2940 matches found
Honeyd remote detection vulnerability via a probe packet
Background Honeyd is a virtual honeypot daemon that can simulate virtual hosts on unallocated IP addresses. Description A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP addresses...
Mambo Open Source 4.0.14 SQL injection
Product ------- Mambo Open Source 4.0.14 Vendor ------ http://www.mamboserver.com Details ------- Mambo Open Source is the open source Web Content Management System. Mambo Open Source CMS is used by many websites including the commercial ones. The function show in mambo/articles.php file is like...
MS Windows (RPC DCOM) Scanner (MS03-039)
No description provided by source. / dcom2scanner.c scan for second dcom vulnerability MS03-039 by Doke Scott, doke at udel.edu, 10 Sep 2003 based on work by: buildtheb0x presents : dcom/rpc scanner --------------------------------------- by: kid and farp and on packet sniffs of MS's dcom2 scanne...
MyServer 0.4.3 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc =============================================== MyServer 0.4.3 Remote Denial of Service Exploit =============================================== / MyServer 0.4.3 DoS vendor: http://myserverweb.sourceforge.net Written and found by badpack3t at...
Avirt Multiple Product HTTP Proxy Overflow (deprecated)
This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...
AN HTTPd count.pl Traversal Arbitrary File Overwrite (deprecated)
The remote web server is running a CGI called 'count.pl' which is affected by an directory traversal vulnerability. An attacker could exploit this in order to overwrite any existing file on the remote server, with the privileges of the httpd server. This plugin has been deprecated as it resulted ...
monkeyHTTPd.txt
Monkey HTTP Daemon Remote Buffer Overflow ABSTRACT "Monkey is a Web server written in C that works under Linux. This is an open source project based on the HTTP/1.1 protocol. The objective is to develop a fast, efficient, small and easy to configure web server." quote from...
PHP 4.3 - socket_iovec_alloc() Integer Overflow
PHP 4.3 - socketiovecalloc Integer Overflow source: https://www.securityfocus.com/bid/7187/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketiovecalloc and may allow an attacker to corrupt memory. Specifically, the affected function fails to...
TFTPD32 2.50 - Arbitrary File Download/Upload
source: https://www.securityfocus.com/bid/6198/info A vulnerability has been discovered in Tftpd32 which allows a remote attacker to download and upload arbitrary system files. The ability to upload system files may allow an attacker to replaced key system files with trojaned copies, used to open...
Crossite scripting in Monkey
www.victim.com/scriptalert'IIL0wnZYoU!!!';/script...
Microsoft Word does not adequately validate macros embedded within malformed Word documents
Overview There is a vulnerability caused by a failure to detect macros embedded in Microsoft Word documents. This vulnerability may allow the author of a malicious document to execute arbitrary commands as the user who opens the document. Description Microsoft Word versions including Word 2002,...
Norton Personal Firewall 2002 vulnerable to SYN/FIN scan
Hi all, I looked briefly in bugtraq archives and I didn't find any reference to this issue. Please accept my apologies, if it's a known problem. Norton Personal Firewall 2002 on Windows 2000 is vulnerable to SYN/FIN scan SYN/FIN/URG, SYN/FIN/PUSH, SYN/FIN/URG/PUSH are not detected as well also if...
Possible vulnerability in HPUX
Hello, Few days ago i read the mail Hackerslab bugpaper HP-UX bdf -t option buffer overflow vul. And decided to see any other possible vulnerabilityies on my ststem. HP-UX 10.20. After a few minutes maybe a little more : ,trying each setuid exe with different options, i finally got results as for...
SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation
SSH Communications Security SSH 1.2.27 - Authentication Socket File Creation source: https://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the...
CVE-2021-27536
This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided...
Windows Server 2003, Datacenter Edition family detectoid
Windows Server 2003, Datacenter Edition family detectoid...
Possible cross-site scripting (XSS) vulnerability in the Blade templating engine
A security researcher has disclosed a possible XSS vulnerability in the Blade templating engine. Given the following two Blade templates: resources/views/parent.blade.php: html @section'content' @show resources/views/child.blade.php: html @extends'parent' @section'content' @endsection And a route...