.2.8 - Brute Force Method Remote Command Execution / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction purpose / include include include void usagechar s printf"Usage: %s \n",s; exit-1; int mainint argc, char argv printf"Mass Samba Exploit by...
Samba 2.2.8 (Bruteforce Method) Remote Root Exploit
Exploit for linux platform in category remote exploits =================================================== Samba 2.2.8 Bruteforce Method Remote Root Exploit =================================================== / Mass Samba Exploit by Schizoprenic Xnuxer-Research c 2003 This code just for eduction...
Domain User Credentials access via OWA XSS
On my previous post about OWA XSS I talked about Cross Site Scripting in the attachment field of a mail. The XSS is not in the attachment, is in the body of the message. Sorry, I need to sleep... Please notice: not in the attachment, in the BODY. To make it clear to understand I have just publish...
Yahoo Messenger 5.5 Remote Exploit (DSR-ducky.c)
No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...
Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow
Yahoo Messenger 5.5 - DSR-ducky.c Remote Overflow / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |- ^^ / include include include include include / These are the usual header files / include include include define...
Snitz Forums 2000 < 3.4.0.3 - Multiple Vulnerabilities
Snitz Forums 2000 Multiple Vulnerabilities Vendor: Snitz Communications Product: Snitz Forums 2000 Version: alertdocument.cookie Cookie Authentication Bypass Vulnerability: In order to steal another users identity, all an attacker needs to know is thier encrypted password. This is not very hard t...
MegaBrowser 0.71b - Multiple Vulnerabilities
MegaBrowser 0.71b - Multiple Vulnerabilities MegaBrowser Multiple Vulnerabilities Vendor: Quality Programming Corporation Product: MegaBrowser Version: = 0.71b Website: http://www.megabrowser.com BID: 7802 7803 Description: Megabrowser is a free standalone program that enables you to host website...
WinMX 2.6 - Design Error
WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...
P-Synch 6.2.5 - Multiple Vulnerabilities
P-Synch 6.2.5 - Multiple Vulnerabilities P-Synch Multiple Vulnerabilities Vendor: M-Tech Identity Management Solutions Product: P-Synch Version: VBScript, JScript etc https://path/to/psynch/nph-psa.exe?css="VBScript, JScript etc File Include Vulnerability:...
Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL]
Systems Affected : Internet Explorer 6.0.2800 6.x? Remotely exploitable: Yes Author: Marek Bialoglowy System Integra - [email protected] Attached files: dmz2.rar archive password:zones Note: This is part of my research and the purpose of this post is to consult results and potential...
Xeneo Web Server 2.2.9.0 - Denial of Service
Xeneo Web Server 2.2.9.0 - Denial of Service !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl use IO::Socket; use strict; print ".:."x 20; print "\nXeneo Web...
Sakki's guestbook V.1.01 script injection vulnerability.
This advisory can be found at www.blacktigerz.org. Description: Easy to manage and configure asp powered guestbook. Works with MS Access database or without it. Vendor: http://www.sakki.net Vulnerability: gb.asp neglects filtering user input allowing for script injection to the guestbook via "nam...
ISS Security Brief: Email Processing Vulnerability in Sendmail
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief March 29, 2003 Email Processing Vulnerability in Sendmail Synopsis: ISS X-Force is researching a public report of an email header processing buffer overflow vulnerability in Sendmail. This report was made public on March...
EUVD-2002-0917
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the MSPStoreID parameter...
CVE-2002-0926
The CVE-2002-0926 issue affects Wolfram Research webMathematica 1.0.0 and 1.0.0.1. A directory-traversal vulnerability allows remote attackers to read arbitrary files by manipulating the MSPStoreID parameter. The CERT/CC entry corroborates that reading arbitrary files is possible via absolute pat...
LOCAL ROOT EXPLOIT - SUPPORT FULL-DISCLOSURE - LOCAL ROOT EXPLOIT
!/usr/bin/perl fartsy.pl by kanix [email protected] /usr/sbin/artswrapper local format string exploit Tested on Red Hat Linux release 7.2 Enigma Jul 6, 2002 "the secret to creativity is knowing how to hide your sources." - Albert Einstein commentz, job offerz, flamez, etc. should be directed t...
Directory Traversal in Wolfram Research's webMathematica
Security Advisory By Andrew Badr ----------------- SUMMARY: There is a vulnerability in the webMathematica software which allows remote clients web surfers to read an arbitrary file on the server assuming the httpd-user has permission. This can reveal sensitive information such as that stored in...
CVE-2001-0675
The Bat! (RIT Research Labs) for Windows (The Bat! v1.51) is affected by a vulnerability where a remote attacker can trigger a denial of service by delivering an email containing a carriage return CR not followed by a LF. This incorrect RFC822 parsing can cause premature end-of-message handling, ...