OpenVPN 2.4.0 - Denial of Service

!/usr/bin/env python3 ''' $ ./dosserver.py & $ sudo ./openvpn-2.4.0/src/openvpn/openvpn conf/server-tls.conf ... Fri Feb 24 10:19:19 2017 192.168.149.1:64249 TLS: Initial packet from AFINET192.168.149.1:64249, sid=9a6c48a6 1467f5e1 Fri Feb 24 10:19:19 2017 192.168.149.1:64249 Assertion failed at...

Receiver Crash: A Fatal Error Cccurred. Would You Like to Restart Citrix Receiver?

This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer toCTX297149for more information Receiver gives a fatal error intermittently to all users. Trying to uninstall/install Receiver produces...

WhatsApp Android text Crash 0day Exploit

This code work on all Android versions. Don't work on all android emulators as nexus. It is a short code that acts on android. When Android PROCESS the code, the app gets a crash. Don't work if android don't process directly the code. tested and work 100% on: - whatsapp message. - whatsapp...

SMF 2.0.10 Remote Memory Exfiltration Exploit

Exploit for php platform in category web applications !/usr/bin/python -- coding: iso-8859-15 -- Title: SMF Filippo Roncari Truel Lab http://lab.truel.it import sys, requests, time, os, socket, thread, base64, string, urllib from multiprocessing import Process Payload config bytesnum = 000 num of...

Fedora 20 : php-horde-kronolith-4.2.4-1.fc20 (2014-16397)

kronolith 4.2.4 - jan Make access to non-CalDAV remote calendars faster Bug 12379. - jan Continue with further events if parsing of one remote event date fails. - jan Fix JS error in month view with more events today than the maximum threshold. - mjr Fix fatal error when creating or modifying an...

glibc - NUL Byte gconv_translit_find Off-by-One

glibc - NUL Byte gconvtranslitfind Off-by-One // // Full Exploit: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/34421.tar.gz CVE-2014-5119.tar.gz // // // --------------------------------------------------- // CVE-2014-5119 glibc gconvtranslitfind exploit //...

Localize: PHP PDOException and Full Path Disclosure

hi phrasekey , agian! in phraseChange action if set to array pdo quote show error! line 755 index.php Warning: PDO::quote expects parameter 1 to be string, array given in /srv/data/web/vhosts/www.localize.im/htdocs/classes/Database.php on line 30 Fatal error: Uncaught exception 'PDOException' wit...

openSUSE Security Update : subversion (openSUSE-SU-2013:1006-1)

This update of subversion includes several bug and security fixes. - update to 1.7.10 bnc821505 CVE-2013-1968 CVE-2013-2088 CVE-2013-2112 - Client-side bugfixes : - fix 'svn revert' 'no such table: revertlist' spurious error - fix 'svn diff' doesn't show some locally added files - fix changelist...

Localize: Full path disclosure

I signed up for localize with [email protected], and localize sent me a verification link which was: http://www.localize.io/verify/e6be646b24pdd3w6d5c27ppa9a267ee7 When I visited that link I found it was showing the following error: Fatal error: Call to a member function...

Dilbert Cross Site Scripting

================================================================================ Cross Site Scripting on The Official Dilbert Website ================================================================================ Site: www.dilbert.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom...

Telegraph Cross Site Scripting

================================================================================ Cross Site Scripting on The Telegraph ================================================================================ Site: www.telegraph.co.uk Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fata...

New York Times Cross Site Scripting

================================================================================ Cross Site Scripting on New York Times ================================================================================ Site: www.nytimes.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal...

Stanford Cross Site Scripting

======================================================================= XSS on Stanford University - School of Medicine ======================================================================= Site: med.stanford.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

Texas A&M University Cross Site Scripting

======================================================================= XSS on Texas A&M University - xyleborini site ! ======================================================================= Site: xyleborini.tamu.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

University Of Wisconsin - Madison Cross Site Scripting

======================================================================= XSS on Comm Arts Departement of University - Wisconsin-Madison ======================================================================= Site: commarts.wisc.edu Date: 15/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team:...

UNESCO E-platform domain got hacked by Fatal Error Crew

UNESCO E-platform domain got hacked by Fatal Error Crew The E-Platform domain of one of the Biggest Organisation United Nations Educational, Scientific and Cultural Organization UNESCO got hacked and defaced by Fatal Error Crew hackers . Mirror of hack is available here...

UNESCO E-platform domain got hacked by Fatal Error Crew

UNESCO E-platform domain got hacked by Fatal Error Crew The E-Platform domain of one of the Biggest Organisation United Nations Educational, Scientific and Cultural Organization UNESCO got hacked and defaced by Fatal Error Crew hackers . Mirror of hack is available here...

TelEduc Version 3.3.8 SQL Injection Vulnerability

Exploit for php platform in category web applications By s4r4d0 - 2011 © Made in Brazil TelEduc Version 3.3.8 Name: TelEduc Version 3.3.8 SQL Injection Vulnerability Download: http://www.teleduc.org.br/pagina/download-teleduc/ Date: 12/06/2011 Author: s4r4d0 E-mail: s4r4d0atyhaoodotcom Team: Fat...

TelEduc 3.3.8 SQL Injection

By s4r4d0 - 2011 © Made in Brazil TelEduc Version 3.3.8 Name: TelEduc Version 3.3.8 SQL Injection Vulnerability Download: http://www.teleduc.org.br/pagina/download-teleduc/ Date: 12/06/2011 Author: s4r4d0 E-mail: s4r4d0atyhaoodotcom Team: Fatal Error Twitter: www.twitter.com/fatalerrorcrew...

Mandriva Update for php MDVSA-2010:139 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2010:139 php Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...