Unfixed XSS vulnerability at bbg-clan.de

Security researcher brahodoh, has submitted on 07/10/2011 a cross-site-scripting XSS vulnerability affecting bbg-clan.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3...

ZipWiz 2005 5.0 - '.zip' Buffer Corruption

!/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use warnings; ...

ZipWiz 2005 5.0 - .zip Buffer Corruption

ZipWiz 2005 5.0 - .zip Buffer Corruption !/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian...

ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP S...

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow

ZipGenius 6.3.2.3000 - .zip Local Buffer Overflow !/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3...

ZipGenius 6.3.2.3000 - '.zip' Local Buffer Overflow

!/usr/bin/perl +Exploit Title: ZipGenius v6.3.2.3000 .ZIP File Buffer Overflow Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.freewarefiles.com/ZipGenius-Vprogram3344.html +Version: 6.3.2.3000 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use...

Fedora 15 : nfs-utils-1.2.4-0.fc15 (2011-8934)

Updated to latest upstream release: 1.2.4 - Fixes CVE-2011-2500 bz 716950 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

M86 Researchers Discover Short-Lived IE 0-Day

Researchers from M86 claim to have discovered a 0-day exploit for Internet Explorer that is being used in the wild, according to Avri Schneider, an M86 researcher. Writing for an M86 blog yesterday, Schneider said that the company’s team of researchers discovered a piece of JavaScript on the page...

Unfixed XSS vulnerability at www.videocode.org

Security researcher AR3SW0RMED, has submitted on 27/06/2011 a cross-site-scripting XSS vulnerability affecting www.videocode.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is current...

FreeAmp 2.0.7 - .pls Local Buffer Overflow

FreeAmp 2.0.7 - .pls Local Buffer Overflow !/usr/bin/python +Exploit Title: FreeAmp 2.0.7 .PLS File Buffer Overflow Exploit +Date: 24\06\2011 +Author: C4SS!0 G0M3S +Version: 2.0.7 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack import os import sys from time import...

FreeAmp .pls Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python +Exploit Title: FreeAmp 2.0.7 .PLS File Buffer Overflow Exploit +Date: 24\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.exploit-db.com/application/17441/ +Version: 2.0.7 +Tested On: WIN-XP SP3 Brazilian Portugues...

WordPress Plugin WPtouch 1.9.27 - URL redirection

Hello , that's a 0day on the must downloaded WordPress plugin. Exploit Title: 0-Day WPtouch WordPress Plugin 1.9.27 URL redirection Google Dork: intext:"Powered by Wordpress + WPtouch" with iphone/android User-Agent Author: MaKyOtOx special Pwet to ansx & Zizounette for bitcoins Date: 20/06/2011...

AlegroCart <= 1.2.x Drown 0-Day Serving Exploit

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl +Exploit Title: 1ClickUnzip 3.00 .ZIP File Heap Overflow Vulnerability +Date: 05\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/1-Click-Unzip-Download-77210.html +Version: 3.0.0 +Tested On: WIN-...

FreeBSD/x86 encrypted setuid(0) execve /bin/sh 51 bytes

/ Title : 51 bytes FreeBSD/x86 encrypted setuid0 execve /bin/sh Date : Sun May 29 08:07:11 UTC 2011 Author; mywisdom email protected Web : devilzc0de.org Gopher: gopher://sdf.org/1/users/wisdomc0 Blog : http://myw1sd0m.blogspot.com/ Tested on: FreeBSD 8.2-RELEASE i386 special thanks to...

Adobe Reader 'CoolType.dll' TTF font overflow vulnerability analysis-vulnerability warning-the black bar safety net

Author: Nicolas Joly Translator: riusksk（springs brother: the http://riusksk.blogbus.com） This article aims to share with you some information about the recent Adobe Acrobat/Reader 0-Day exploitCVE-2 0 1 0-2 8 8 3The technical details. In VUPEN tissue, we analyzed a large number of vulnerabilitie...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2011:0136-1)

The subversion server could be crashed by clients inside SVNParentPath. Additionally an Out Of Memory condition via 'blame -g' has been fixed. CVE-2010-4539 and CVE-2010-4644 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)

when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...

openSUSE Security Update : libpango-1_0-0 (openSUSE-SU-2011:0221-1)

Specially crafted font files could cause a heap corruption in applications linked against pango CVE-2011-0064, CVE-2011-0020. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpango-10-0-4076...