PrecisionID File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs: Arbitrary File overwriting Exploits: YES Reported: 03.03.200...

PrecisionID Datamatrix ActiveX Arbitrary File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs: Arbitrary File overwritin...

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs:...

PrecisionID Datamatrix - ActiveX Arbitrary File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs: Arbitrary File overwriting Exploits: YES Reported: 03.03.200...

PrecisionID Datamatrix ActiveX Arbitrary File Overwrite Vuln

Exploit for windows platform in category remote exploits ============================================================ PrecisionID Datamatrix ActiveX Arbitrary File Overwrite Vuln ============================================================ Digital Security Research Group DSecRG Advisory...

Update Protections against Recent Malware Threats (30-Mar-09)

The update includes new protections against 2 recent malware threats:Backdoor Trojan: Zlob - Zlob is backdoor Trojan that can be installed via malware downloader or exploits. It installs other applications that continuously connect to remote servers and downloads malicious scripts and...

CVE-2009-1209

creationtimestamp| type| source ---|---|--- 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8314 2009-03-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8321 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9330...

[Full-disclosure] FreeBSD/OS X kernel bug dump

All - the following are the exploits from the recent demonstrations at Apple Mac OSX = 10.4.0 local kernel root http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl.c http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl.sh FreeBSD = 7.0 ktimer local kernel root...

Q&A: CanSecWest hacker Charlie Miller

At the CanSecWest security conference in Vancouver BC, I got a chance to sit down with Charlie Miller, the researcher who won the Pwn2Own hacking contest by exploiting a fully patched MacBook Air machine using a Safari code execution vulnerability. We discuss the state of Web browser security, th...

Pixie CMS SQL Injection and Cross Site Scripting Vulnerabilities

Pixie CMS is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modif...

Pwn2Own trifecta: Hacker exploits IE8, Firefox, Safari

All three major Web browsers — Microsoft’s Internet Explorer 8, Mozilla Firefox and Apple’s Safari — failed to survive the hacker onslaught at this year’s CanSecWest Pwn2Own contest. A security researcher named “Nils” he declined to provide his full name performed a clean drive-by download attack...

Oracle Application Server — Linked XSS vulnerability

Application: Oracle BPEL Console version 10.1.3.3.0 Versions Affected: Oracle BPEL Console version 10.1.3.3.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date of Public Advisory: 20.10.2010 CVE: CVE-2010-3581 Author: Alexandr Polyakov Description XSS in...

CVE-2009-1071

creationtimestamp| type| source ---|---|--- 2009-03-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8236 2009-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9628...

Port reuse shellcode-exploit warning-the black bar safety net

Port reuse shellcode Author: thorn The hard disk has a lot of use a variety of techniques to achieve the port reuse shellcode, are based on the previous write. Turned out a relatively dwarfish, patch to the here. Want to expand your friends can own change. This shellcode can also be easily extend...

CVE-2009-1038

creationtimestamp| type| source ---|---|--- 2009-03-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8207 2009-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8217...

CMS WEBjump! - Multiple SQL Injections

CMS WEBjump! - Multiple SQL Injections +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Powered by Content Management System WEBjump! SQL Injection Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author : M3NW5 contach :...

CVE-2009-4883

creationtimestamp| type| source ---|---|--- 2009-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8182 2009-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8330...

Oracle BI Publisher — Response Splitting

Application: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Versions Affected: Oracle Business Intelligence Enterprise Edition 10.1.3.4.0 Vendor URL: Bugs: Response Splitting, XSS, Phishing credentials Exploits: YES Reported: 03.03.2009 Vendor response: 04.03.2009 Last response:...

CVE-2009-0037

creationtimestamp| type| source ---|---|--- 2009-03-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32834...

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling 0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact :...