Linux/ARM - execve("/bin/sh","/bin/sh",0) - 30 bytes

No description provided by source. / Title: Linux/ARM - execve/bin/sh,/bin/sh,0 - 30 bytes Date: 2010-06-28 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/ 8054:...

ASX to MP3 Converter 3.1.2.1 - Local Buffer Overflow (SEH)

No description provided by source. Exploit Title: ASX to MP3 Converter Version 3.1.2.1 2010-03-30 Local Buffer Overflow SEH Date: nhar essabt 3-7-10 Author: MadjiX Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: 3.1.2.1 ?2010-03-30 Tested on: xp sp3 my $shellcod...

NOKIA Siemens FlexiISN 3.1 - Multiple Auth Bypass Vulnerabilities

No description provided by source. NOKIA Siemens FlexiISN GGSN Multiple Authentication bypass Vulnerability: NOKIA Siemens FlexiISN Remote: Yes Local: No Class: Input Validation Error Critical: Moderately critical OS : FlexiISN GGSN FISN 3.1 URL 1 for bypassing authentication on AAA Configuration...

[Raspberry Pi] Linux/ARM - execve("/bin/sh", [0], [0 vars]) - 30 bytes

No description provided by source. / Title: Linux/ARM - execve/bin/sh, 0, 0 vars - 30 bytes Date: 2012-09-08 Tested on: ARM1176JZF-S v6l Author: midnitesnake 00008054 start: 8054: e28f6001 add r6, pc, 1 8058: e12fff16 bx r6 805c: 4678 mov r0, pc 805e: 300a adds r0, 10 8060: 9001 str r0, sp, 4 806...

GLSA-201406-30 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-30 sudo: Privilege escalation When the Sudo envreset option is disabled it is enabled by default, certain environment variables are not blacklisted as expected. Impact : A local attacker, authorized to run commands using...

openSUSE Security Update : Mozilla Firefox and others (openSUSE-SU-2013:0630-1)

The Mozilla suite received security and bugfix updates : Mozilla Firefox was updated to version 20.0. Mozilla Thunderbird was updated to version 17.0.5. Mozilla SeaMonkey was updated to version 17.0.5. Mozilla XULRunner was updated to version 17.0.5. mozilla-nss was updated to version 3.14.3...

openSUSE Security Update : strongswan (openSUSE-SU-2013:0873-1)

Applied upstream patch for security vulnerability discovered by Kevin Wojtysiak in ECDSA signature verification of the strongswan openssl plugin bnc815236, CVE-2013-2944 0003-Check-return-value-of-ECDSAVerify-correctly.patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mozilla Patches Seven Flaws in Firefox 30

Mozilla has fixed seven security vulnerabilities in Firefox 30, including five critical flaws that could enable remote code execution. Firefox 30 is a relatively minor release of the popular browser, with the most notable change being the addition of a sidebar button that allows users to quickly...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 30, 2014

Medium Alert ID: 34429 First Published: 2014 May 30 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Email Messages with Malicious Attachments on May 30, 2014

Medium Alert ID: 34405 First Published: 2014 May 29 13:19 GMT Last Updated: 2014 May 31 03:50 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The email message attempts to convince the...

SQL Injection in AdRotate

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

WordPress WP-Affiliate Platform Cross Site Scripting

Wordpress XSS/HTML Injection in Plugin wp-affiliate-platform + Date: 30/04/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://wpaffiliatemanager.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php +...

MozillaThunderbird,seamonkey (important)

Mozilla Thunderbird was updated to 24.4.0. Mozilla SeaMonkey was updated to 2.25. MFSA 2014-15/CVE-2014-1493/CVE-2014-1494 Miscellaneous memory safety hazards MFSA 2014-17/CVE-2014-1497 bmo966311 Out of bounds read during WAV file decoding MFSA 2014-18/CVE-2014-1498 bmo935618...

AuraCMS 2.3 - Multiple Vulnerabilities

AuraCMS 2.3 - Multiple Vulnerabilities Advisory ID: HTB23196 Product: AuraCMS Vendor: AuraCMS Vulnerable Versions: 2.3 and probably prior Tested Version: 2.3 Advisory Publication: January 8, 2014 without technical details Vendor Notification: January 8, 2014 Vendor Patch: January 30, 2014 Public...

CVE-2013-3934

creationtimestamp| type| source ---|---|--- 2013-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29922...

Avira Secure Backup 1.0.0.1 Build 3616 Buffer Overflow

RCE Security Advisory http://www.rcesecurity.com 1. ADVISORY INFORMATION ----------------------- Product: Avira Secure Backup Vendor URL: www.avira.com Type: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 Date found: 2013-10-30 Date published: 2013-11-16 CVSSv2...

CVE-2013-3617

creationtimestamp| type| source ---|---|--- 2013-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38818 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/openbravoxxe.rb 2025-02-06 03:13:41+00:00| seen|...

Openbravo ERP XXE Arbitrary File Read

The Openbravo ERP XML API expands external entities which can be defined as local files. This allows the user to read any files from the FS as the user Openbravo is running as generally not root. This module was tested against Openbravo ERP version 3.0MP25 and 2.50MP6. Module Options msf use...

Google Releases Google Chrome 30

Google has released Chrome 30 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities could allow a remote attacker to cause a denial of service condition, spoof the address bar, or obtain sensitive information. US-CERT encourages users and...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 30 to the Stable channel for Windows, Mac, Linux and Chrome Frame. Chrome 30.0.1599.66 contains a number of fixes and improvements, including: Easier searching by image A number of new apps/extension APIs Lots of under the hood change...