3Com TFTP Service (3CTftpSvc) 2.0.1 - Remote Buffer Overflow (Metasploit)

package Msf::Exploit::3comtftplongmode; use strict; use base "Msf::Exploit"; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'TFTP Server 3CTftpSvc Buffer Overflow Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Description' = Pex::Text::Freeformqq This...

FreeBSD : joomla -- multiple remote vulnerabilities (7bb127c1-a5aa-11db-9ddc-0011098b2f36)

Secunia reports : Some vulnerabilities have been reported in Joomla!, where some have unknown impacts and one can be exploited by malicious people to conduct cross-site scripting attacks. - Input passed to an unspecified parameter is not properly sanitised before being returned to the user. This...

FreeBSD : sircd -- remote reverse DNS buffer overflow (1374b96c-a1c2-11db-9ddc-0011098b2f36)

Secunia reports : A vulnerability in sircd can be exploited by a malicious person to compromise a vulnerable system. The vulnerability is caused by a boundary error in the code handling reverse DNS lookups, when a user connects to the service. If the FQDN Fully Qualified Domain Name returned is...

[SA23669] Movable Type "nofollow" Plugin Comment Script Insertion

TITLE: Movable Type "nofollow" Plugin Comment Script Insertion SECUNIA ADVISORY ID: SA23669 VERIFY ADVISORY: http://secunia.com/advisories/23669/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Movable Type 3.x http://secunia.com/product/5753/ DESCRIPTION: A...

[SA23656] b2evolution "redirect_to" HTML Attribute Cross-Site Scripting

---------------------------------------------------------------------- Secunia is proud to announce the availability of the Secunia Software Inspector. The Secunia Software Inspector is a free service that detects insecure versions of software that you may have installed in your system. When...

cacti -- Multiple vulnerabilities

Secunia reports: rgod has discovered four vulnerabilities in Cacti, which can be exploited by malicious people to bypass certain security restrictions, manipulate data and compromise vulnerable systems...

[Full-disclosure] DNS-Pinning demo

DNS-Pinning demo. http://www.jumperz.net/index.php?i=2&a=1&b=7 Thanks to Martin Johns for the great article: http://shampoo.antville.org/stories/1451301/ -- [email protected] Open Source WebAppFirewall http://guardian.jumperz.net/ Full-Disclosure - We believe in it. Charter:...

[SA23445] Sun Java JRE Multiple Vulnerabilities

TITLE: Sun Java JRE Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23445 VERIFY ADVISORY: http://secunia.com/advisories/23445/ CRITICAL: Highly critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x...

[Full-disclosure] Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow

====================================================================== Secunia Research 18/12/2006 - MailEnable POP Service "PASS" Command Buffer Overflow - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Internet Explorer Script Error Handling Memory Corruption

====================================================================== Secunia Research 12/12/2006 - Internet Explorer Script Error Handling Memory Corruption - ====================================================================== Table of Contents Affected...

ibmwebsphere-bypass.txt

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

Unauthenticated access to IBM Host On-Demand administration pages

SUMMARY Vulnerability found in: IBM WebSphere Host On-Demand HOD Type: Unauthorized, remote access to HOD administration pages Applies to: Version 6.0, 7.0, 8.0, and 9.0 possibly 10.0 Severity Level: High Exploit Difficulty: Very Low Initial Vendor Notification: approximately 11/3/2006 Discovered...

[SA23201] MailEnable IMAP Service Buffer Overflow Vulnerability

TITLE: MailEnable IMAP Service Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA23201 VERIFY ADVISORY: http://secunia.com/advisories/23201/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MailEnable Professional 2.x http://secunia.com/product/10625/ MailEnable...

MailEnable IMAP SELECT buffer overflow

Added: 12/01/2006 CVE: CVE-2006-6290 BID: 21362 OSVDB: 31698 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow vulnerability in the IMAP servic...

Secunia Research: MailEnable IMAP Service Two Vulnerabilities

====================================================================== Secunia Research 30/11/2006 - MailEnable IMAP Service Two Vulnerabilities - ====================================================================== Table of Contents Affected...

[Full-disclosure] Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 29/11/2006 - Borland Products idsql32.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: My Firewall Plus Privilege Escalation Vulnerability

====================================================================== Secunia Research 21/11/2006 - My Firewall Plus Privilege Escalation Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions

====================================================================== Secunia Research 22/11/2006 - PassGo SSO Plus Insecure Default Directory Permissions - ====================================================================== Table of Contents Affected...

universal1050.txt

/ ============================================================= DoS Exploit for UniversalFTP version 1.0.50 ============================================================= UniversalFTP www.teamtek.net http://www.5e5.net/cgi-bin/download3.asp Suffers from several unhandled user input vulnerabilities...

[Full-disclosure] Secunia Research: Panda ActiveScan Multiple Vulnerabilities

====================================================================== Secunia Research 16/11/2006 - Panda ActiveScan Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...