497 matches found
Vbulletin 4.0.x => 4.1.3 (messagegroupid) SQL injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on:...
vBulletin 4.0.x 4.1.3 - 'messagegroupid' SQL Injection
Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on: relevant os CVE : urlhttp://members.vbulletin.com//url...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
M86 Researchers Discover Short-Lived IE 0-Day
Researchers from M86 claim to have discovered a 0-day exploit for Internet Explorer that is being used in the wild, according to Avri Schneider, an M86 researcher. Writing for an M86 blog yesterday, Schneider said that the company’s team of researchers discovered a piece of JavaScript on the page...
WordPress Plugin WPtouch 1.9.27 - URL redirection
Hello , that's a 0day on the must downloaded WordPress plugin. Exploit Title: 0-Day WPtouch WordPress Plugin 1.9.27 URL redirection Google Dork: intext:"Powered by Wordpress + WPtouch" with iphone/android User-Agent Author: MaKyOtOx special Pwet to ansx & Zizounette for bitcoins Date: 20/06/2011...
AlegroCart <= 1.2.x Drown 0-Day Serving Exploit
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Adobe Reader 'CoolType.dll' TTF font overflow vulnerability analysis-vulnerability warning-the black bar safety net
Author: Nicolas Joly Translator: riusksk(springs brother: the http://riusksk.blogbus.com) This article aims to share with you some information about the recent Adobe Acrobat/Reader 0-Day exploitCVE-2 0 1 0-2 8 8 3The technical details. In VUPEN tissue, we analyzed a large number of vulnerabilitie...
Adobe Flash 0-day
No description provided by source. exploit.html: ---------------------------------- html head script type="text/javascript" function getCookieValoffset var endstr = document.cookie.indexOf";", offset; if endstr == -1 endstr = document.cookie.length; return unescapedocument.cookie.substringoffset,...
ZDI-11-112: (0 day) Hewlett-Packard Data Protector Media Operations DBServer.exe Remote Code Execution Vulnerability
ZDI-11-112: 0 day Hewlett-Packard Data Protector Media Operations DBServer.exe Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-112 March 23, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packa...
New Version of Eleonore Exploit Kit Released With New 0-Day Exploit
The creator of the infamous Eleonore exploit pack has released a new version of the attack toolkit, adding some new exploits, including one for a zero day vulnerability. The new version of Eleonore is selling for $2,000, a premium price even in the world of high-level exploit kits. Eleonore is on...
Announcing cross_fuzz, a potential 0-day in circulation, and more
Hi list, == SUMMARY == I am happy to announce the availability of crossfuzz - an amazingly effective but notoriously annoying cross-document DOM binding fuzzer that helped identify about one hundred bugs in all browsers on the market - many of said bugs exploitable - and is still finding more. Th...
Joomla SQL Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, Exists an SQL-Injection on http://people.joomla.org...
Byte2 SQL Injection / Cross Site Scripting
======================================================= Byte2 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...
Preemptive Protection against Freefloat FTP Server Buffer Overflow
A 0-day exploit has been reported in Freefloat FTP Server, a freeware FTP server for all Windows oeprating systems...
Crystal Reports Viewer 12.0.0.549 Activex Exploit (PrintControl.dll)
Exploit for windows platform in category remote exploits ==================================================================== Crystal Reports Viewer 12.0.0.549 Activex Exploit PrintControl.dll ==================================================================== //payload is windows/exec...
Crystal Reports Viewer 12.0.0.549 - PrintControl.dll ActiveX
Crystal Reports Viewer 12.0.0.549 - PrintControl.dll ActiveX //payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...
Exploit Code Out For New Windows Kernel Flaw
Security experts are warning about a newly discovered local privilege escalation bug in the Windows kernel that affects most of the current versions of the operating system, including Vista and Windows 7. The new Windows kernel bug is considered a critical vulnerability, even though it can’t be...
CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow
CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link:...
Online dating 3 script Upload Exploit 0-Day
Exploit for php platform in category web applications =========================================== Online dating 3 script Upload Exploit 0-Day =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 ...