CVE-2018-5505

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

BackBox OS - Denial of Service

//Exploited By Hosein Askari include include include include include ifdef FPASS include endif include include include include ifndef USEBSD define USEBSD endif ifndef FAVORBSD define FAVORBSD endif include include include include include include ifdef LINUX define FIXx htonsx else define FIXx x...

Moxa SoftCMS 1.5 - Denial of Service (PoC)

Moxa SoftCMS 1.5 - Denial of Service PoC ''' Title: Moxa SoftCMS 1.5 AspWebServer Denial of Service Vulnerability Author: Zhou Yu Email: [email protected] Vendor: http://www.moxa.com/ Versions affected: 1.5 or prior versions Test on: Moxa SoftCMS 1.5 on Windows 7 SP1 x32 CVE: CVE-2016-9332 Advisor...

Freefloat FTP Server 1.0 - RENAME Remote Buffer Overflow

Freefloat FTP Server 1.0 - RENAME Remote Buffer Overflow !/usr/bin/env python -- coding: utf-8 -- Exploit Title: FreeFloat FTP Server RENAME Command Buffer Overflow Exploit Date: 29/10/2016 Exploit Author: Eagleblack Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Version:...

OMRON FINS TCP Protocol Detection

Binary data scadaomrontcpdetect.nbin...

CVE-2 0 1 6-5 6 9 6 vulnerability analysis: TCP side channel security-vulnerability warning-the black bar safety net

In this article, we are going to discuss one of the latest TCP side channel Vulnerability, CVE-2 0 1 6-5 6 9 6 to. This standard is in the Linux version 3.6 before proposed, and the impact of numerous device and the host. Simply put, as long as it is between two hosts via TCP Protocol to...

Linux TCP Flaw allows Hackers to Hijack Internet Traffic and Inject Malware Remotely

If you are using the Internet, there are the possibilities that you are open to attack. The Transmission Control Protocol TCP implementation in all Linux systems deployed since 2012 version 3.6 and above of the Linux kernel poses a serious threat to Internet users, whether or not they use Linux...

Tsusen - Network Traffic Sensor

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

The vulnerability of Oracle WebLogic Server application servers allows a hacker to execute arbitrary code.

The vulnerability of the WLS Security server component of Oracle WebLogic Server is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted Java objects transmitted over the TCP protocol,...

SUSE SLES11 Security Update : apache2 (SUSE-SU-2015:1885-2)

Apache was updated to fix one security vulnerability and two bugs. Following security issue was fixed. - Fix the chunked transfer coding implementation in the Apache bsc938728, CVE-2015-3183 Bugs fixed : - add SSLSessionTickets directive bsc941676 - hardcode modules %files bsc444878 - only enable...

SUSE-SU-2015:1885-2 Security update for apache2

Apache was updated to fix one security vulnerability and two bugs. Following security issue was fixed. - Fix the chunked transfer coding implementation in the Apache bsc938728, CVE-2015-3183 Bugs fixed: - add SSLSessionTickets directive bsc941676 - hardcode modules %files bsc444878 - only enable...

TrouSerS Denial of Service Vulnerability

No description provided by source. crashtcsd.py Copyright c 2012 Andy Lutomirski. All rights reserved. Permission is granted to anyone to copy and redistribute this file verbatim. Permission is not granted to distribute modified copies or derivative works. import struct import socket import time...

zawhttpd <= 0.8.23 (GET) Remote Buffer Overflow DoS

No description provided by source. !/usr/bin/perl zawhttpd Buffer Overflow Exploit by Kamil 'K3' Sienicki use IO::Socket; use strict; my$socket = ; if$socket = IO::Socket::INET-new PeerAddr = $ARGV0, PeerPort = $ARGV1, Proto = TCP print Attempting to kill zawhttpd at $ARGV0:$ARGV1 ...; print...

WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit

No description provided by source. ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl ip ftp user ftp pass WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ; if $socket =...

Xeneo Web Server 2.2.9.0 - Denial of Service Exploit

No description provided by source. !/usr/bin/perl Xeneo Web Server DoS Vulnerable systems: Xeneo. Web Server 2.2.9.0 Written by badpack3t [email protected] For SP Research Labs 04/21/2003 www.security-protocols.com usage: perl sp-xeneo.pl target port use IO::Socket; use strict; pri...

Cisco Catalyst 4000/5000/6000 6.1 SSH Protocol Mismatch Denial of Service

No description provided by source. source: http://www.securityfocus.com/bid/2117/info Software versions 6.11, 6.11a and 6.11b for Catalyst 4000, 5000, and 6000 devices that support SSH and 3 DES encryption contain a vulnerability that may allow an attacker to cause a denial of service. If a...

Generic TCP Protocol Detection

Binary data 8188.prm...

Printer Version Information Scanner

This module scans for printer version information using the Printer Job Language PJL protocol. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule "Printer Version Informatio...

Scientific Linux Security Update : busybox on SL6.x i386/x86_64 (20131121)

It was found that the mdev BusyBox utility could create certain directories within /dev with world-writable permissions. A local unprivileged user could use this flaw to manipulate portions of the /dev directory tree. CVE-2013-1813 This update also fixes the following bugs : - Previously, due to ...

Low: Red Hat Security Advisory: busybox security and bug fix update

Updated busybox packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...