Fedora 12 : moin-1.8.8-1.fc12 (2010-9857)

This update fixes XSS issues found in moin 1.8.7: http://moinmo.in/SecurityFixes For a list of bug fixes and new features refer to http://hg.moinmo.in/moin/1.8 /raw-file/1.8.8/docs/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

ShopCartDx 4.30 - 'products.php' Blind SQL Injection

!/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

linux/ARM - setuid(0) & kill(-1, SIGKILL) - 28 bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes ==================================================== / Title: Linux/ARM - setuid0 & kill-1, SIGKILL - 28 bytes Kill all processes Date:...

Unfixed XSS vulnerability at police112.com

Security researcher Xylitol, has submitted on 22/06/2010 a cross-site-scripting XSS vulnerability affecting police112.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently...

Solaris/x86 - Sync() &amp; reboot() &amp; exit(0) - 48 bytes

No description provided by source. / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan submit AT shell-storm.org Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm ! Database of shellcodes: http://www.shell-storm.org/shellcode/ Date: 2010-06-07...

linux/x86 bindport to 31337 with setreuid (0,0) polymorphic 131 bytes

Exploit for linux/x86 platform in category shellcode ===================================================================== linux/x86 bindport to 31337 with setreuid 0,0 polymorphic 131 bytes ===================================================================== /...

linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes

Exploit for linux/x86 platform in category shellcode ==================================================== linux/x86 execute /bin/sh with setreuid 0,0 45 Bytes ==================================================== / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 63 bytes

Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes. Shellcode exploit for linx86-64 platform / Title: Linux/x86-64 - setuid0 & chmod "/etc/passwd", 0777 & exit0 - 63 bytes Date: 2010-06-17 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org |...

Infinity 0-day Denial of Service

Exploit for windows platform in category dos / poc ================================ Infinity 0-day Denial of Service ================================ The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /,...

solaris/x86 - Sync() & reboot() & exit(0) - 48 bytes

Exploit for solaris/x86 platform in category shellcode ==================================================== Solaris/x86 - Sync & reboot & exit0 - 48 bytes ==================================================== / Title: Solaris/x86 - Sync & reboot & exit0 - 48 bytes Author: Jonathan Salwan Web:...

Linux/x86 - exit(0) Shellcode (8 bytes)

Linux/x86 - exit0 Shellcode 8 bytes. Shellcode exploit for Linuxx86 platform / Name : 8 bytes sysexit0 x86 linux shellcode Date : may, 31 2010 Author : gunslinger Web : devilzc0de.com blog : gunslinger.devilzc0de.com tested on : linux debian / char bye= "\x31\xc0" / xor %eax,%eax / "\xb0\x01" / m...

solaris/x86 - Reboot() - 37 bytes

Exploit for solaris/x86 platform in category shellcode ================================= solaris/x86 - Reboot - 37 bytes ================================= / Title: Solaris/x86 - Reboot - 37 bytes Author: Jonathan Salwan Web: http://www.shell-storm.org Twitter: http://twitter.com/shellstorm Date:...

openSUSE Security Update : libpng-devel (openSUSE-SU-2010:0257-1)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 has been assigned. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

TFTPGUI v1.4.5 Long Transport Mode Overflow DoS (Meta)

Exploit for windows platform in category dos / poc ====================================================== TFTPGUI v1.4.5 Long Transport Mode Overflow DoS Meta ====================================================== Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID:...

CVE-2009-4837

CVE-2009-4837 involves multiple cross-site scripting (XSS) vulnerabilities in the Basic Analysis and Security Engine (BASE) prior to version 1.4.3.1. The affected components allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) sig[1] in base/base_qry_mai...

fckeditor 2.63 0day vulnerabilities-vulnerability warning-the black bar safety net

First of all, the way. This can be said that the fckeditor 2.63 oday. Currently know more people. http://xxxx.com/fckeditor/editor/filemanager/connectors/test.html http://hbkingco.com//fckeditor/editor/filemanager/connectors/uploadtest.html this two page, is a dead key. Upload xx. asa;. jpg After...

Invision Power Board 0-day Denial of Service

No description provided by source. ============================================== Invision power board 0-day denial of service 2 ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Invision Power Board - Denial of Service

Invision Power Board - Denial of Service ============================================== Invision power board 0-day denial of service 2 ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Invision Power Board - Denial of Service

============================================== Invision power board 0-day denial of service 2 ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...