Joomla! Component SmartSite 1.0.0 - Local File Inclusion

=============================================================================================================== o Joomla Component SmartSite Local File Inclusion Vulnerability Software : comsmartsite Vendor : http://www.smartsite.su/ Author : AntiSecurity s4va NoGe Vrs-hCk OoNBoY Paman zxvf Conta...

Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion

======================================================================================================================= o Joomla Component Ultimate Portfolio Local File Inclusion Vulnerability Software : comultimateportfolio version 1.0 Vendor : http://webkul.com/ Author : AntiSecurity NoGe Vrs-h...

linux/x86 setreuid(0, 0) & execve("/bin/sh") shellcode 27 bytes

Exploit for linux/x86 platform in category shellcode =============================================================== linux/x86 setreuid0, 0 & execve"/bin/sh" shellcode 27 bytes =============================================================== include include / by Magnefikko 22.04.2010 email protect...

CVE-2010-2676

creationtimestamp| type| source ---|---|--- 2010-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11903...

Scripts Feed Dating Software SQL Injection

============================================================================== Scripts Feed Dating Software Cookie Manip/SQLi Multiple Remote Vulnerabilities ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27...

CVE-2010-0552

creationtimestamp| type| source ---|---|--- 2010-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33965...

CVE-2010-0462

creationtimestamp| type| source ---|---|--- 2010-01-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33572...

linux/x86 chmod 666 /etc/shadow 27 bytes

linux/x86 chmod 666 /etc/shadow 27 bytes. Shellcode exploit for linx86 platform ; linux/x86 chmod 666 /etc/shadow 27 bytes ; root@thegibson ; 2010-01-15 section .text global start start: ; chmod"//etc/shadow", 0666; mov al, 15 cdq push edx push dword 0x776f6461 push dword 0x68732f63 push dword...

linux/x86 chmod 666 /etc/shadow 27 bytes

Exploit for linux/x86 platform in category shellcode ======================================== linux/x86 chmod 666 /etc/shadow 27 bytes ======================================== ; linux/x86 chmod 666 /etc/shadow 27 bytes ; email protected ; 2010-01-15 section .text global start start: ;...

CVE-2009-4234

creationtimestamp| type| source ---|---|--- 2009-11-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10247...

CA BrightStor HSM Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightStor HSM...

Windows XP/2003/Vista Metafile Escape() SetAbortProc Code Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Multiple Panda Security Products Local Privilege Escalation Vulnerability

No description provided by source. Application: Panda Global Protection 2010 Panda Internet Security 2010 Platforms: Windows XP Professional SP & windows Vista SP1 Exploitation: Local Privilege Escalation Date: 2009-10-27 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical...

{PRL} Multiple Panda Security Products Local Privilege Escalation Vulnerability

Application: Panda Global Protection 2010 Panda Internet Security 2010 Platforms: Windows XP Professional SP & windows Vista SP1 Exploitation: Local Privilege Escalation Date: 2009-10-27 Author: Francis Provencher Protek Research Lab's 1...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...

VMware Virtual 8086 - Linux Local Ring0

Bugtraq ID: 36841 Class: Design Error Published: Oct 27 2009 12:00AM Updated: Oct 27 2009 09:18PM Credit: Tavis Ormandy and Julien Tinnes of the Google Security Team Vulnerable: VMWare Workstation 6.5.3 VMWare Workstation 6.5.2 build 156735 VMWare Workstation 6.5.2 VMWare Workstation 6.5.1 VMWare...

openSUSE 10 Security Update : Xerces-c (Xerces-c-6430)

The Xerces-c package was vulnerable to various bugs while parsing XML. CVE-2009-1885 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update Xerces-c-6430. The text description of this plugin is C SUS...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-6347)

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It fixes various bugs and security issues : - MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304 CVE-2009-1305 Crashes with evidence of memory corruption rv:1.9.0.9 - MFSA 2009-17/CVE-2009-1307 bmo481342 Same-origin violations...

Unfixed XSS vulnerability at www.lda-sisak.hr

Security researcher Dark.Man, has submitted on 27/08/2009 a cross-site-scripting XSS vulnerability affecting www.lda-sisak.hr, which at the time of submission ranked 10550599 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...