CVE2014-0 3 2 2 0Day Exploit analysis-exploit warning-the black bar safety net

Recently there was an IE 0day CVE-2 0 1 4-0 3 2 2is used to hang horse。 Although the vulnerability itself exists in IE,but in order to achieve success use,this sample also borrow a flash as an auxiliary,to break through the various protection. IE+flash combination also gives the analysis poses so...

Adobe Flash CVE-2 0 1 4-0 4 9 7 vulnerability analysis-vulnerability warning-the black bar safety net

?? During the Spring Festival Adobe Flash Player is burst 0Day vulnerabilitiesnumbers: CVE-2 0 1 4-0 4 9 7, the vulnerability hazards Flash 12.0.0.38, as well as the previous version. The official Adobe has launched a repair patch. The vulnerability is due to the SWF in the embed AS3 code parsing...

Savsoft Quiz Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Savsoft Quiz Cross-Site Request Forgery Add Admin Vulnerability + Date: 24-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352 + Vendor: http://savsoftquiz.com/web/buy-now/ +...

Subrion v3.1.1 Cross-Site Request Forgery (CSRF) Vulnerability

Subrion CMS 3.1.1 cross site request forgery exploit that adds an administrator. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor:...

Linksys系列未明远程代码执行漏洞

No description provided by source. !/usr/bin/php ?php / Exploit for 0day linksys unauthenticated remote code execution vulnerability. As exploited by TheMoon worm; Discovered in the wild on Feb 13, 2013 by Johannes Ullrich. I was hoping this would stay under-wraps until a firmware patch could be...

Freepbx 2.x Code Execution Exploit

Exploit for php platform in category web applications App : Freepbx 2.x download : schmoozecom.com Author : i-Hmx mail : email protected Home : sec4ever.com , secarrays ltd Freepbx is famous asterisk based distro used world wide , it suffer from many vulns actually simple one is included here jus...

MODx (Evogallery) File Upload Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: MODx Evogallery File Upload Vulnerability + Date: 18-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://modx.com/extras/package/evogallery + Friendly Sites:...

Java 7 Update 11 vulnerability to download and execute

Java 7 Update 11 vulnerability to download and execute. With this applet you can boot from a remote host and execute the file, bypassing pisochnitsy java, also affected and older. Usage Info All material is provided with source code, and you will be able to easily assemble ready exploit replacing...

phpMyBackupPro-2.4 Cross-Site Scripting vulnerability

phpMyBackupPro-2.4 Xss vulnerability phpmybackuppro Cross-Site Scripting vulnerability @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@...

VLC 2.1.2 (.asf) - Crash PoC

Exploit for multiple platform in category dos / poc !/usr/bin/python VLC Media Player up to 2.1.2 DOS POC Integer Division By zero in ASF Demuxer VLC Media Player is prone to DOS utilizing a division by zero error if minimium data packet size is equal to zero. this was tested on windows XP sp3 an...

Emergency Adobe Flash Player Security Update Patches 0Day

Adobe today released an out-of-band security update for Flash Player that patches a vulnerability the company said is currently being exploited. Adobe Flash Player version 12.0.0.43 and earlier for Windows and Mac are affected as is 11.2.202.335 and earlier on Linux. The vulnerability,...

MyBB 1.6.12 POST Cross Site Scripting

alert/XSS/ " / document.exploit.submit;...

Newtontree IT Services - Authentication Bypass Vulnerability

Newtontree IT Services suffers from a remote SQL injection vulnerability that allows for authentication bypass. Newtontree IT Services - Authentication Bypass Vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact :...

NCH Software Inventoria 3.45 Cross Site Scripting Vulnerability

NCH Software Inventoria version 3.45 suffers from a cross site scripting vulnerability. NCH Software Inventoria 3.45 id param Reflected Cross-Site Scripting Vulnerability Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 3.45 Summary: Inventoria is a business...

PCMAN FTP 2.07 ABOR Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: email protected import socket as s from sys import argv iflenargv != ...

Mozilla Thunderbird - WireTap Remote 0Day Vulnerability

Document Title: =============== Mozilla Thunderbird - WireTap Remote 0Day Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1182 View: http://www.youtube.com/watch?v=mqZ4eY2th0s Advisory: http://www.vulnerability-lab.com/getcontent.php?id=967 Release Date:...

Mozilla Thunderbird - WireTap Remote 0Day Vulnerability

Document Title: =============== Mozilla Thunderbird - WireTap Remote 0Day Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1182 View: http://www.youtube.com/watch?v=mqZ4eY2th0s Advisory: http://www.vulnerability-lab.com/getcontent.php?id=967 Release Date:...

Joomla iRecommend - XSS & FPD Vulnerabilities

Latest Joomla iRecommend extension suffers on Full Path Disclosure and Cross Site Scripting vulnerabilities because of poor content & variables filtration. Title: Joomla iRecommend - XSS & FPD Version: = 3.0 Latest ATM Demo: joomla-demo.fok.com.br About:...

godontologico 5 - SQL Injection

godontologico 5 - SQL Injection + Exploit: 0day godontologico v5 - SQL Inject + Author: vinicius777 + Contact: vinicius777 AT gmail - @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/godontologico/ + Google D0rks: "Smile Odonto - Enhancing your smile - www.smileodonto.com.br" +...

MuPDF 1.3 - xps_parse_color() Stack Buffer Overflow

MuPDF 1.3 - xpsparsecolor Stack Buffer Overflow ============================================================= 0day - MuPDF Stack-based Buffer Overflow in xpsparsecolor ============================================================= Date of discovery: 2013-01-26 Software Links: http://www.mupdf.com/...