3623 matches found
CVE-2015-0313
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different...
X360 VideoPlayer ActiveX Control 2.6 - Full ASLR & DEP Bypass Exploit
Exploit for windows platform in category remote exploits !-- Exploit Title: X360 VideoPlayer ActiveX Control RCE Full ASLR & DEP Bypass Author: Rh0 Date: Jan 30 2015 Affected Software: X360 VideoPlayer ActiveX Control 2.6 VideoPlayer.ocx Vulnerability: Buffer Overflow in Data Section Tested on:...
Vulnerability alert: Flash Exposure of serious security vulnerabilities, affecting all versions of Windows System, IE and FireFox browsers-bug warning-the black bar safety net
Last week for Adobe, it should be a busy week, although the vulnerability for Adobe to say already is commonplace, but you can remotely execute malicious code, access the system control of high-risk vulnerability does not see more. Critical: remote code execution vulnerability On Tuesday, Adobe...
Another wave of Flash 0day attacks are close-vulnerability warning-the black bar safety net
Cisco security researchers report that a Flash 0day vulnerability being penetration code kit Angler exploit to spread malicious programs. Adobe said it is investigating. Angler is using three vulnerabilities in Flash, two of which are the old drain hole, has been an Adobe patch, but the other one...
Viber 5 Exploit on android 4.x (reset the phone to factory settings) 0day
You are sending a specially crafted message that leads to reboot the phone and reset functions of the phone to factory settings. After rebooting, the phone does not have personal data. This vulnerability will only work on Android OS. If you want to buy good 0day exploit on one hands...
This back to the turn of Apple: Google today announced a number of Apple 0day vulnerabilities-vulnerability warning-the black bar safety net
Google Project Zero vulnerability research team today published a Apple number of 0day vulnerabilities and technical details of the vulnerability by enhancing the system permissions and then control the entire victims Mac computer. It is worth mentioning that just two weeks ago, Google just...
CVE-2015-0311
Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015. Recent assessments:...
Wordpress Theme Terra Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Theme Terra Arbitrary File Download Vulnerability Date: 18/01/2015 Exploit Author: t3rr0rist - GHC Georgian Hacking Community team Contact : email protected Tested on: Linux Google Dork: inurl:"wp-content/themes/terra/...
Microsoft fixes 8 security vulnerabilities, including Google's disclosure of 0day vulnerabilities-vulnerability warning-the black bar safety net
Microsoft has released the latest security patches, repair the content includes Google 9 0 days of the submitted 0day vulnerability, Microsoft this program 2 months to fix, but forced by Google reluctant to breach its 9 0-day cloth vulnerability details the policy had to advance the release patch...
CAD, CorelDRAW, Photo-Paint, etc. the software is exposed 0day vulnerabilities-vulnerability warning-the black bar safety net
LinkedIn（Core Security Security researcher disclosed Corel CAD, CorelDRAW, Photo-Paint, including the number of software contain DLL hijacking vulnerabilities, the vulnerability could allow remote code execution, there is no for this vulnerability is a valid patch. Vendor no response, a...
RedStar 2.0 Desktop - Privilege Escalation (World-writeable rc.sysinit) Vulnerability
Exploit for linux platform in category local exploits Red Star 2.0 desktop ships with a world-writeable "/etc/rc.d/rc.sysinit" which can be abused to execute commands on boot. An example exploitation of this vulnerability is shown here...
CVE-2015-0016
Directory traversal vulnerability in the TS WebProxy aka TSWbPrxy component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted...
CTF: ASUS RT-AC66U router vulnerabilities problem-solving analysis-vulnerability warning-the black bar safety net
I'm on EFF's open wireless router campaign is very interested in, however they not at all on their device display. The rules of the game in the RT-AC66U are listed as may be used to attack the device. I have a personal RT-AC66U, so I decided for all the CTF participants to write a small tutorial...
GoldCoders Admin account change any information Vulnerability
In the most popular HYIP investment program script from the goldsoders completely absent protection CSRF vulnerability. Usage Info Successful exploitation of this vulnerability requires to make a copy of the source code in any page settings from the admin panel and replace the fields, on the date...
Migrating Elastix 2.5 Remote Code Execute 0day Exploit
Migrating Elastix 2.5 suffers from an authenticated arbitrary command execution vulnerability. The issue is caused due to the improper verification of uploaded files. This can be exploited to execute arbitrary code by creating or uploading a malicious script file. Vulnerability tested on CentOS 7...
Zurmo CRM 2.8.5 Multiple Reflected Cross Site Scripting Vulnerabilities
Zurmo CRM version 2.8.5 suffers from multiple reflective cross site scripting vulnerabilities. Zurmo CRM 2.8.5 Multiple Reflected Cross-Site Scripting Vulnerabilities Vendor: Zurmo Inc. Product web page: http://www.zurmo.org Affected version: 2.8.5 Summary: Zurmo is an Open Source Customer...
[The ManageOwnage Series, part X]: 0-day administrator account creation in Desktop Central
Hi, This is part 10 of the ManageOwnage series. For previous parts, see 1. This time we have a vulnerability that allows an unauthenticated user to create an administrator account, which can then be used to execute code on all devices managed by Desktop Central desktops, servers, mobile devices,...
Free open source photo album Piwigo<= v2. 7. 1 SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Some time ago a free open source photo album Piwigopwigo apiwigo = 2.6.0 sql injection vulnerabilitythe. Vulnerability published, piwigo has been updated to 2. 7. To 1. However, this vulnerability published time is indeed a genuine 0day, the impact of piwigo full version. The following was on the...
jetAudio 8.1.3 Basic (mp3) - Crash POC
Exploit for windows platform in category dos / poc Exploit Title : jetAudio 8.1.3 Basic Corrupted mp3 Crash POC Product : jetAudio Basic Date : 8.12.2014 Exploit Author : ITDefensor Vulnerability Research Team http://itdefensor.ru/ Software Link : http://www.jetaudio.com/download/ Vulnerable...