CVE-2007-6750

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.

• https://github.com/Jeanpseven/slowl0ris

CVE-2007-6638

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.

• https://github.com/alt3kx/CVE-2007-6638

CVE-2007-6377

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

• https://github.com/Nicoslo/Windows-exploitation-BadBlue-2.7-CVE-2007-6377

CVE-2007-5962

Memory leak in a certain Red Hat patch, applied to vsftpd 2.0.5 on Red Hat Enterprise Linux (RHEL) 5 and Fedora 6 through 8, and on Foresight Linux and rPath appliances, allows remote attackers to cause a denial of service (memory consumption) via a large number of CWD commands, as demonstrated by an attack on a daemon with the deny_file configuration option.

• https://github.com/antogit-sys/CVE-2007-5962

CVE-2007-5036

Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."

• https://github.com/alt3kx/CVE-2007-5036

CVE-2007-4607

Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability than CVE-2007-1029. NOTE: this may have been fixed in version 6.0.3.15.

• https://github.com/joeyrideout/CVE-2007-4607

CVE-2007-4560

clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."

• https://github.com/0x1sac/ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

CVE-2007-4559

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

• https://github.com/advanced-threat-research/Creosote

• https://github.com/Ooscaar/MALW

• https://github.com/davidholiday/CVE-2007-4559

• https://github.com/luigigubello/trellix-tarslip-patch-bypass

• https://github.com/JamesDarf/tarpioka

CVE-2007-3831

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

• https://github.com/alt3kx/CVE-2007-3831

CVE-2007-3830

Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to inject arbitrary web script or HTML via the reminder parameter.

• https://github.com/alt3kx/CVE-2007-3830

CVE-2007-3280

The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system function in libc.so.6 to gain shell access.

• https://github.com/DenuwanJayasekara/CVE-Exploitation-Reports

CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

• https://github.com/amriunix/CVE-2007-2447

• https://github.com/un4gi/CVE-2007-2447

• https://github.com/Unix13/metasploitable2

• https://github.com/Ziemni/CVE-2007-2447-in-Python

• https://github.com/Alien0ne/CVE-2007-2447

• https://github.com/xbufu/CVE-2007-2447

• https://github.com/n3rdh4x0r/CVE-2007-2447

• https://github.com/ozuma/CVE-2007-2447

• https://github.com/Aviksaikat/CVE-2007-2447

• https://github.com/3x1t1um/CVE-2007-2447

• https://github.com/s4msec/CVE-2007-2447

• https://github.com/Nosferatuvjr/Samba-Usermap-exploit

• https://github.com/mr-l0n3lly/CVE-2007-2447

• https://github.com/0xKn/CVE-2007-2447

• https://github.com/xlcc4096/exploit-CVE-2007-2447

• https://github.com/testaross4/CVE-2007-2447

• https://github.com/Juantos/cve-2007-2447

• https://github.com/cherrera0001/CVE-2007-2447

• https://github.com/G01d3nW01f/CVE-2007-2447

• https://github.com/0xTabun/CVE-2007-2447

• https://github.com/0xConstant/CVE-2007-2447

• https://github.com/JoseBarrios/CVE-2007-2447

• https://github.com/b1fair/smb_usermap

• https://github.com/bdunlap9/CVE-2007-2447_python

• https://github.com/MikeRega7/CVE-2007-2447-RCE

• https://github.com/IamLucif3r/CVE-2007-2447-Exploit

• https://github.com/ShivamDey/Samba-CVE-2007-2447-Exploit

• https://github.com/HerculesRD/PyUsernameMapScriptRCE

• https://github.com/3t4n/samba-3.0.24-CVE-2007-2447-vunerable-

• https://github.com/WildfootW/CVE-2007-2447_Samba_3.0.25rc3

CVE-2007-1858

The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.

• https://github.com/anthophilee/A2SV--SSL-VUL-Scan

CVE-2007-1567

Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity. NOTE: this might be the same issue as CVE-1999-0256, CVE-2000-0131, or CVE-2006-2171, but due to Immunity's lack of details, this cannot be certain.

• https://github.com/war4uthor/CVE-2007-1567

CVE-2007-0843

The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.

• https://github.com/z3APA3A/spydir

CVE-2007-0038

Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.

• https://github.com/Axua/CVE-2007-0038

• https://github.com/Cheesse/cve2007-0038x64