HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service

HP Data Protector Media Operations - Null Pointer Dereference Remote Denial of Service !/usr/bin/python import socket,struct,sys,os SIGN=0x04030201 cmd=0x01000000 def main: if lensys.argv!=2: print"\nx Usage: python "+sys.argv0+" \n" sys.exit0 else: host=sys.argv1,19813 default port TCP/19813 if...

rpc.ttdbserverd x86 Proof Of Concept Exploit

Check Point Software Technologies - Vulnerability Discovery Team VDT Rodrigo Rubira Branco - RPC TTDB .rec parser Heap Overflow thrjmptable does not exist on Solaris 10 u8 See the SPARC version of this exploit to see how to specify other addresses to be overwritten use POSIX; use IO::Socket; use...

SIP Endpoint Scanner (TCP)

Scan for SIP devices using OPTIONS requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Endpoint Scanner TCP', 'Description' = 'Scan for SIP devices using OPTIONS requests', 'Author' =...

NetSarang Xftp 3.0 PWD响应栈溢出漏洞

BUGTRAQ ID: 39628 Xftp是Windows平台上使用的SFTP、FTP文件传输程序。 如果Xftp客户端受骗连接到了恶意的FTP服务器或打开了特制的.xfp会话文件并发送了超长命令的话，则在处理服务器返回的PWD响应时就可能触发栈溢出，导致执行任意代码。 NetSarang Xftp 3.0 厂商补丁： NetSarang --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.netsarang.com/ Exploit Title: Xftp client 3.0 PWD Remote...

CVE-2009-3641

Snort before 2.8.5.1, when the -v option is enabled, allows remote attackers to cause a denial of service application crash via a crafted IPv6 packet that uses the 1 TCP or 2 ICMP protocol...

EMC Replistor DoS

Crash on TCP/7144 data parsing...

Microsoft IIS 5.0/6.0 FTP Server Remote Stack Overflow Exploit (win2k)

No description provided by source. IIS 5.0 FTPd / Remote r00t exploit Win2k SP4 targets bug found & exploited by Kingcope, kcope2atgooglemail.com Affects IIS6 with stack cookie protection August 2009 - KEEP THIS 0DAY PRIV8 use IO::Socket; $|=1; metasploit shellcode, adduser "winown:nwoniw" $sc =...

Microsoft Telnet Services Credential Reflection Code Execution (MS09-042; CVE-2009-1930)

Telnet is a bidirectional communications protocol that allows for command line remote administration over the TCP protocol. A remote code execution vulnerability has been reported in the way Microsoft Windows Telnet Service handles NTLM credentials. The vulnerability is due to an error in the...

TCP ACK Firewall Scanner

Map out firewall rulesets with a raw ACK scan. Any unfiltered ports found means a stateful firewall is not in place for them. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'TCP ACK Firewall...

Sami HTTP Server 2.x - 'HEAD' Remote Denial of Service

!/usr/bin/perl Sami HTTP Server v2.x Remote Denial of Service with HEAD request. -------------------------------------------------------------------- The vulnerability is caused due to an error in handling the HEAD command. This can be exploited to crash the HTTP service...

DNS Server Detection (TCP)

TCP based detection of a DNS server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.108018";...

Windows/x86 (NT/XP/2000/2003) - Bind TCP (8721/TCP) Shell Shellcode (356 bytes)

Windows/x86 NT/XP/2000/2003 - Bind TCP 8721/TCP Shell Shellcode 356 bytes. Shellcode exploit for Windowsx86 platform ; Title: Win32 Bind Shell ; Platforms: Windows NT 4.0, Windows 2000, Windows XP, Windows 2003 ; Function: Listen for connection and spawn command shell ; Author: hdmatmetasploit.co...

FTP Now 2.6 Server Response Remote Crash PoC

Exploit for unknown platform in category dos / poc ============================================ FTP Now 2.6 Server Response Remote Crash PoC ============================================ !/usr/bin/perl By Dr.Pantagon www.deltasecurity.ir DeltaSecurityCenter Special Tnx D7J AND H!V++ FTP Now versio...

mIRC 6.34 - Remote Buffer Overflow (PoC)

mIRC 6.34 - Remote Buffer Overflow PoC Mirc 6.34 Remote Buffer Overflow This poc allow you to own the 2 first EDI & EDX bytes. To become remote, add a simple document.location.href=irc://server.com/... in some html page use IO::Socket; sub sock my $sock=new IO::Socket::INET Listen = 1, LocalAddr ...

fhttpd 0.4.2 - un64() Remote Denial of Service

fhttpd 0.4.2 - un64 Remote Denial of Service !/usr/bin/perl Jeremy Brown [email protected]/http://jbrownsec.blogspot.com http://www.fhttpd.org / fhttpd-0.4.2.tar.gz WARNING: VERY OLD Program received signal SIGSEGV, Segmentation fault. 0x0804b42d in un64 s=0x809b2d2 "" at util.cc:69 69 ifc2!=-...

FreeBSD Security Advisory (FreeBSD-SA-05:15.tcp.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:15.tcp.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BigAnt Server 2.2 Buffer Overflow

This module exploits a stack buffer overflow in BigAnt Server 2.2. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

IPS-1 TCP Protocol Updates

The TCP protocol has undergone updates for maintenance purposes...

wireshark security update

CentOS Errata and Security Advisory CESA-2007:0066-01 New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a...

CVE-2007-0959

Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service device reboot via malformed TCP packets...