7087 matches found
VUPEN Security Research - Adobe Acrobat and Reader Picture Dimensions Heap Overflow Vulnerability
VUPEN Security Research - Adobe Acrobat and Reader Picture Dimensions Heap Overflow Vulnerability Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Adobe Acrobat and Reader are the global standards for electronic document...
Ubuntu 10.04 LTS : linux-mvl-dove vulnerabilities (USN-1203-1)
Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...
USN-1204-1: Linux kernel (i.MX51) vulnerabilities
Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signedness errors. A local attacker could exploit this to gain root privileges. CVE-2010-3859 Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local...
Adobe Fixes 13 Critical Flaws in Reader and Acrobat
Adobe has released its quarterly patch update for Acrobat and Reader, fixing a total of 13 vulnerabilities in the two applications. The flaws affect Reader on Windows, Unix and OS X and Acrobat for Windows and OS X. The vulnerabilities Adobe fixed Tuesday all are considered critical, and the...
SAP NetWeaver Business Communication Broker - multiple XSS
Application: SAP NetWeaver Vendor URL: Bugs: Multiple XSS Risk: High Exploits: YES Reported: 09.12.2011 Vendor response: 10.12.2011 Date of Public Advisory: 20.01.2012 Reference: SAP Security Note 1585652 Description SAP NetWeaver Business Communication Broker has multiple linked XSS vulnerabilie...
CVE-2011-5166
creationtimestamp| type| source ---|---|--- 2011-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17819 2011-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17856 2011-09-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17870...
NetCat CMS Multiple Vulnerabilities
NetCat CMS version 5.0.1 suffers from cross site scripting and HTTP parameter pollution vulnerabilities. Exploit Title: NetCat CMS Code exec, SQL-injection Google Dork: none Date: 28.11.2010 Author: brainpillow Software Link: http://netcat.ru/ Version: UNKNOWN On different versions of this softwa...
Rootkit Hunter - Rootkit scanning tool
Rootkit Hunter - Rootkit scanning tool Rootkit scanner is scanning tool to ensure you for about 99.9% you're clean of nasty tools. This tool scans for rootkits, backdoors and local exploits by running tests like: - MD5 hash compare - Look for default files used by rootkits - Wrong file...
winAUTOPWN v2.7 – Windows Autohacking Tool
winAUTOPWN v2.7 – Windows Autohacking Tool This version covers almost all remote exploits up-till mid-July 2011 and a few older ones as well. This version incorporates a few new commandline parameters: -perlrevshURL for a PERL Reverse Shell URL, – mailFROM smtpsender and -mailTO smtpreceiver. The...
winAUTOPWN v2.7 – Windows Autohacking Tool
winAUTOPWN v2.7 – Windows Autohacking Tool This version covers almost all remote exploits up-till mid-July 2011 and a few older ones as well. This version incorporates a few new commandline parameters: -perlrevshURL for a PERL Reverse Shell URL, – mailFROM smtpsender and -mailTO smtpreceiver. The...
20 Major Sites Cross Site Scripting
Most of the biggest and Famous sites are found to be Vulnerable to XSS attack . Cross-site scripting XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Examples of such co...
Repeated Character Conversion Obfuscation
Although various security products provide coverage against many web vulnerabilities, Metasploit exploits could potentially bypass these security products by using JavaScript obfuscation techniques. An example of such a technique is the repeated character conversion obfuscation. Such techniques...
Dienstplan Predictable Random Password Generation Vulnerability
Dienstplan is prone to an insecure random password generation vulnerability. Successfully exploiting this issue may allow an attacker to guess randomly generated passwords. Versions prior to Dienstplan 2.3 are vulnerable. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be...
KaiBB 2.0.1 SQL Injection / Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
KaiBB 2.0.1 <= Multiple (SQL Injection / FU) Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
MiaCMS 4.9.0 Remote File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
apache recent ddos vulnerability solution-exploits warning-the black bar safety net
apache the recentddosvulnerability solution Original: Jeacen Methods: RewriteEngine on RewriteCond %HTTP:range ! ^bytes=^,+,^,+0,4$|^$ RewriteRule . - F...
JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: JCE Joomla Extension =2.0.10 Multiple Vulnerabilities Vendor: www.joomlacontenteditor.net Exploit: Available Vulnerable Version: 2.0.10 Image Manager 1.5.7.13, Media Manager 1.5.6.3, Template Manager 1.5.5, File Manager 1.5.4.1 & prior...
Ruby Random Number Values Information Disclosure Vulnerability
This host is installed with Ruby and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyrandomnumbervaluesinfodiscvuln01.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Random Number Values Information Disclosure Vulnerability Authors: Sooraj KS Copyright:...
Ruby Random Number Values Information Disclosure Vulnerability
This host is installed with Ruby and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodrubyrandomnumbervaluesinfodiscvuln.nasl 8196 2017-12-20 12:13:37Z cfischer $ Ruby Random Number Values Information Disclosure Vulnerability Authors: Sooraj KS Copyright:...