Iranians Indicted Over DDoS Campaign on Banks, Dam Hack

The U.S. government on Thursday indicted seven hackers affiliated with the Iranian government for attacks it called “a frightening new frontier in cybercrime.” Accusing the men of carrying out a series of distributed denial of service DDoS attacks against 46 financial companies, the Department of...

Green Dam URL Processing Buffer Overflow

No description provided by source. $Id: greendamurl.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability

ESA-2014-024.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability EMC Identifier: ESA-2014-024 CVE Identifier: CVE-2014-2503 Severity Rating: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P Affected products: • E...

CVE-2014-2503

The thumbnail proxy server in EMC Documentum Digital Asset Manager DAM 6.5 SP3, 6.5 SP4, 6.5 SP5, and 6.5 SP6 before P13 allows remote attackers to conduct Documentum Query Language DQL injection attacks and bypass intended restrictions on querying objects via a crafted parameter in a query strin...

CVE-2014-2503

Summary (CVE-2014-2503) : EMC Documentum Digital Asset Manager (DAM) 6.5 SP3/SP4/SP5/SP6 before P13 is affected by a Blind DQL injection via the thumbnail proxy server, allowing remote attackers to bypass query restrictions. The issue arises from how a crafted URL query parameter is processed, en...

Sensitive Army database of U.S. dams compromised by Chinese Hackers

U.S. intelligence agencies traced a recent cyber intrusion into U.S. Army database that holds sensitive information about vulnerabilities in U.S. dams. The U.S. Army Corps of Engineers National Inventory of Dams contains information about 79,000 dams throughout the country and tracks such...

Green Dam URL Length Buffer Overflow

A remote code execution vulnerability has been reported in Green Dam. The vulnerability is due to a boundary check error while filtering specially crafted URLs. A remote attacker may exploit this vulnerability by enticing an unsuspecting user to open a malicious link. Successful exploitation woul...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: MM DAM - FEFileList mmdamfilelist, Events julleevents, WEC Staff Directory wecstaffdirectory, TGM news tgmnews, TGM media tgmmedia, TGM calendar module tgmcal, DAM Lightbox damlightbox, Download system...

Cross-Site Scripting vulnerability in extension "Media [DAM]" (dam)

It has been discovered that the extension Media DAM dam is vulnerable to Cross-Site Scripting. Release Date: January 26, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.1.7 and all versions below Vulnerabilit...

Green Dam - URL Processing Buffer Overflow (Metasploit)

$Id: greendamurl.rb 8762 2010-03-10 05:58:01Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

CVE-2009-3631

CVE-2009-3631 affects TYPO3 Backend: the Backend subcomponent allows remote authenticated users to execute arbitrary commands via shell metacharacters in a filename when the DAM extension or ftp upload is enabled. Affected versions span TYPO3 4.0.13 and earlier; 4.1.x before 4.1.13; 4.2.x before ...

Green Dam Remote Change System Time Exploit

No description provided by source. // Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include iostream include boost/asio.hpp include boost/datetime.hpp int mainint argc, char argv try...

Green Dam Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Green Dam - Remote Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Green Dam - Remote Change System Time

Green Dam - Remote Change System Time // Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl;...

Green Dam Remote Change System Time Exploit

Exploit for windows platform in category remote exploits =========================================== Green Dam Remote Change System Time Exploit =========================================== // Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change...

Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)

Exploit for windows platform in category remote exploits ============================================================ Green Dam 3.17 URL Processing Buffer Overflow Exploit meta ============================================================ greendamurl.rb Green Dam URL Processing Buffer Overflow...

Green Dam 3.17 - URL Processing Buffer Overflow (Metasploit)

Green Dam 3.17 - URL Processing Buffer Overflow Metasploit greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windo...

Green Dam URL Processing Buffer Overflow

greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet Explorer 7, Windows Vista SP1 .NET...

Green Dam 3.17 URL Processing Buffer Overflow Exploit (meta)

No description provided by source. greendamurl.rb Green Dam URL Processing Buffer Overflow exploit for the Metasploit Framework Green Dam Youth Escort 3.17 successfully exploited on the following platforms: - Internet Explorer 6, Windows XP SP2 - Internet Explorer 7, Windows XP SP3 - Internet...