what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from Matt Moore

ptl-2004-03.txt

Posted Aug 12, 2004

Authored by Matt Moore, Mark Rowe | Site pentest.co.uk

An unauthenticated remote attacker can submit various malformed service requests via Bluetooth, triggering a buffer overflow and executing arbitrary code on vulnerable devices using WIDCOMM Bluetooth Connectivity Software. All releases prior to 3.0 are affected.

tags | advisory, remote, overflow, arbitrary

advisories | CVE-2004-0775

SHA-256 | 5ec2b26e117a8391be03708d270e39f990dae23341935158de2640217287f268

Download | Favorite | View

ptl-2003-02

Posted Oct 1, 2003

Authored by Matt Moore | Site pentest.co.uk

IBM DB2 version 7.2 for Windows is vulnerable to a stack overflow in the INVOKE command that allows any attacker with Connect privileges to execute arbitrary code as the Administrators group.

tags | advisory, overflow, arbitrary

systems | windows

advisories | CVE-2003-0837

SHA-256 | dff1915f53bfe2f9a06216f85950a93b855ea98e3435b70fda2d599fd7b98496

Download | Favorite | View

wp-02-0012.txt

Posted Jul 11, 2002

Authored by Matt Moore | Site westpoint.ltd.uk

Westpoint Security Advisory wp-02-0012 - The Carello shopping cart v1.3 uses hidden fields to specify names of executables on the server, allowing an attacker to run arbitrary commands.

tags | arbitrary

SHA-256 | 9887d380b7d1e54dae208b58a265e0fcad7f19f519c4c30e79789a422c384c4c

Download | Favorite | View

wp-02-0008.txt

Posted Jul 11, 2002

Authored by Matt Moore | Site westpoint.ltd.uk

Westpoint Security Advisory wp-02-0008 - Apache Tomcat v4.0.3 is vulnerable to cross site scripting attacks by using the /servlet/ mapping. Linux and Win32 versions of Tomcat are vulnerable.

tags | xss

systems | linux, windows

SHA-256 | 7c8753a353b10b9fcac8e6d4fcd9c7fd8be17eae6139f7796cc2b8b8fa6dea83

Download | Favorite | View

wp-02-0001.txt

Posted Jul 11, 2002

Authored by Matt Moore | Site westpoint.ltd.uk

Westpoint Security Advisory wp-02-0001 - The GoAhead Web Server v2.1 for Windows NT/98/95/CE, Embedded Linux, Netware, and others contains directory traversal and cross site scripting vulnerabilities. Exploit URL's included.

tags | web, vulnerability, xss

systems | linux, windows

SHA-256 | 3e2b101f0ae13c006aead327c7e7c21f64f42fc6791980b2cd6bb6c96186df8d

Download | Favorite | View

wp-02-0007.txt

Posted Jun 14, 2002

Authored by Matt Moore | Site westpoint.ltd.uk

Westpoint Security Advisory - SQLXML allows XML data to be transferred to and from SQL Server, returning database queries as XML. SQLXML has two vulnerabilities - a buffer overflow in the SQLXML ISAPI filter and a cross site scripting vulnerability. These bugs are discussed in MS02-030.

tags | overflow, vulnerability, xss

SHA-256 | 11b451a50a7794ab52be537a852add9ac09a0ab37b6dff3b1edbf49c061125b0

Download | Favorite | View

servletexec-4.1.txt

Posted May 24, 2002

Authored by Matt Moore | Site westpoint.ltd.uk

NewAtlanta ServletExec ISAPI v4.1 contains three vulnerabilities. Remote users can read any file in the webroot, crash the server, and display the physical path of the web root. Patch available here.

tags | exploit, remote, web, root, vulnerability

SHA-256 | fc28cc03d24fa98eb266f32deaf3daa32abc63bfc958831609ba5849b34c2d4a

Download | Favorite | View