7381 matches found
CobraScripts Trading Marketplace Script - 'cid' SQL Injection
source: https://www.securityfocus.com/bid/48914/info Trading Marketplace script is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Safari < 5.1 Multiple Vulnerabilities
The version of Safari installed on the remote Windows host is earlier than 5.1. As such, it is potentially affected by numerous issues in the following components : - CFNetwork - ColorSync - CoreFoundation - CoreGraphics - International Components for Unicode - ImageIO - libxslt - libxml - Safari...
WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella
WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella Dr. Alberto Fontanella found on Western Digital WD TV Live Hub appliance with the last firmware installed 2.06.10 and 3 exploits to get admin password, deface appliance and get root shell: Author: Dr. Alberto...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
OpenJDK: integer overflows in JPEGImageReader and font SunLayoutEngine (2D, 7013519)
Multiple unspecified vulnerabilities in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
Apple, Google Need Mobile Security Rethink
Threatpost interviews Mickey Boodaei, the CEO of Trusteer, about the state of mobile device security. Mobile security issues have been getting more press recently – on Threatpost and elsewhere. Partially, this is because they’re new, and because mobile devices are proliferating both at home and i...
CVE-2011-2743
creationtimestamp| type| source ---|---|--- 2011-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35943 2011-07-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35944...
Blue Coat Authentication and Authorization Agent (BCAAA) 5 BoF
Exploit for windows platform in category remote exploits...
URL Shortening Services Used in Large Malware Attack
Spammers have been exploiting anonymous URL shortening services for a while now but according to a post on Symantec’s MessageLabs Intelligence Blog, some have been using the technique as part of a large malware attack. Using five different URL shortening websites, the attackers sent mangled links...
Paliz Portal - Cross-Site Scripting / Multiple SQL Injections
source: https://www.securityfocus.com/bid/48559/info Paliz Portal is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-bas...
Kaillera - Multiple Clients Buffer Overflow Vulnerabilities
Kaillera - Multiple Clients Buffer Overflow Vulnerabilities !/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13...
Kaillera - Multiple Clients Buffer Overflow Vulnerabilities
!/usr/bin/perl Exploit Title: Remote Buffer Overflows in Kaillera clients Date: 6/30/11 Author: sil3ntdre4m Software Link: Multiple: 1. Kaillera original client: An emulator to download with this client bundled with it is Project64K 0.13: http://www.zophar.net/downloadfile/1907 2. Supraclient...
The Social-Engineer Toolkit v1.5 Released
The Social-Engineer Toolkit v1.5 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...
Google's New Tool, DOM Snitch, Finds JavaScript Flaws
Google announced on Tuesday the availability of a new free application testing tool, dubbed “DOM Snitch,” that it says will help Web application developers find vulnerabilities in client side Web applications. The new application is a Chrome browser extension that works by injecting hooks into a...
Metasploit Framework 3.7.2 Released - Download
Metasploit Framework 3.7.2 Released - Download Metasploit Framework 3.7.2 includes 698 exploit modules, 358 auxiliary modules, and 54 post modules, 11 new exploits, 1 new auxiliary module, and 15 new post modules.This release addresses several issues with updating the framework, adds 11 exploit /...
Forget APT, Mass Malware is Still the Big Threat
MALAGA, SPAIN–While the high-profile attacks against RSA, Google and others over the last couple of years has focused a lot of attention on defending against advanced, targeted attacks, the fact remains that most attackers are in fact relying on crimeware packs loaded with commodity exploits for...
VUPEN Security Research - Microsoft Windows OLE Automation Integer Underflow Vulnerability (MS11-038)
VUPEN Security Research - Microsoft Windows OLE Automation Integer Underflow Vulnerability MS11-038 Website : http://www.vupen.com/english/research.php Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical...
MS11-051: Vulnerability in Active Directory Certificate Services Web Enrollment Could Allow Elevation of Privilege (2518295) (uncredentialed check)
Active Directory Certificate Services Web Enrollment is installed on the remote host. The remote version of this software is vulnerable to a cross-site scripting vulnerability that could allow an attacker to inject a client-side script into the user's web browser instance. %NASLMINLEVEL 70300 C...
Metasploit Launches Reward Program For Exploits
The team behind the Metasploit Project is launching its own version of a bug bounty program: cash payouts for working exploits. The group is hoping to get explit code for as many of its top 30 vulnerabilities as possible before the program expires later this summer. Metasploit has put together a...