KnFTPd 1.0.0 Denial Of Service

!/usr/bin/perl Advisory: KnFTPd 1.0.0 'FEAT' DoS PoC-Exploit Author: Stefan Schurtz Affected Software: Successfully tested on KnFTPd 1.0.0 Vendor URL: http://knftp.sourceforge.net/ Vendor Status: informed CVE-ID: - PoC-Version: 1.0 use strict; use Net::FTP; my $user = "system"; my $password =...

Carefully timed reloads and redirects can spoof the address field

The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site's address, while the attacking site is still...

Web page dialogs can be used to to display the wrong address in the address field – Opera Security Advisories

The address field should always show the correct address for the page that is loaded. If a page can cause Opera to display certain dialogs relating to a target site, the dialog may in some cases cause Opera to display the target site’s address instead of the correct address. This can allow an...

Carefully timed reloads and redirects can spoof the address field – Opera Security Advisories

The address field should always show the address of the page that is being displayed. In certain cases, if a target site responds slowly, reloading an attacking page and redirecting to the target page can cause the address field to show the target site’s address, while the attacking site is still...

Mozilla Proposes Change to Handling of Subordinate CA Certificates

Mozilla is considering a change to the way that it handles certificates issued by externally operated sub-CAs in an effort to gain more control of how these CAs issue certificates and what those certificates can do. The proposal would involve some new controls to help verify that certificates are...

sos security, bug fix, and enhancement update

1.7-9.62.0.1.el5 - add patch to remove all sysrq echo commands from sysreport.legacy John Sobecki orabug 11061754 - comment out rh-upload-core and README.rh-upload-core in specfile 1.7-9.62 - Always log plugin exceptions that are not raised to the interpreter Resolves: bz717480 - Ensure relative...

Sun Java Web Start Plugin Command Line Argument Injection (2012)

Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fatheads SQL Injection

Exploit Title : fatheads Sql Injection Vulnerabilitiy Author : IrIsT Team Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.fatheads.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Designed and developed by Fat...

HP VSA - Remote Command Execution

HP VSA - Remote Command Execution !/usr/bin/python ''' ================================== Pseudo documentation ================================== ''' HP VSA / SANiQ Hydra client Nicolas Grégoire v0.5 ''' ================================== Target information ================================== '''...

GLSA-201201-06 : iSCSI Enterprise Target: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201201-06 iSCSI Enterprise Target: Arbitrary code execution Multiple functions in usr/iscsi/isns.c of iSCSI Enterprise Target contain format string errors. Impact : A remote attacker could send a specially crafted Internet Storage...

CityVariety SQL Injection

================================================================================= Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ================================================================================...

HP OpenView Storage Stack Buffer Overflow (CVE-2011-1865)

A remote code execution vulnerability has been reported in HP OpenView. The vulnerability is due to insufficient boundary checking while handling certain opcode requests. A remote attacker may exploit this vulnerability by sending a specially crafted opcode request to a target server. Successful...

CoCSoft Stream Down Stack Overflow

Added: 01/10/2012 CVE: CVE-2011-5052 BID: 51190 OSVDB: 78043 Background CoCSoft Stream Down is a streaming media download tool. Problem The CoCSoft Stream Down HTTP client implementation in version 6.8 and prior does not properly validate HTTP responses. This vulnerability may allow an attacker t...

Base Content Management System Lennox Industries - Blind SQL Injection

Exploit for php platform in category web applications Base Content Management System Lennox Industries - Blind SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 04 January 2012 - 08:45 PM. Tested On : Back|Track 5. Auto-Tools : SQL...

WordPress LivePHP Cross Site Scripting

Exploit Title: Wordpress wp-livephp plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link: http://wordpress.org/extend/plugins/wp-livephp/ Version: All Version...

jPORTAL 2 SQL Injection

Exploit Title: jPORTAL 2 SQL Injection Vulnerabilitiy Google Dork: "powered by jPORTAL 2" Date: 8/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://jportal2.com/ Version: All Version Security Risk::High Tested on: GNU/Linux Ubuntu -...

FreeBSD Telnet Service Encryption Key ID Buffer Overflow

This module exploits a buffer overflow in the encryption option handler of the FreeBSD telnet service. -- coding: binary -- This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FreeBSD Telnet Servic...

Apple Safari Webkit libxslt Arbitrary File Creation (CVE-2011-1774)

An arbitrary file creation vulnerability exists in Apple Safari. The vulnerability is due to insufficient restriction of the Webkit by Safari while performing an XSL transformation. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web page with an...

IBM Lotus Domino Server Controller Authentication Bypass Vulnerability

No description provided by source. Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versio...

Adobe Flash Player Layered Animation Object Buffer Overflow (APSB11-28; CVE-2011-2460)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a buffer overrun while processing 3D coordinates in objects within layered animations. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an...