KeePass Password Safe Classic 1.29 - Crash (PoC)

Exploit for windows platform in category dos / poc Title : KeePass Password Safe Classic 1.29 - Crash Proof Of Concept Affected Versions: All Version Founder : keepass.info Tested on Windows 7 / Server 2008 Download Link :...

3 6 0 Marvel Team virtualization vulnerabilities the fourth bomb: CVE-2 0 1 5-8 5 6 7 vulnerability analysis-vulnerability warning-the black bar safety net

2 0 1 5 years is“the cloud leap”year, is also a virtualization vulnerability really is people cognition, attention of a year, unwilling to“like the wind”3 6 0 Marvel Team take the initiative, with practical actions for cloud computing escort. As of today, we accumulated in kvm, xen, vmware platfo...

JAVA serialization and deserialization and vulnerability remediation-vulnerability warning-the black bar safety net

Last week, the network security personnel once again in the Black production before being tumbled, Joomla exposure to high-risk 0Day vulnerabilities, without requiring a user login will be able to trigger. Joomla vulnerability in the official release of the upgrade version and before the patch, i...

Rips Scanner 0.5 - (code.php) Local File Inclusion

Exploit for php platform in category web applications ================================================================================ Rips Scanner 0.5 - code.php Local File Inclusion ================================================================================ Vendor Homepage:...

Ovidentia maillist Module 4.0 - Remote File Inclusion Exploit

Exploit for php platform in category web applications Not for kiddies! Download: http://www.ovidentia.org/index.php?tg=fileman&sAction=getFile&id=17&gr=Y&path=Downloads%2FAdd-ons%2FModules%2Fmaillist&file=maillist-4-0.zip&idf=794 PoC: maillist-4-0/programs/mlincl.php line 4...

Grub2 is exposed login authentication bypass 0Day, the impact of the numerous Linux versions-vulnerability warning-the black bar safety net

Description Recently, researchers found a Grub2 vulnerability, the version 1. 9 8 and 2 0 0 9 released in to 2. 0 2 to 2 0 1 5 year of release, are affected. A local user can through this vulnerability to bypass any forms of authentication plaintext password or a hash of the password, so the...

Adobe Flash TextField.htmlText Setter - Use-After-Free

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=578 There is a use-after-free in the TextField.htmlText setter. If the htmlText the field is set to is an object with toString defined, the toString function can free the...

Adobe Flash TextField.gridFitType Setter - Use-After-Free

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=559 There is a use-after-free in the TextField gridFitType setter. If it is set to an object with a toString method that frees the TextField, the property will be written...

Joomla object injection vulnerability analysis report-vulnerability warning-the black bar safety net

Recently, Joomla and then exposed to high-risk 0day vulnerability for remote command execution, Ali cloud cloud shield yesterday has been on the line corresponding to the blocking rules against the vulnerability. At the same time,the cloud hosting customer has made a phone call and automatically...

Easy File Sharing Web Server 7.2 - GET HTTP request SEH Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: Easy File Sharing Web Server 7.2 - GET HTTP request SEH Buffer Overflow Exploit Author: ArminCyber Version: 7.2 Tested on: XP SP3 EN category: Remote Exploit Usage: ./exploit.py ip port import socket import sys host =...

Joomla then exposed to high-risk 0day vulnerability for remote command execution-vulnerability warning-the black bar safety net

Joomla security team emergency release of the 3. 4. 6 version fixes a high-risk 0day vulnerability. It is reported that the vulnerability from being found to the security patches released, it has been more than two days, at present also has been through other channels in the spread. You can...

Wireshark - file_read (wtap_read_bytes_or_eof/mp2t_find_next_pcr) Stack Based Buffer Overflow

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=655 The following crash due to a stack-based buffer overflow can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$...

WordPress ilightbox Plugin File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin ilightbox File Upload Vulnerability Date : 2015-12-09 Vendor Homepage : http://www.ilightbox.net/ Version : 2.2.0 Google dork: inurl:/wp-content/plugins/ilightbox =========================================== POC...

CVE-2015-6175

The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka “Windows Kernel Memory Elevation of Privilege Vulnerability.” Recent assessments: gwillcox-r7 at November 23, 2020 6:19pm UTC reported: Reported as exploited in the wild as part of Google’...

LuManager high-risk SQL injection 0day analysis-vulnerability warning-the black bar safety net

2 0 1 5 year 9 month 7 day Ali cloud shield situational awareness system captures the LuManager system of 0day a gold that confirmed that the vulnerabilities once a hacker can use directly to the highest authority of the login background, upload webshell, the control system database, the operatio...

PHP Utility Belt - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP utility belt Remote Code Execution vulnerability Author : WICS Date : 8/12/2015 Software Link : https://github.com/mboynes/php-utility-belt Overview: PHP utility belt is a set of tools for PHP developers. Install in a...

Zortam Mp3 Media Studio 19.85 - Memory Corruption Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python print """ + Exploit Title: Zortam Mp3 Media Studio 19.85 - Memory Corruption + Exploit Author: ZwX + Date: 05.12.2015 + Vendor : http://www.zortam.com/ + Download Product: http://www.majorgeeks.com/mg/get/zortammp3center,1.html +...

Vulnerability acquisition platform Zerodium publication of various types of software and digital intrusion method price list-vulnerability warning-the black bar safety net

! 1 1 May 1 8, Zerodium（0day brokers published a variety of from a network of criminals to buy and then resell to the needs of the target software and intrusion methods of the price list. Vulnerabilities platform released a price list Zerodium CEO Chaouki bekrar has said: “0day trading the first...

SuperScan 4.1 - Windows Enumeration Hostname/IP/URL Field SEH Overflow Exploit

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : SuperScan 4.1 Windows Enumeration Hostname/IP/URL Field SEH Overflow Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 18/11/2015 Vendor Homepage :...

Chrome 0day so that millions of Android devices suffer from a remote threat-vulnerability warning-the black bar safety net

! From China qihoo 3 6 0 security researcher Guang Gong in the latest version of the Android platform, Chrome browser found a serious 0day vulnerability, which allows attacker to obtain the victim's cell phone the full administrator access, and the vulnerability of the use of the code to be able ...