Unix TTY, Interact with Established Connection

Interacts with a TTY on an established socket connection This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo,...

evisioncms-lfi.txt

starting; $exploit-isvulnerable$domain; $exploit-exploiting$domain,$mymode;...

WinFTP 2.3.0 (PASV mode) Remote Denial of Service Exploit

No description provided by source. WinFTP v2.3.0 DoS exploit WinFTP URL - http://www.wftpserver.com/ DoS'ed when try to send data xdmnt -- coding: windows-1252 -- import socket import time import sys PORT = 21 def helpinfo: print "Usage: winftp host login password\n" print "Note: anonymous is...

openSUSE 10 Security Update : mozilla-xulrunner (mozilla-xulrunner-5163)

This update brings the Mozilla XULRunner engine to security update version level 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via...

SuSE 10 Security Update : epiphany (ZYPP Patch Number 5164)

This update fixes security issues also fixes in the Mozilla Firefox 2.0.0.13 update round. Following security problems were fixed : - XUL popup spoofing variant cross-tab popups. MFSA 2008-19 / CVE-2008-1241 - Java socket connection to any local port via LiveConnect. MFSA 2008-18 / CVE-2008-1195 ...

SuSE 10 Security Update : Security update for (ZYPP Patch Number 5134)

This update brings Mozilla Firefox to security update version 2.0.0.13 Following security problems were fixed : - XUL popup spoofing variant cross-tab popups. MFSA 2008-19 / CVE-2008-1241 - Java socket connection to any local port via LiveConnect. MFSA 2008-18 / CVE-2008-1195 / CVE-2008-1240 -...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5135)

This update brings Mozilla Firefox to security update version 2.0.0.13 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port via LiveConnect - MFSA...

Java socket connection to any local port via LiveConnect — Mozilla

Security researcher Gregory Fleischer demonstrated that web content fetched via the jar: protocol can use Java via LiveConnect to open socket connections to arbitrary ports on the user's machine "localhost". The issue is caused by improper parsing of the content origin passed from the browser to...

MiniWebSvr 0.0.9a Remote Directory Transversal Vulnerability

No description provided by source. import socket import sys print '---------------------------------------------------------' print 'MiniWebSvr 0.0.9a Directory Transversal Vulnerability' print 'Project URL: http://miniwebsvr.sourceforge.net/' print 'Author: gbr' print 'Tested on Windows XP SP2'...

MiniWebsvr 0.0.9a - Remote Directory Traversal

import socket import sys print '---------------------------------------------------------' print 'MiniWebSvr 0.0.9a Directory Transversal Vulnerability' print 'Project URL: http://miniwebsvr.sourceforge.net/' print 'Author: gbr' print 'Tested on Windows XP SP2' print...

MyServer 0.8.11 - '204 No Content' error Remote Denial of Service

exploit.py import socket import os print '------------------------------------------------------------------' print ' MyServer 0.8.11 "204 No Content" error Remote Denial of Service' print ' url: www.myserverproject.net' print ' author: shinnai' print ' mail: shinnaiatautisticidotorg' print ' sit...

CVE-2007-6562

Multiple stack-based buffer overflows in the use of FDSET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the 1 SocketAddress::Connect function in libsolve/sockprot.cpp and 2 monitorbridge function in...

Simple HTTPD 1.3 (/aux) Remote Denial of Service Exploit

No description provided by source. usage: poc.py host port import socket import sys print "-----------------------------------------------------------------------" print "Simple HTTPD 1.3 /aux Denial of Service\n" print "url: http://shttpd.sourceforge.net\n" print "author: shinnai" print "mail:...

Simple HTTPD <= 1.41 (/aux) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ============================================================ Simple HTTPD = 1.41 /aux Remote Denial of Service Exploit ============================================================ usage: poc.py host port import socket import sys print...

timbuktu_sploit.txt

!/usr/bin/perl ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO Timbuktu Pro 8.6.3 Arbitrary File Deletion/Creation Bug & Exploit by titon titonatbastardlabsdotcom Advisory: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590 Copyright: c2007 BastardLabs...

Sami HTTP Server 2.0.1 POST Request Denial of Service Exploit

No description provided by source. usr/bin/python import socket print "-------------------------------------------------------------------------" print " Sami HTTP Server 2.0.1 POST request Denial of Service" print " url: http://www.karjasoft.com" print " author: shinnai" print " mail:...

FTPDMIN 0.96 (LIST) Remote Denial of Service Exploit

No description provided by source. usr/bin/python import socket import time print "-----------------------------------------------------------------------" print " FTPDMIN v. 0.96 LIST Denial of Service" print " url: http://www.sentex.net/mwandel/ftpdmin/" print " author: shinnai" print " mail:...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

Stack overflow

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...