linux/x86 Reboot shellcode - 28 Bytes

Linux/x86 Reboot - 28Bytes Greetz : BombermanLeader Author : B3mB4m Tested ON : Ubuntu 14.04 08048060 : 8048060: 31 c0 xor %eax,%eax 8048062: 50 push %eax 8048063: 68 62 6f 6f 74 push $0x746f6f62 8048068: 68 6e 2f 72 65 push $0x65722f6e 804806d: 68 2f 73 62 69 push $0x6962732f 8048072: 89 e3 mov...

uswx.com XSS vulnerability

Open Bug Bounty ID: OBB-64924 Description| Value ---|--- Affected Website:| uswx.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Threat Outbreak Alert RuleID15557: Email Messages Distributing Malicious Software on May 28, 2015

Medium Alert ID: 39045 First Published: 2015 May 28 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15557 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID15514: Email Messages Distributing Malicious Software on May 28, 2015

Medium Alert ID: 39044 First Published: 2015 May 28 12:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15514 may contain the following files: Name | Size...

air2water.net XSS vulnerability

Vulnerable URL: http://air2water.net/search.html?term=%3E%3C%2Ftitle%3E%3Cscript%3Ealert%28KCF%29%3C%2Fscript%3E%27%22%3E%3Cmarquee%3E%3Ch1%3Etest%3C%2Fh1%3E%3C%2Fmarquee%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=0=0to= Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Late...

ozsuper.com.au Open Redirect vulnerability

Open Bug Bounty ID: OBB-64815 Description| Value ---|--- Affected Website:| ozsuper.com.au Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerab...

aydinpost.com XSS vulnerability

Open Bug Bounty ID: OBB-60122 Description| Value ---|--- Affected Website:| aydinpost.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

Threat Outbreak Alert RuleID14946: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38556 First Published: 2015 April 28 14:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14946 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID14609: Email Messages Distributing Malicious Software on April 28, 2015

Medium Alert ID: 38347 First Published: 2015 April 13 12:26 GMT Last Updated: 2015 April 29 12:38 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14609 and...

WebDepo CMS SQL Injection

Advisory: SQLi-vulnerabilities in aplication CMS WebDepo Affected aplication web: Aplication CMS WebDepo Release date: 28/03/2014 Vendor URL: http://www.webdepot.co.il Vendor Status: 0day ========================== Vulnerability Description: ========================== Records and client practice...

Security update for MozillaFirefox (important)

MozillaFirefox was updated to Firefox 36.0.4 to fix two critical security issues found during Pwn2Own: MFSA 2015-28/CVE-2015-0818 bmo1144988 Privilege escalation through SVG navigation MFSA 2015-29/CVE-2015-0817 bmo1145255 Code execution through incorrect JavaScript bounds checking elimination Al...

Adobe Reader JavaScript printSeps Function Heap Corruption (APSB10-28) - Ver2 (CVE-2010-4091)

Portable Document Format PDF is an open file format created by Adobe Systems. It is used for representing two-dimensional documents in a device and resolution independent fixed-layout document format. A heap corruption vulnerability exits in the way Adobe Acrobat and Reader handle specially craft...

HP Data Protector 8.10 Remote Command Execution

This module exploits a remote command execution on HP Data Protector 8.10. Arbitrary commands can be executed by sending crafted requests with opcode 28 to the OmniInet service listening on the TCP/5555 port. Since there is a strict length limitation on the command, rundll32.exe is executed, and...

Threat Outbreak Alert RuleID13737: Email Messages Distributing Malicious Software on February 28, 2015

Medium Alert ID: 37616 First Published: 2015 February 27 15:06 GMT Last Updated: 2015 March 2 16:54 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13737 an...

mini_httpd -- buffer overflow via snprintf

ACME Updates reports: minihttpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. rene ACME, the author, claims that the...

Threat Outbreak Alert RuleID13325: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37223 First Published: 2015 January 29 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13325 may contain the following files: Name |...

Threat Outbreak Alert RuleID13309: Email Messages Distributing Malicious Software on January 28, 2015

Medium Alert ID: 37208 First Published: 2015 January 28 19:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13309 may contain the following files: Name |...

Adobe Acrobat and Reader Memory Corruption (APSB14-28: CVE-2014-8458)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Adobe Reader Javascript API Information Disclosure (APSB14-28: CVE-2014-8451)

An Information Disclosure vulnerability has been reported in Adobe Reader. The vulnerability is due to an improper implementation of a Javascript API. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

Adobe Reader Memory Corruption (APSB14-28: CVE-2014-8460) - ver 2

Adobe Reader is vulnerable to a buffer overflow while parsing the font data. The access violation occurs because the number of subroutines for the embedded font is larger than the size of the subroutine array which leads to a crash...