Free CD to MP3 Converter 3.1 - Local Buffer Overflow

!usr/bin/perl Exploit Title: Exploit 0day Buffer Overflow Free CD to MP3 Converter 3.1 Date: 09\11\2010 Author: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: WIN-XP SP3 Exploit Writted by C4SS!0 G0M3S Home: http://www.invasao.com.br E-mail:...

Free CD to MP3 Converter 3.1 - Local Buffer Overflow (SEH)

Exploit Title: Free CD to MP3 Converter 3.1 Buffer Overflow Exploit SEH Date: 10/18/10 Credit/Bug found by: C4SS!0 G0M3S Software Link: http://www.eusing.com/Download/cdtomp3freeware.exe Version: 3.1 Tested on: Windows XP SP3 EN VMWARE FUSION - Version 3.1.1 CVE: N/A ! /usr/bin/env ruby filename ...

Unfixed XSS vulnerability at www.yuteks.com.tr

Security researcher HeRo, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting www.yuteks.com.tr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

phpaa cms 0day and fix-vulnerability warning-the black bar safety net

Author:BlAck. Eagle cookie spoofing Vulnerabilityfile:/admin/global.php 1. ? php 2. / 3. Background public profile 4. 5. For the background application is initialized, a background verify permissions, etc. 6. / 7. requireonce '../data/config.inc.php'; //system initialization file 8. requireonce...

Unfixed XSS vulnerability at www.europa-huset.dk

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting www.europa-huset.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Unfixed XSS vulnerability at mp3.malikaro.tk

Security researcher Th3 RDX, has submitted on 21/10/2010 a cross-site-scripting XSS vulnerability affecting mp3.malikaro.tk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently...

Security fix for the ALT Linux 5 package tomcat6 version 0:6.0.26-alt2_11jpp6

Oct. 18, 2010 Igor Vlasenko 0:6.0.26-alt211jpp6 - CVE-2010-2227 fix closes: 23779...

Stack overflow

Certain run-time memory protection mechanisms in the GNU C Library aka glibc or libc6 print argv0 and backtrace information, which might allow context-dependent attackers to obtain sensitive information from process memory by executing an incorrect program, as demonstrated by a setuid program tha...

Unfixed XSS vulnerability at chrl.nl

Security researcher PaPPy, has submitted on 10/07/2010 a cross-site-scripting XSS vulnerability affecting chrl.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed. If...

Unfixed XSS vulnerability at www.rzr.im

Security researcher PaPPy, has submitted on 10/07/2010 a cross-site-scripting XSS vulnerability affecting www.rzr.im, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed. ...

E-Xoopport - Samsara 3.1 eCal Module Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...

E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...

linux/x86 setuid(0) and dd of=/dev/sda if=/dev/zero shellcode 74 bytes

Exploit for linux/x86 platform in category shellcode ====================================================================== linux/x86 setuid0 and dd of=/dev/sda if=/dev/zero shellcode 74 bytes ====================================================================== / Title : Linux x86 shellcode...

Stuxnet Worm Detection

The remote Windows host has files present on the system that indicate the Stuxnet worm has infected the system. This worm attempts to spread in several ways, making use of known Windows vulnerabilities and removable media. It has been seen making use of several 0-day vulnerabilities as well as...

E-Xoopport - Samsara 3.1 Blind SQL Injection

!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; $host = $ARGV0; $usr = $ARGV1; $pwd = $ARGV2; $anickde = $ARGV3; $anick = '0x'.EncHex$anickde; print "+ Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd" ; $ua = LWP::UserAgent-new; $ua-agent"Mozilla 5.0"; my $req = POST $host,...

Adobe Releases Security Advisory for Vulnerability in Reader and Acrobat

Adobe has released a security advisory to address a vulnerability in Adobe Reader and Acrobat. Exploitation of this vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service condition. The advisory indicates that this vulnerability is being actively exploited...

Unfixed XSS vulnerability at www.aolfeedback-clarabridge.com

Security researcher Azat Harutyunyan, has submitted on 09/06/2010 a cross-site-scripting XSS vulnerability affecting www.aolfeedback-clarabridge.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Fedora 13 : uzbl-0-0.16.20100626gitafc0f873e.fc13 (2010-12260)

Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...

Mediacoder 0.7.5.4710 - Local Buffer Overflow

Mediacoder 0.7.5.4710 - Local Buffer Overflow media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 !/usr/bin/python to exploit load the crash.m3u file and double click on it filename = "crash.m3u" junk = "\x41" 256...