Researcher Publishes Android Browser Exploit

UPDATE: A researcher at security firm Alert Logic has published code that could be used to compromise some versions of Google’s Android Operating System. The exploit, if properly adapted, could make Android phones vulnerable to remote attacks and compromises. Researcher MJ Keith published a Rever...

Platinum SDK Library post upnp sscanf Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc =================================================================== Platinum SDK Library post upnp sscanf Buffer Overflow Vulnerability =================================================================== / -POC CODE Remote Buffer Overflow -...

Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

Exploit for windows platform in category local exploits =================================================================== Winamp 5.5.8.2985 inmod plugin Stack Overflow Friendly Version =================================================================== !/usr/bin/python Winamp 5.5.8.2985 inmod...

Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D and 7eK presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow A Script Kiddie Friendly Production WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ An improvement to...

Fat Player Media Player 0.6b0 Buffer Overflow

$Id: fatplayerwav.rb 10764 2010-10-20 11:53:12Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 13 : php-pear-CAS-1.1.3-1.fc13 (2010-15943)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Fedora 12 : php-pear-CAS-1.1.3-1.fc12 (2010-15970)

This release contains 3 security fixes for vulnerabilities in the proxy callback mechanism. These vulnerabilities only affect phpCAS clients that are running in proxy mode. The release is fully compatible with all versions 1.1.x versions. The changes are : Security Issue - CVE-2010-3690 phpCAS: X...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ POC by fdisk Exploit by Mighty-D Special thanks to: fdisk: Who wrote the skeleton o...

Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ======================================================== Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit ======================================================== !/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buff...

Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SET

The module exploits an sql injection flaw in the CREATECHANGESET procedure of the PL/SQL package DBMSCDCPUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTECATALOGROLE have the required privilege. Module Options msf u...

Imageview <= 6.x Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Imageview = 6.x Multiple Remote Vulnerabilities ================================================ || || | || o,7 || . o7 || 4||| ow, : / /...

Microsoft IIS 6.0 - ASP Stack Overflow Stack Exhaustion (Denial of Service) (MS10-065)

Affected Vendors Microsoft Affected Products Only Microsoft IIS 6.0 was tested successfully On a Windows Server 2003 SP2 System The System was NOT updated to the latest patches during testing. Since tests “in the wild” have shown the attack to be real this advisory was released. Vulnerability...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...

JE CMS 1.0.0 - Authentication Bypass

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | userLogin; userLogin function is in administrator\library\functions.php. in lines 129-139: if $userName == '' || $password == '' $errorMessage = JEMISMATCHUSERNAMEPASSWORD; else // check the database and see if the...

Microsoft Internet Explorer - MSHTML Findtext Processing

Microsoft Internet Explorer - MSHTML Findtext Processing /textarea function Search var textinput = document.getElementById"Abysssec"; var textRange = textinput.createTextRange; textRange.findTextunescape"%u4141",-1; textRange.selectdocument.getElementById'd'; document.body.appendChildtextinput;...

Programs Script Reinstall admin login Vulnerabilities

Exploit for php platform in category web applications ===================================================== Programs Script Reinstall admin login Vulnerabilities ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Barracuda Networks Spam Virus Firewall 4.1.1.021 - Remote Configuration Retrieval

Barracuda Networks Spam Virus Firewall 4.1.1.021 - Remote Configuration Retrieval !/bin/bash Exploit by ShadowHatesYou [email protected] The resulting output is an SQL dump containing the Barracuda's configuration, which includes goodies such as: The administrative password for the...

ZenPhoto - Config Update / Command Execution

body font-family:tahoma;font-size:14px "; echo "Zen Photo Image Gallery 1.3 Reset admin Password By : Abysssec @ Inc www.Abysssec.com After click on below , if target will can connect to your MysqlHost : You Must view 'GO !'...

VisualSite CMS 1.3 - Multiple Vulnerabilities

VisualSite CMS 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite...