Adobe Flash Player 22.0.0.192 - DefineSprite Memory Corruption

Exploit for multiple platform in category dos / poc Application: Adobe Flash Player Platforms: Windows,OSX Versions: 22.0.0.192 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE-2016-4175 COSIG-2016-22 1 Introductio...

Adobe Acrobat Reader DC 15.016.20045 - Invalid Font '.ttf' Memory Corruption (6)

Exploit for multiple platform in category dos / poc Application: Adobe Acrobat Reader DC Platforms: Windows,OSX Versions: 15.016.20045 and earlier Author: Sébastien Morin of COSIG Website: https://cosig.gouv.qc.ca/en/advisory/ Twitter: @COSIG Date: July 12, 2016 CVE: CVE-2016-4206 COSIG-2016-25 1...

Belkin Router AC1200 Firmware 1.00.27 - Authentication Bypass

Exploit for hardware platform in category web applications ''' Exploit Title: Belkin Router AC1200, Firmware: 1.00.27 - Authentication Bypass Date: 5/11/2016 Exploit Author: Gregory Smiley Contact: email protected Vendor Homepage: http://www.belkin.com Version: Firmware: 1.00.27 Tested on:F9K1113...

Ruby on Rails ActionPack Inline ERB - Code Execution (Metasploit)

Exploit for ruby platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Ruby on Rails ActionPack Inline ERB Code Execution', 'Description' = %q...

0day vulnerabilities: hackers from the BMW portal tampering with car information-bug warning-the black bar safety net

http://www.zdnet.com/Article/hackers-can-tamper-with-car-registration-through-bmw-connected-car-portal/ ! ConnectedDrive portal and BMW of the domain is very vulnerable,the hacker can not patch the vulnerability to attack. Researchers have recently disclosed the impact of the BMW the BMW website...

Advanced Webhost Billing System (AWBS) 2.9.6 - Multiple Vulnerabilities

Exploit for php platform in category web applications AWBS v2.9.6 Multiple Remote Vulnerabilities Vendor: Total Online Solutions, Inc. Product web page: http://www.awbs.com Affected version: 2.9.6 Platform: PHP Summary: Whether starting new or looking to expand your existing web hosting and/or...

Symantec AntiVirus - Missing Bounds Checks in dec2zip ALPkOldFormatDecompressor::UnShrink

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=821 A major component of the Symantec Antivirus scan engine is the "Decomposer", responsible for unpacking various archive formats such as ZIP, RAR, and so on. The decomposer runs...

Symantec AntiVirus - Integer Overflow in TNEF Decoder

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=819 Simple fuzzing found an integer overflow in the dec2tnef library. This allocation from Attachment::setDataFromAttachment doesn't verify that the attacker controlled value...

Mediacoder 0.8.43.5830 - '.m3u' Buffer Overflow SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Mediacoder 0.8.43.5830 - Buffer Overflow SEH Exploit .m3u Date: 25-June-2016 Exploit Author: Sibusiso Sishi Email: sibusiso at IronSky dot co.za Vendor Homepage: http://www.mediacoderhq.com/ Software Link:...

XuezhuLi FileSharing - Cross-Site Request Forgery (Add User)

Exploit for php platform in category web applications document.forms.csrfpoc.submit; cat /srv/userlists.txt aaaa csrftest -- 0day.today 2018-01-10...

Alibaba Clone B2B Script - Arbitrary File Disclosure

Exploit for php platform in category web applications Exploit Title: Alibaba Clone B2B Script File Read Vulnerability Date: 2016-06-22 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://alibaba-clone.com/ Version: All Versions Tested on: CentOS and Windows...

XuezhuLi FileSharing - Directory Traversal

Exploit for php platform in category web applications Exploit Title: XuezhuLi FileSharing - Path Traversal Vulnerability Date: 2016-06-23 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: https://github.com/XuezhuLi Software Link:...

Getsimple CMS 3.3.10 - Arbitrary File Upload

Exploit for php platform in category web applications Exploit Title: Getsimple CMS 2. An attacker login to the admin page and uploading the backdoor 3. The uploaded file will be under the "/data/uploads/" folder Report Timeline =====...

Airia - Cross-Site Request Forgery (Add Content)

Exploit for php platform in category web applications document.forms.csrfpoc.submit; 0day.today 2018-02-19...

PKAV found Struts2 latest remote command execution vulnerability S2-0 3 7-the vulnerability warning-the black bar safety net

0x00 Preface Just after children's Day back found that struts2 shows the S033, so put down the hands of the Lollipop quickly analyze. ! 0x01 S2-0 3 3 vulnerability review First recall S033 According to the official description ! Obviously there are two key points: the first is the REST Plugin,the...

Microsoft Word (Win/Mac) - Crash (PoC)

Exploit for multiple platform in category dos / poc Source: https://twitter.com/halsten/status/740380171694280704 Win/Mac MSFT Word 0day POC having 3 different forced triggers. Happy exploitation! Let Word recover it, its essential, and then you can trigger the bug afterwards in 3 ways, Save,...

Microsoft Word (WindowsOSX) - Crash (PoC)

Microsoft Word WindowsOSX - Crash PoC Source: https://twitter.com/halsten/status/740380171694280704 Win/Mac MSFT Word 0day POC having 3 different forced triggers. Happy exploitation! Let Word recover it, its essential, and then you can trigger the bug afterwards in 3 ways, Save, Close/Save, chang...

Microsoft Word (Windows/OSX) - Crash (PoC)

Source: https://twitter.com/halsten/status/740380171694280704 Win/Mac MSFT Word 0day POC having 3 different forced triggers. Happy exploitation! Let Word recover it, its essential, and then you can trigger the bug afterwards in 3 ways, Save, Close/Save, change format. Proof of Concept:...

ImageMagick（CVE-2 0 1 6-3 7 1 4 implementation process, vulnerability analysis, and solution-vulnerability warning-the black bar safety net

! What is ImageMagick ImageMagick is a free to create, edit, composite picture software. It can read, convert, write a variety of formats pictures. Picture cut, color replacement, various effects application, image rotation, composition, text, line, polygon, ellipse, curve, attached to a picture ...

Microsoft Windows Media Center - '.MCL' File Processing Remote Code Execution (MS16-059)

Exploit for windows platform in category remote exploits Exploit Title: Microsoft Windows Media Center .MCL File Processing Remote Code Execution Vulnerability MS16-059 Date: May 11th, 2016 Exploit Author: Eduardo Braun Prado Vendor Homepage : http://www.microsoft.com Version: All prior to May...