Realtek Audio Control Panel 1.0.1.65 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwrite ... so it's ...

Home File Share Server 0.7.2.32 Directory Traversal

------------------------------------------------------------------------ Software................Home File Share Server 0.7.2.32 Vulnerability...........Directory Traversal Download................http://downstairs.dnsalias.net/homefileshareserver.html Release Date............10/31/2010 Tested...

Home FTP Server 1.11.1.149 - (Authenticated) Directory Traversal

Home FTP Server 1.11.1.149 - Authenticated Directory Traversal Exploit Title: Home FTP Server Directory Traversal Date: Oct 28, 2010 Author: chr1x Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Description: Home Ftp Server is an easy to use FTP server, that allows yo...

Fraud Advisory for Consumers Released: Involvement in Criminal Activity Through Work from Home Scams

As part of a joint effort, the United States Secret Service, the Federal Bureau of Investigation, the Internet Crime Complaint Center IC3 and the Financial Services Information Sharing and Analysis Center FS-ISAC have released Fraud Advisory for Consumers: Involvement in Criminal Activity through...

Microsoft Windows OpenType Font (OTF) Format Driver CVE-2010-2741 Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Attackers may exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts...

Update Protection against Synology Disk Station FTP Login Web Commands Injection Vulnerability

A remote command injection vulnerability has been discovered in Synology Disk Station. The Synology Disk Station is a product designed for storage purposes of small offices or home users. It supports several terabytes of total storage. A remote attacker may exploit this vulnerability to execute...

Integard Home and Pro HTTP Buffer Overflow Vulnerability

Integard Home/Pro internet content filter HTTP server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Race River Integard Home/Pro LoginAdmin Password Stack Buffer Overflow

Exploit Title: Integard Pro 2.2.0.9026 Win7 ROP-Code Metasploit Module Date: 2010-09-15 Author: Node Software Link: http://www.exploit-db.com/application/14941 Version: Race River Integard Pro 2.2.0.9026, integard32.dllv.2.0.0.306 Tested on: Windows 7 x64 Eng CVE : - class Metasploit3 'Race River...

AContent 1.0 Cross Site Scripting

=============================================== Vulnerability ID: HTB22596 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinacontentsearch.html Product: AContent Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010...

UCenter Home 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ UCenter Home 2.0 SQL Injection Vulnerability ============================================ / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: email protected /...

UCenter Home 2.0 SQL Injection Vulnerability

No description provided by source. / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home Version : 2.0 Script HomePage : http://u.discuz.net/...

UCenter Home 2.0 SQL Injection

--==UCenter Home 2.0 -0day Remote SQL Injection Vulnerability==-- / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home Version : 2.0 Script HomePage :...

A Closer Look at Work at Home Scams

A recent chat with an individual who was almost tricked into helping organized criminals launder thousands of dollars stolen through e-banking fraud displayed one of the more clever and convincing money mule recruitment Web sites encountered. Read the full article. KrebsonSecurity...

UCenter Home 2.0 - SQL Injection

UCenter Home 2.0 - SQL Injection --==UCenter Home 2.0 -0day Remote SQL Injection Vulnerability==-- / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home...

UCenter Home 2.0 - SQL Injection

--==UCenter Home 2.0 -0day Remote SQL Injection Vulnerability==-- / Author : KnocKout / Greatz : DaiMon,BARCOD3,RiskY and iranian hackers / Contact: [email protected] / Cyber-Warrior.org/CWKnocKout --==--==--==--==--==--==--==--==--==--== Script : UCenter Home Version : 2.0 Script HomePage :...

Catholic Diocese Loses $600K to Online Thieves

Organized cyber thieves stole more than $600,000 from the Catholic Diocese of Des Moines, Iowa earlier this month with the help of dozens of unwitting co-conspirators hired through work-at-home job scams, at least one of whom was told the money was being distributed to victims of the Catholic...

Joomla Component "com_dirfrm" Sql Injection Vulnerability

No description provided by source. Exploit Title : Joomla Component "comdirfrm" Sql Injection Vulnerability Date : 18 - 8 - 2010 Author : Hieuneo Vietnam Version : All Versions Tested on : Win 7 Home Dork google: inurl:"comdirfrm" Exploit:...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

Progitek Visionner Photos v2.0 - File Format DOS

Exploit for windows platform in category dos / poc ================================================ Progitek Visionner Photos v2.0 - File Format DOS ================================================ Title: Progitek Visionner Photos v2.0 - File Format DOS Author: antrhacks Specifically for...

CVE-2010-2320

bozotic HTTP server aka bozohttpd before 20100621 allows remote attackers to list the contents of home directories, and determine the existence of user accounts, via multiple requests for URIs beginning with / sequences...