GeekLog 1.7.0 Shell Upload

db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 88""""""""88 88 88888 d8""""""""8b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 "Y88888P" Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net/ Version: 1.7....

GeekLog 1.7.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ============================================================= GeekLog 1.7.0 fckeditor Arbitrary File Upload Vulnerability ============================================================= db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8'...

Early Stuxnet Variants Used 'Cunning' Hack of AutoRun to Spread

Early versions of the Stuxnet worm used a novel and cunning method to manipulate Windows Autorun feature in order to spread, according to information published by a Symantec Researcher who helped analyze the worm after it was first identified. Writing on the Symantec Connect blog, Symantec...

Worm: VBMania

Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...

New Malware Emerges to Exploit Windows LNK Flaw

Researchers have found two distinct new malware families that are exploiting the newly discovered Windows shell LNK vulnerability, leading to concerns that the development of a worm could be in the offing. One of the new pieces of malware, dubbed Chymine by researchers at Eset, exploits the LNK...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Microsoft Windows快捷方式LNK文件自动执行文件漏洞

BUGTRAQ ID: 41732 Microsoft Windows是微软发布的非常流行的操作系统。 Windows支持使用快捷方式或LNK文件。LNK文件是指向本地文件的引用，点击LNK文件与点击快捷方式所指定的目标具有相同的效果。...

Microsoft Windows .LNK Vulnerability

US-CERT is aware of a vulnerability affecting Microsoft Windows. This vulnerability is due to the failure of Microsoft Windows to properly obtain icons for .LNK files. Microsoft uses .LNK files, commonly referred to as "shortcuts," as references to files or applications. By convincing a user to...

Microsoft Windows automatically executes code specified in shortcut files

Overview Microsoft Windows automatically executes code specified in shortcut LNK and PIF files. Description Microsoft Windows supports the use of shortcut or LNK files. A LNK file is a reference to a local file. A PIF file is a shortcut to a MS-DOS application. Clicking on a LNK or PIF file has...

Samsung Handsets Distributed With Malware-Infected Memory Cards

Another mobile-phone manufacturer has fallen victim to an increasingly common attack in which phones’ memory cards are infected with malware during the manufacturing process and then shipped out to customers. The latest victim is Samsung, which has acknowledged that the microSD cards in a batch o...

PlayMeNow M3U Universal Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow (Windows XP Universal) - '.M3U' Playlist Buffer Overflow

!/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original Author: Gr33nG0bL1n Reference:...

PlayMeNow (Windows XP Universal) - .M3U Playlist Buffer Overflow

PlayMeNow Windows XP Universal - .M3U Playlist Buffer Overflow !/usr/bin/python Vulnerability: PlayMeNow Malformed M3U Playlist WinXP Universal BoF Product: PlayMeNow - media player. Versions affected: Tested with 7.3 and 7.4 Tested on: Windows XP Pro SP2/3 & Home SP3 Author: loneferret Original...

webshell mention the weight point directory summary-vulnerability warning-the black bar safety net

C:\Documents and Settings\All Users\Start Menu\Programs\ --'look here, can jump, and we from here can get a lot of useful information such as Serv-U path. C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\ --‘see if you can jump to this directory, if the line that is the...

Dogrobot Malware Penetrates System Restore on Windows

GENEVA — Cyber crime gangs in China are penetrating the hard disk recovery cards on computers in Internet cafes and using a combination of zero-day flaws, rootkits and ARP spoofing techniques to steal billions of dollars worth of online gaming credentials. According to Microsoft anti-virus...

Let the administrator help you restart the machine-vulnerability warning-the black bar safety net

Let the administrator help you restart the machine Sometimes, we go through the database backup a batch to the Startup menu, you want the server on the next restart to run our batch processing. But we, Ah, etc., the server is not restarting, what should I do? Allow administrator to help us restar...

Microsoft battles malware with Windows AutoRun changes

In direct response to Conficker and an increased wave of malware attacks targeting the Windows AutoRun feature, Microsoft today announced significant changes to the way the operating system operates when USB drives are used. The changes, detailed on Redmond’s Security Research & Defense blog, hav...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...

Flash drive/CD autoplay command execution

Added: 04/07/2009 Background This tool allows you to create a USB flash drive which, when inserted into a Windows computer, prompts a user to run a program which creates a command connection. The program is disguised as the "Open Folder" option in the AutoPlay dialog to entice the user to run it...