WordPress MDC-Youtube-Downloader 2.1.0 File Disclosure

Title: Remote file download in Wordpress Plugin mdc-youtube-downloader v2.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-01 Download Site: https://wordpress.org/plugins/mdc-youtube-downloader Vendor: https://profiles.wordpress.org/mukto90/ Vendor Notified: 2015-07-01, removed vulnerable...

MDC YouTube Downloader <= 2.1.0 - Local File Inclusion

The MDC YouTube Downloader WordPress plugin was affected by a Local File Inclusion security vulnerability. PoC http://www.example.com/wp-content/plugins/mdc-youtube-downloader/includes/download.php?file=/etc/passwd...

MDC YouTube Downloader <= 2.1.0 - Local File Inclusion

The MDC YouTube Downloader WordPress plugin was affected by a Local File Inclusion security vulnerability. http://www.example.com/wp-content/plugins/mdc-youtube-downloader/includes/download.php?file=/etc/passwd...

RM Downloader 2.7.5.400 Local Buffer Overflow

Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow MSF + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

RM Downloader 2.7.5.400 - Local Buffer Overflow (Metasploit)

Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow MSF + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

RM Downloader 2.7.5.400 - Local Buffer Overflow (MSF)

Exploit for windows platform in category local exploits + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow MSF + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

RM Downloader 2.7.5.400 - Local Buffer Overflow (Metasploit)

RM Downloader 2.7.5.400 - Local Buffer Overflow Metasploit + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow MSF + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

Dyre Banking Trojan Avoids Sandbox Detection

A number of unidentified commercial and freely available sandboxes fail to detect a new version of the Dyre banking Trojan, which was recently blamed for more than $1 million in losses to financial institutions and enterprises. The new strain of Dyre, also known as Dyreza, uses a fairly new...

Beebone Botnet Takedown Carried Out

A relatively small yet troublesome botnet has been shut down in a joint operation between U.S. and European law enforcement and a number of private security companies, including Kaspersky Lab. The takedown of Beebone was carried out on Wednesday by the FBI, the Department of Homeland Security,...

RM Downloader 2.7.5.400 Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

RM Downloader 2.7.5.400 - Local Buffer Overflow

!/usr/bin/env python + Author: TUNISIAN CYBER + Exploit Title: RM Downloader v2.7.5.400 Local Buffer Overflow + Date: 25-03-2015 + Type: Local Exploits + Tested on: WinXp/Windows 7 Pro + Vendor:...

SNMP Brute - Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script

SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options --help, -h show...

Microsoft Office Files Containing Malicious Downloader

Microsoft Office files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

WM-Downloader-3.1.2.2-2010.04.15

Exploit Title: WM Downloader 3.1.2.2 2010.04.15 Buffer Overflow SEH Date: 2010-07-28 Author: fdisk @fdiskyou e-mail: fdiskyou at deniable.org payload = "\x41" 43485 payload += "\xeb\x16\x90\x90" jump payload += "\xb4\x15\xbb\x01" ppr - WDCodec00.dll payload += "\x90" 16 windows/exec - 227 bytes...

WM-Downloader-3.1.2.2-2010.04.15-(.m3u)

WM Downloader 3.1.2.2 2010.04.15 .m3u Buffer Overflow + DEP Bypass Author: sickness Download : http://mini-stream.net/wm-downloader/ The payload can be replaced with whatever you want, there is enough space. import sys header='EXTM3U\n' junk ='http://'+'\x90' 17400 junk+='\x41'17 eip...

Upatre Downloader Spreading Dyreza Banking Trojan

The Upatre downloader is the vehicle that has driven numerous banking Trojan and ransomware attacks to the front door of countless victims at great cost. Microsoft on Thursday warned of a wire-transfer spam campaign that it’s spotted that is spreading Upatre and eventually loading the dangerous...

CVE-2014-6971

The Easy Video Downloader aka com.simon.padillar.EasyVideo application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6971

The CVE-2014-6971 entry affects the Android app Easy Video Downloader (com.simon.padillar.EasyVideo), version 4.4.1, which does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof servers and steal sensitive information via a crafted certificate. The ...

CVE-2014-6971

The Easy Video Downloader aka com.simon.padillar.EasyVideo application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

TNG Sitebuilding v. 10.0.3 - Admin Panel Motion Logs Downloader Exploit

Admin adminlog.txt all his movements are recorded file. This log file is displayed in the target's local directory Database backup taken in this file where records are shown to be and you can easily download a database backup Usage Info perl www.target.com /path/ TNG Sitebuilding v. 10.0.3 - Admi...