SOLDNER Secret Wars <= 30830 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================== SOLDNER Secret Wars include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h /...

Microsoft IE FRAME/IFRAME/EMBED Tag Overflow (Bofra Worm Detection)

The remote host seems to have been infected with the Bofra worm or one of its variants, which infects machines via an Internet Explorer IFRAME exploit. It is very likely this system has been compromised. Bofra virus detection Author: Brian Smith-Sweeney [email protected]...

Secure Network Messenger <= 1.4.2 Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== Secure Network Messenger ; chomp $h; $socks = IO::Socket::INET-new Proto = "tcp", PeerPort = "6144", PeerAddr = "$h" or die "\nNo response from host."; sleep 1; print "\nSuccesfully...

Pigeon Server 3.02.0143 - Denial of Service

/ by Luigi Auriemma / include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1" define PORT 3103 define BUFFSZ 8192 // we need at least 8180 'a's ulong resolvchar host; void stderrvoid; int...

ImageMagick, imlib, imlib2: BMP decoding buffer overflows

Background ImageMagick is a suite of image manipulation utilities and libraries used for a wide variety of image formats. imlib is a general image loading and rendering library. Description Due to improper bounds checking, ImageMagick and imlib are vulnerable to a buffer overflow when decoding...

[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability

Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...

GLSA-200401-02 : Honeyd remote detection vulnerability via a probe packet

The remote host is affected by the vulnerability described in GLSA-200401-02 Honeyd remote detection vulnerability via a probe packet A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP...

Samba Printer Change Notification DoS

DoS on FindNextPrintChangeNotify request processing...

BadBlue < 2.3 ISAPI Module Remote Administrative Interface Access

Binary data 2177.prm...

popper_mod < 1.2.3 Administration Authentication Bypass

Binary data 1588.prm...

BeyondTrust Retina Scanner Detection

Binary data 9060.prm...

Winamp MIDI Plugin Track Size Overflow

Binary data 1952.prm...

Web Server SSLv1 Detection

Binary data 1135.prm...

BeyondTrust Retina Scanner Detection

Binary data 1158.prm...

[Full-Disclosure] iDEFENSE Security Advisory 08.16.04: CVS Undocumented Flag Information Disclosure Vulnerability

CVS Undocumented Flag Information Disclosure Vulnerability iDEFENSE Security Advisory 08.16.04 www.idefense.com/application/poi/display?id=130&type=vulnerabilities August 16, 2004 I. BACKGROUND CVS Concurrent Versions System is an open-source network-transparent version control system. II...

SQL Server Detection

Binary data 2131.prm...

Fortify 360 Web Interface Detection

Binary data 5007.prm...

Potential Microsoft SQL Injection Vulnerability Detection

Binary data 2002.prm...

GoScript go.cgi Arbitrary Command Execution

The remote host is running GoScript. The installed version fails to properly sanitize user-supplied input to the 'go.cgi' script. An unauthenticated, remote attacker could exploit this flaw to execute arbitrary commands on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

BasiliX login.php3 username Variable Arbitrary Command Execution

The remote host appears to be running a version of BasiliX between 1.0.2beta or 1.0.3beta. In such versions, the script 'login.php3' fails to sanitize user input, which enables a remote attacker to pass in a specially crafted value for the parameter 'username' with arbitrary commands to be execut...