Section: .. / 0708-exploits /
| /// File Name: |
counterpath-dos.txt |
Description:
|
CounterPath X-Lite SIP Phone version 3.x suffers from a remote denial of service vulnerability.
| | Author: | Zwell | | Homepage: | http://www.nosec.org/ | | File Size: | 5395 | | Last Modified: | Aug 13 22:40:07 2007 |
| MD5 Checksum: | 35b2319663f18b866d440babebd80e1a |
|
| /// File Name: |
SURGEMAIL.py.txt |
Description:
|
Surgemail 38k 0-day exploit that binds a shell to TCP/9999.
| | Author: | Joey Mengele | | File Size: | 5359 | | Last Modified: | Aug 14 13:42:08 2007 |
| MD5 Checksum: | 329b80d7aef354d323a4f91268f566ff |
|
| /// File Name: |
cisco-sql.txt |
Description:
|
A SQL injection vulnerability exists in the Log On page of the web interface for Cisco CallManager AKA Unified Communications Manager. An unauthenticated attacker who is able to access the Log On page could exploit this vulnerability to run arbitrary SQL commands as the logged in database user, usually cm_publisher. By running SQL commands, the attacker could gain information about the CallManager configuration, including call records. Exploitation details provided.
| | Author: | Elliot Kendall | | File Size: | 5355 | | Last Modified: | Aug 31 13:00:05 2007 |
| MD5 Checksum: | 3f7b845f8abbf592305551e6224d261d |
|
| /// File Name: |
wengophone-dos.txt |
Description:
|
WengoPhone SIP Phone version 2.x suffers from a remote denial of service vulnerability.
| | Author: | Zwell | | Homepage: | http://www.nosec.org/ | | File Size: | 5047 | | Last Modified: | Aug 13 22:41:30 2007 |
| MD5 Checksum: | 3c7e4535413d5462d0d7d69a6c2b83f1 |
|
| /// File Name: |
zyxel_070810.txt |
Description:
|
Zyxel Zywall 2 suffers from persistent cross site scripting, cross site request forgery, and persistent denial of service vulnerabilities.
| | Author: | Henri Lindberg | | Homepage: | http://www.louhi.fi/ | | File Size: | 4749 | | Last Modified: | Aug 11 18:08:28 2007 |
| MD5 Checksum: | 741aa9359ec5d00c3f3c3c9131ebfd6f |
|
| /// File Name: |
asa-2007-015.rb.txt |
Description:
|
Proof of concept exploit that tests for the chan_iax vulnerability in Asterisk versions below 1.2.2 and 1.4.8.
| | Author: | tenkei_ev | | Related File: | ASA-2007-015.txt | | File Size: | 4572 | | Related CVE(s): | CVE-2007-3763 | | Last Modified: | Jul 31 20:57:38 2007 |
| MD5 Checksum: | 7f965e932ba1804302cb8d60372ffeff |
|
| /// File Name: |
pbd-sql.txt |
Description:
|
PHP Blue Dragon CMS version 3.0.0 remote SQL injection exploit.
| | Author: | Kacper | | Homepage: | http://devilteam.eu/ | | File Size: | 4524 | | Last Modified: | Aug 11 17:38:04 2007 |
| MD5 Checksum: | 0e5d9888b98d2f6466f21335f94dadf9 |
|
| /// File Name: |
pakupaku-rfulfi.txt |
Description:
|
Pakupaku CMS versions 0.4 and below remote file upload exploit.
| | Author: | GolD_M | | Homepage: | http://www.tryag.cc/ | | File Size: | 4403 | | Last Modified: | Aug 30 03:10:12 2007 |
| MD5 Checksum: | eb28e47bc15b4183419bd79aff5b9e8d |
|
| /// File Name: |
phpnews093-rfi.txt |
Description:
|
PHPNews version 0.93 suffers from a remote file inclusion vulnerability.
| | Author: | kezzap66345 | | File Size: | 4263 | | Last Modified: | Aug 8 01:16:17 2007 |
| MD5 Checksum: | 2a8679d8cc431e3636d49b6f7f6f9bfa |
|
| /// File Name: |
bitchx-heap.txt |
Description:
|
BitchX version 1.1 Final remote heap overflow exploit that binds a TCP shell to port 4444.
| | Author: | bannedit | | Homepage: | http://www.blacksecurity.org/ | | File Size: | 4010 | | Last Modified: | Aug 27 22:59:39 2007 |
| MD5 Checksum: | 050200b6730c3625547c6df0bcc8ca77 |
|
| /// File Name: |
grandstream-sip.txt |
Description:
|
The Grandstream SIP phone version GXV-3000 is susceptible to a denial of service vulnerability. Exploit included.
| | Author: | Humberto J. Abdelnur, Olivier Festor, Radu State | | File Size: | 3831 | | Last Modified: | Aug 23 17:08:42 2007 |
| MD5 Checksum: | 54dd946c914f59e40ad779a521d3ccb3 |
|
| /// File Name: |
cisco-dos.txt |
Description:
|
The Cisco 7940 is susceptible to a denial of service vulnerability when sent three specially crafted SIP messages. Demonstration exploit included.
| | Author: | Radu State | | File Size: | 3697 | | Last Modified: | Aug 21 16:04:55 2007 |
| MD5 Checksum: | 949108fa7f623a7e290a90f7c64fdb55 |
|
| /// File Name: |
nvr-settext-dos.txt |
Description:
|
NVR SP2 version 2.0 SetText() remote buffer overflow denial of service exploit that makes use of nvUnifiedControl.dll version 1.1.45.0.
| | Author: | shinnai | | Homepage: | http://shinnai.altervista.org/ | | File Size: | 3431 | | Last Modified: | Aug 27 22:46:31 2007 |
| MD5 Checksum: | 19c05d297af649c915988b015cd6cce0 |
|
| /// File Name: |
OS2A_1009.txt |
Description:
|
The Ripe Website Manager versions 0.8.9 and below suffer from cross site scripting and SQL injection vulnerabilities.
| | Author: | Nagendra Kumar G, Arun Kethipelly | | File Size: | 3261 | | Last Modified: | Aug 23 17:12:25 2007 |
| MD5 Checksum: | c3b9f09d4d2441c0dba8901503776577 |
|
| /// File Name: |
postcast-overflow.txt |
Description:
|
Postcast Server Pro version 3.0.61 and Quiksoft EasyMail emsmtp.dll version 6.0.1 buffer overflow exploit.
| | Author: | rgod | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 3238 | | Last Modified: | Aug 28 11:48:51 2007 |
| MD5 Checksum: | d219f1ac5c8237428552cf151ffe1811 |
|
| /// File Name: |
vbul368-xss.txt |
Description:
|
vBulletin version 3.6.8 suffers from multiple cross site scripting vulnerabilities.
| | Author: | Hasadya Raed | | File Size: | 3229 | | Last Modified: | Aug 19 20:47:39 2007 |
| MD5 Checksum: | e17cdad7756a64bbd3c02450599e3873 |
|
| /// File Name: |
Ferite_Language_DoS.zip |
Description:
|
The interpreter for the Ferite programming language is susceptible to a denial of service flaw. Exploit code included.
| | Author: | WarGame | | Homepage: | http://vx.netlux.org/wargamevx | | File Size: | 3217 | | Last Modified: | Aug 8 03:46:56 2007 |
| MD5 Checksum: | 7b31864ef778e1a6d5d03398d59009b9 |
|
| /// File Name: |
ecentrex-overflow.txt |
Description:
|
eCentrex VoIP client module remote buffer overflow exploit that makes use of uacomx.ocx version 2.0.1.
| | Author: | rgod | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 3212 | | Last Modified: | Aug 21 16:51:27 2007 |
| MD5 Checksum: | 3fade46c37f0b850b1d915308991d4d9 |
|
| /// File Name: |
TS-2007-002-0.txt |
Description:
|
Template Security has discovered a serious user input validation vulnerability in the BlueCat Networks Proteus IPAM appliance. Proteus can be used to upload files to managed Adonis appliances to be downloadable by TFTP from the appliance. A Proteus administrator with privilege to add TFTP files and perform TFTP deployments can overwrite existing files and create new files as root on the Adonis DNS/DHCP appliance. This can be used for example to overwrite the system password database and change the root account password. Exploitation details provided. E
| | Author: | Template Security | | File Size: | 3135 | | Last Modified: | Aug 8 03:26:55 2007 |
| MD5 Checksum: | 8a4de76d6997f2dba9b93bea297d4831 |
|
| /// File Name: |
wireshark-dos.txt |
Description:
|
WireShark versions below 0.99.6 suffer from a denial of service vulnerability when parsing MMS messages. Denial of service exploit included.
| | Author: | Zwell | | Homepage: | http://www.nosec.org/ | | File Size: | 3041 | | Last Modified: | Aug 14 23:38:58 2007 |
| MD5 Checksum: | 30d54c76454c1e4355441db12e9ebed9 |
|
| /// File Name: |
blizzard-dos.txt |
Description:
|
Blizzard StarCraft Brood War version 1.15.1 suffers from a remote denial of service vulnerability.
| | Author: | Gynvael Coldwind | | File Size: | 2827 | | Last Modified: | Aug 30 03:47:49 2007 |
| MD5 Checksum: | a5789f2382d3d95d12aeb03dc5277771 |
|
| /// File Name: |
savant-overflow.txt |
Description:
|
Savant version 3.1 GET request remote universal overflow exploit that binds a shell to TCP/4444.
| | Author: | acaro | | File Size: | 2763 | | Last Modified: | Aug 13 22:47:05 2007 |
| MD5 Checksum: | 1718712f23470679dc1710d03b317ec7 |
|
| /// File Name: |
joomlabibtext-sql.txt |
Description:
|
BibTeX Joomla component versions 1.3 and below remote blind SQL injection exploit.
| | Author: | ajann | | File Size: | 2760 | | Last Modified: | Aug 23 20:56:55 2007 |
| MD5 Checksum: | 1e30340aa855cf2fd2411e4846de57df |
|
| /// File Name: |
ppstream-overflow.txt |
Description:
|
PPStream ActiveX remote overflow exploit that makes use of PowerPlayer.dll version 2.0.1.3829.
| | Author: | dummy | | File Size: | 2748 | | Last Modified: | Aug 31 12:48:45 2007 |
| MD5 Checksum: | 132a38ce0cc72b3c49ae42b164ffefa1 |
|
| /// File Name: |
msvisual-overflow.txt |
Description:
|
Microsoft Visual 6 stack overflow exploit that affects VDT70.DLL.
| | Homepage: | http://www.deltahacking.ir | | File Size: | 2718 | | Last Modified: | Aug 8 01:23:25 2007 |
| MD5 Checksum: | 61ce66fb5dc9c74537e0ba0e34a3f068 |
|
|
|
|
|