what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 8 of 8

Files from Josh Zlatin

ipswitch_dos.txt

Posted Feb 26, 2006

Authored by Josh Zlatin

IPSwitch WhatsUp Professional 2006 is susceptible to a denial of service condition. Details provided.

tags | exploit, denial of service

SHA-256 | 9119a80ec0c9b33ed189c8cd59ba6129630ab16b6e6653b0067d501c16b92142

Download | Favorite | View

EZDatabase.txt

Posted Jan 21, 2006

Authored by Josh Zlatin

EZDatabase versions below 2.1.2 are susceptible to cross site scripting, directory traversal, and path disclosure flaws.

tags | exploit, xss

SHA-256 | cc361d96f5afcac49024f0503bb6866e25b0a4c51fe3912ad76626370d097d6e

Download | Favorite | View

Mailsite-7.0.3.1.txt

Posted Jan 5, 2006

Authored by Josh Zlatin | Site zur.homelinux.com

Rockliffe Mailsite versions 7.0.3.1 and below allow remote username enumeration.

tags | advisory, remote

SHA-256 | 484e89ba5ae386770661d719db2e55381bafcd9d693b8f26fb5bd0b59b803bed

Download | Favorite | View

Mailsite-6.1.22.1.txt

Posted Jan 5, 2006

Authored by Josh Zlatin | Site zur.homelinux.com

Rockliffe Mailsite versions 6.1.22.1 and below suffer from a directory transversal problem allowing any authenticated user to access any users mailbox with the RENAME command.

tags | advisory

SHA-256 | cd3e1e6390c2abbfc38a68432705cdf3520afea1340716dc9415375f7240edab

Download | Favorite | View

mailEnableDoS.txt

Posted Nov 30, 2005

Authored by Josh Zlatin

MailEnable Pro version 1.7 and MailEnable Enterprise version 1.1 are susceptible to a remote IMAP related denial of service flaw when a rename request with non existent mailbox names is presented.

tags | exploit, remote, denial of service, imap

SHA-256 | 3198f10d176771fde3a587491b924d65f7750f614ebf2bc7c1e2d7cabc92d4f9

Download | Favorite | View

guppyTraverse.txt

Posted Oct 6, 2005

Authored by Josh Zlatin

Guppy versions less than 4.5.6a suffer from a directory traversal flaw.

tags | exploit

SHA-256 | 0c4d9e03b254b7559762e6468588ce209b31b09e1710113e432ea53258356eb2

Download | Favorite | View

httpXSS.txt

Posted Sep 22, 2005

Authored by Josh Zlatin

Orion 1.3.8, 1.4.5, and CompaqHTTPServer 2.1 all fail to sanitize user supplied data when providing a 404 response with the information, allowing for cross site scripting attacks.

tags | exploit, xss

SHA-256 | 8f69936bc0c82c0a747bca8c2f6f1bb0a038cb6703d3c72f34754e227b045a74

Download | Favorite | View

NotSoWyse.txt

Posted Aug 12, 2005

Authored by Josh Zlatin

It is possible to remotely crash the Wyse Winterm 1125SE terminal by sending a malformed packet with ip option len field set to zero.

tags | advisory

SHA-256 | 7d6ec73bfdc62a8d48538d2a967383d4583ec5314a62df994d904a95d68f5b4d

Download | Favorite | View