This is an unreleased, private 0day, which we found on an un-secure of a person who was trying to root us.
Use it on your own production environment and handle with care! We should not be held responsible for damages occurring out of the use of this source code.
“OpenSSH is a FREE version of the SSH [...]
Tagged as:
Free,
zero day
A vulnerability has been identified in the Microsoft Internet Information Services (IIS) where the server in incorrectly handling files with multiple extensions separated by the “;” character such as “malicious.asp;.jpg” as an ASP file.
This allows attackers to upload malicious executable’s on a vulnerable web server, bypassing file extension protections and restrictions!
ASP.Net is NOT affected [...]
Tagged as:
application security,
Fuzzer,
IIS,
vulnerability assessment,
zero day