4168 matches found
[Onapsis Security Advisory 2014-026] Missing authorization check in function modules of BW-SYS-DB-DB4
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory 2014-026: Missing authorization check in function modules of BW-SYS-DB-DB4 This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will ga...
JVN#30281958: Arbitrary program execution vulnerability in TrendLink ActiveX control
TrendLink provided by Canary Labs is a tool to help visualize data for analysis. The SaveToFile method provided in the ActiveX control in TrendLink contains a vulnerability where file creation is not properly restricted. Impact A remote attacker may create an arbitrary file on the system and as a...
Tenable Nessus 5.2.7 Parameter Tampering / Authentication Bypass
Product: Nessus Vendor: Tenable Network Security Version: Nessus 5.2.3-5.2.7 - Web UI 2.3.4 potentially lower Vendor Notified Date: June 24, 2014 Vendor Resolved Date: June 25, 2014 Release Date: July 18, 2014 Risk: Medium Authentication: Not Required Remote: Yes Description: A parameter tamperi...
ACME micro_httpd - Denial of Service
Exploit for linux platform in category dos / poc """ Exploit Title: Buffer Overflow in microhttpd by ACME Date: 4/7/2014 Exploit Author: Yuval tisf Nativ Vendor Homepage: http://www.acme.com/software/microhttpd/ Software Link: http://www.acme.com/software/microhttpd/ Version: June 2012 CVE:...
HP Data Protection Manager 8.10 Remote Command Execution
!/usr/bin/python Exploit Title: HP-Data-Protector-8.10 Remote command execution. Date: July 11 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Exploit Author: Henoch Chanoc Barrera https://intrusionlabs.org Contacts: [email protected] and...
HP Data Protector Manager 8.10 - Remote Command Execution
HP Data Protector Manager 8.10 - Remote Command Execution !/usr/bin/python Exploit Title: HP-Data-Protector-8.10 Remote command execution. Date: July 11 2014 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Exploit Author: Henoch Chanoc Barrera https://intrusionlabs.org...
FileFuzz Denial of Service vulnerability
No description provided by source. Exploit Title :Filefuzzer Denial of service vulnerability Software : Filefuzzer Software link :http://labs.idefense.com/software/fuzzing.php Autor : Sweet Email : [email protected] Date : 5/11/2010 Tested on : WinXp sp3 eng | Vmware Software detail: FileFuzz i...
VHCS <= 2.4.7.1 (Add User) Authentication Bypass Exploit
No description provided by source. html head titleVHCS version = 2.4.7.1 PoC. By RoMaNSoFt/title script language=JavaScript function submitform if document.adminadduser.username.value=='admin' alert'Learn to read before launching an exploit, script-kiddie!'; exit;...
Microsoft Media Player - (quartz.dll .wav) Multiple Remote DoS Vulns
No description provided by source. ! /usr/bin/perl CAL2quartzwavpoc.pl TwoMircoSoftMediaplayerquartz.dllwavremoteDosvulnerabilities by Code Audit Labs public 2009-04-19 http://www.vulnhunt.com/ Affected ======== test on full updated winxp sp3 windows media Player 10.00.00.3998 quartz.dll...
LibLime Koha <= 4.2 - Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day Exploit...
DESlock+ <= 3.2.7 - Local Kernel Race Condition Denial of Service PoC
No description provided by source. / deslock-probe-race.c Copyright c 2008 by [email protected] DESlock+ = 3.2.7 local kernel race condition DoS POC by mu-b - Fri 22 Feb 2008 - Tested on: DLMFENC.sys 1.0.0.28 race conditions between calls to ProbeForRead/ProbeForWrite and pointer use. Note that...
Mac OS X xnu <= 1228.x (hfs-fcntl) Local Kernel Root Exploit
No description provided by source. !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by [email protected] Apple MACOS X 792.0 = xnu = 1228.x local kernel root exploit by mu-b - Sat 14 June 2008 - Tested on: Apple MACOS X 10.4.8 xnu-792.14.14.obj1/RELEASEI386 Apple MACOS X 10.4.9...
DoubleTake/HP StorageWorks Storage Mirroring Service Authentication Overflow
No description provided by source. $Id: doubletake.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Elcom CommunityManager.NET Auth Bypass Vulnerability
No description provided by source. Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET Affected versions. v6...
Big Forum SQL injection Vulnerability (forum.php?id)
No description provided by source. ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============ EXPL0!T http://server/path/forum.php?id=3SQL =========================================================== Greetz to : Alnjm33-virus-pal -g3n1ux - Predator-Ahmadso -...
Monkey HTTP Server 0.1.4 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5792/info Monkey HTTP server is prone to a directory-traversal bug that may allow attackers to access sensitive files. By passing a malicious query to a vulnerable server, an attacker can potentially gain access to...
TORQUE Resource Manager 2.5.x-2.5.13 - Stack Based Buffer Overflow Stub
No description provided by source. !/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage:...
Plume CMS 1.2.3 - Multiple SQL Injection Vulnerabilities
No description provided by source. Plume CMS Multiple SQL Injection Vulnerabilities - Security Advisory - SOS-09-006 Release Date. 12-Aug-2009 Last Update. - Vendor Notification Date. 16-Jun-2009 Product. Plume CMS Platform. Independent Affected versions. 1.2.3 verified, possibly others Severity...
Windows Xp Home Edition SP2 English (calc.exe) 37 bytes
No description provided by source. / Windows Xp Home edition SP2 english calc.exe 37 bytes shellcode by: Hazem mofeed Aka Hakxer penetration testing labs www.pentestlabs.com / char evil = \xeb\x16\x5b\x31\xc0\x50\x53\xbb\x8d\x15\x86\x7c\xff\xd3\x31\xc0...
Splunk <= 4.3.3 Arbitrary File Read
No description provided by source. Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...