MobileIron Virtual Smartphone Platform - Privilege Escalation

MobileIron Virtual Smartphone Platform Privilege Escalation Exploit 0day ======================================================================== The MobileIron Virtual Smartphone Platform is the first solution to combine data-driven smartphone and tablet management with real-time wireless cost...

[Mercury v2.2.0] The Android Assessment Framework

Mercury is a security assessment framework for the Android platform. It allows you to dynamically interact with the Inter-Process Communication IPC endpoints exported by an application installed on a device. Mercury provides similar functionality to a number of static analysis tools, such as aapt...

Ghost Phisher

Ghost Phisher is a computer security application that comes inbuilt with a Fake DNS Server, Fake DHCP Server, Fake HTTP server and also has an integrated area for automatic capture and logging of HTTP form method credentials to a database. The program could be used as an honey pot,could be used t...

Santilga CMS 1.2.6.3 Cross Site Request Forgery / SQL Injection

============================= Vulnerable software: Santilga CMS version 1.2.6.3 $ head -n 10 Admin.php|less view-templateName = "admin"; parent::construct; $this-lang = SantilgaLanguage::getInstance-getLanguage; $this-view-lang = $this-lang; $this-view-showUploadForm = false; public function...

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities

Mercury v1.0 - Framework for bug hunters to find Android vulnerabilities A free framework for bug hunters to find vulnerabilities, write proof-of-concept exploits and play in Android. Use dynamic analysis on Android applications and devices for quicker security assessments. Share publicly known...

vTiger CRM 5.0.4 - Local File Inclusion

!/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: "The honest Open Source CRM" "vtiger CRM 5.0.4" Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf Tested on: Windows XP/Linux Ubuntu...

HTC HD Mini Gets Hacked, Now Runs Android !

The HTC HD Mini, also previously known as Photon, is pretty old as far as smartphones go--the Windows Mobile 6.5 phone was first released back in February 2010. So a XDA Developer member has given the cellphone a new lease of life by bringing Android and Linux OS to it. Forum member "Cotulla"...

http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-04

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-04 PR10-04 Directory traversal limited to file validation within Viva thumbs WordPress add-on Advisory publicly released: Tuesday, 21 December 2010 Vulnerability found: Thursday, 4 February 2010 Vendor informed: Monday, 8 Februar...

GeneralProducts (index.php?page=) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ==================================================================== GeneralProducts index.php?page= Local File Inclusion Vulnerability ==================================================================== » Title : GeneralProducts...

GeneralProducts Local File Inclusion

======================================================== GeneralProducts index.php?page= Local File Inclusion Vulnerability ======================================================== » Title : GeneralProducts index.php?page= Local File Inclusion Vulnerability » Language: PHP » Download:...

Design/Logic Flaw

/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses a weak hashing algorithm for the 1 administrator and 2 operator passwords, which makes it easier for local users to obtain sensitive...

Camtron CMNC-200 IP Camera Undocumented Default Accounts

Exploit for hardware platform in category web applications ======================================================== Camtron CMNC-200 IP Camera Undocumented Default Accounts ======================================================== The CMNC-200 IP Camera has undocumented default accounts on its Lin...

YOPS Remote Command Execution

DCA-00015 Software - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small SEDA-like HTTP server for Linux OS written in C. There are 7 stages accept, parse, launch, fetch, error, send and log, and pipes are used as interstage channels. Bug...

YOPS - Web Server Remote Command Execution

YOPS - Web Server Remote Command Execution DCA-00015 Software - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small SEDA-like HTTP server for Linux OS written in C. There are 7 stages accept, parse, launch, fetch, error, send and log, and...

YOPS Web Server Remote Command Execution

Exploit for windows platform in category remote exploits ======================================== YOPS Web Server Remote Command Execution ======================================== - YOPS Your Open Personal WEB Server Vendor Product Description - YOPS Your Own Personal WEB Server is a small...

Sandbox 2.0.2 - Local File Inclusion

Sandbox 2.0.2 - Local File Inclusion : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: +...

Sandbox v2.0.2 Local FIle Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Sandbox v2.0.2 Local FIle Inclusion Vulnerability ================================================= : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.co...

Sandbox 2.0.2 - Local File Inclusion

: Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com : ---------------------------------------------------------------------------- + file:index.php on line 75 + Code: + PoC:http://localhost/index.php?a=../../../../../etc/passwd%00...

linux/x86 kill all processes 9 bytes

Exploit for linux/x86 platform in category shellcode ==================================== linux/x86 kill all processes 9 bytes ==================================== ; linux/x86 kill all processes 9 bytes ; email protected ; 2010-01-14 section .text global start start: ; kill-1, SIGKILL; mov al, 37...

verlihub 0.9.8d-RC2 - Remote Command Execution

== verlihub Verlihub does not sanitize user input passed to the shell via its "trigger" mechanism. Furthermore, the Verlihub daemon can optionally be configured to run as root. This allows for the arbitrary execution of commands by users connected to the hub and, in the case of the daemon running...