[SECURITY] Fedora 17 Update: xulrunner-15.0-2.fc17

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

PHP. S3. TO upload the exploit-vulnerability warning-the black bar safety net

PHP S3 upload vulnerability This web-based vulnerability is more serious, can directly access the shell, is given below exploits the method of Vulnerability information: Can any upload the PHP, TXT, JPG, PNG format file change your shell to sh3ll.php.jpg or sh3ll.php%0%0.1.jpg Exploit demo: Use:...

Sagem Fast 2604 Frimware CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: FAST2604 ADSL Password change Author: The Black Devils FAST2604 ADSL Router Software Version:3.33.8a4GDJAWEB Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

PT-2012-2090

Name of the Vulnerable Software and Affected Versions com alameda component versions prior to 1.0.1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the storeid parameter to the "index.php" endpoint. Recommendations For versions pri...

BCM96338 ADSL Router Get pppoe password CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: BCM96338 ADSL Router Get pppoe password Author: The Black Devils BCM96338 ADSL Exploit By Nuevo Asesino Now you can get the username & the password ------------------------------------------------------ Contact...

PT-2012-1280

Name of the Vulnerable Software and Affected Versions McAfee Common Management Agent CMA versions 3.5.5 through 3.5.5.588 McAfee Common Management Agent CMA versions 3.6.0 through 3.6.0.608 McAfee Agent versions prior to 4.0 Patch 3 Description The issue allows remote authenticated users to...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

Siemens Simatic S7-300 - PLC Remote Memory Viewer (Metasploit)

Siemens Simatic S7-300 - PLC Remote Memory Viewer Metasploit Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class...

Siemens Simatic S7-300 - PLC Remote Memory Viewer (Metasploit)

Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300 PLC Remote Memory Viewer',...

Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Quicktime.qts. T...

Espejo Design SQL Injection

== ABOUT ME: --- TAURUS OMAR --- INDEPENDENT SECURITY RESEARCHER --- ACCESOILEGAL.BLOGSPOT.COM --- @omartaurus --- omar-taurusatdragonsecuritydotorg --- omar-taurusatlivedotcom === INFO: Author : TAURUS OMAR Category : Webapps / 0day Title Exploit : Espejo Design - SQL Injection Vulnerability...

PHP 5.4.x < 5.4.3 Multiple Vulnerabilities

Binary data 6495.prm...

Tftpd32 DNS Server 4.00 Denial Of Service

Exploit for windows platform in category dos / poc Title: Tftpd32 DNS Server Denial Of Service Vulnerability Software : Tftpd32 Software Version : v4.00 Vendor: http://tftpd32.jounin.net/ Vulnerability Published : 2012-05-26 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

PHP <= 5.4.3 RCE Vulnerability - Windows

PHP is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if descripti...

CVE-2012-2376

Buffer overflow in the comprinttypeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012...

Buffer overflow

Buffer overflow in the comprinttypeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012...

CVE-2012-2376

Buffer overflow in the comprinttypeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012...

PT-2012-3994

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.3 Description A buffer overflow issue exists in the com print typeinfo function, allowing remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types...

PHP 5.4.3 com_event_sink Denial Of Service

?php / PHP = 5.4.3 comeventsink Code Execution Proof of Concept Found by condis Website: http://cond.psychodela.pl Tested on: PHP 5.3.8 + Windows XP SP3 Professional PL PHP 5.3.10 + Windows XP SP3 Professional PL PHP 5.4.0 + Windows XP SP3 Professional PL PHP 5.4.3 + Windows XP SP3 Professional P...

SkinCrafter 3.0 Buffer Overflow

Software : SkinCrafter from NMSoft Technologies Version : SkinCrafter version 3.0 Title : Buffer overflow in skincrafter3vs2005.dll of skinCrafter vs3.0 Link : http://www.skincrafter.com/downloads/SkinCrafterDemo20052008x86.zip Date : May 17, 2012 Tested on : XP SP2 The vulnerability lies in the...