564 matches found
Apache James Server 2.3.2 - Remote Command Execution
Apache James Server 2.3.2 - Remote Command Execution !/usr/bin/python Exploit Title: Apache James Server 2.3.2 Authenticated User Remote Command Execution Date: 16\10\2014 Exploit Author: Jakub Palaczynski, Marcin Woloszyn, Maciej Grabiec Vendor Homepage: http://james.apache.org/server/ Software...
Apache James Server 2.3.2 - Remote Command Execution
!/usr/bin/python Exploit Title: Apache James Server 2.3.2 Authenticated User Remote Command Execution Date: 16\10\2014 Exploit Author: Jakub Palaczynski, Marcin Woloszyn, Maciej Grabiec Vendor Homepage: http://james.apache.org/server/ Software Link:...
FluxBB 1.5.6 SQL Injection Exploit
Exploit for php platform in category web applications !/usr/bin/env python Friday, November 21, 2014 - email protected FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...
FluxBB 1.5.6 - SQL Injection
FluxBB 1.5.6 - SQL Injection !/usr/bin/env python Friday, November 21, 2014 - secthrowaway safe-mail net FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...
CVE-2013-6796
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
Authentication flaw
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
CVE-2013-6796
The CVE-2013-6796 entry concerns the SMTP server in DeepOfix 3.3 and earlier, where an empty password allows remote attackers to bypass authentication, triggering an LDAP anonymous bind. The vulnerability is documented across multiple sources (NVD, CVE lists, and OpenVAS) with a consistent descri...
CVE-2013-6796
The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind...
GoodTech SMTP Server <= 5.14 Denial of Service Exploit
No description provided by source. ===== Start GoodTechSMTPServerDOS.pl ===== Usage: GoodTechSMTPServerDOS.pl ip GoodTechSMTPServerDOS.pl 127.0.0.1 GoodTech SMTP Server for Windows NT/2000/XP version 5.14 Download: http://www.goodtechsys.com/ use IO::Socket; use strict; my$socket = ; if $socket =...
BaSoMail 1.24 SMTP Server Command Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7726/info BaSoMail SMTP Server has been reported prone to a buffer overflow vulnerability. The issue is likely due to a lack of sufficient bounds checking performed on arguments passed to SMTP commands. Although unconfirm...
Alt-N MDaemon 6.5.1 SMTP Server Multiple Command Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/11238/info Alt-N MDaemon is reportedly prone to multiple remote buffer overflow vulnerabilities. The vulnerabilities are likely due to a failure of the application to properly validate buffer sizes when processing command...
QK SMTP Server Malformed Commands Multiple Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26856/info QK SMTP Server is prone to multiple remote denial-of-service vulnerabilities that occur when handling malformed SMTP commands. An attacker can exploit these issues to crash the affected application, denying...
BusinessMail <= 4.60.00 Remote Buffer Overflow Exploit
No description provided by source. ===== Start BusMailSMTPDOS.pl ===== Usage: BusMailSMTPDOS.pl ip BusMailSMTPDOS.pl 127.0.0.1 BusinessMail email server system 4.60.00 Download: http://www.netcplus.com/ use IO::Socket; use strict; my$socket = ; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0,...
Free SMTP Server <= 2.2 Spam Filter Vulnerability
No description provided by source...
SPECTral Personal SMTP Server <= 0.4.2 - Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV 1 print \n /\n; print DoS - SPECTral Personal SMTP Server = 0.4.2 b 338 \n; print...
AA SMTP Server 1.1 - Crash PoC
No description provided by source. ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 sonicdefenceatgmail.com...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
DeepOfix SMTP Server 3.3 - Authentication Bypass
No description provided by source. ====================================================================================== Vulnerability: Bypass authentication and gain unauthorized access to SMTP server ====================================================================================== Platfor...
Multiple MicroWorld eScan Products Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25493/info Multiple MicroWorld eScan products are vulnerable to a local privilege-escalation vulnerability because of insecure default file permissions. Attackers can exploit this issue to execute arbitrary code with...
MDaemon SMTP Server 5.0.5 Null Password Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8382/info A vulnerability has been reported to affect the MDaemon SMTP authentication handler. It has been reported that any valid username or account can be used in conjunction with a null password, to access the MDaemon...