12884 matches found
Disconnect.me Mac OS X Client <= 2.0 - Local Privilege Escalation Vulnerability
Exploit for macOS platform in category local exploits Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG...
Extmail /cgi/env.cgi 信息泄露
Extmail /cgi/env.cgi 敏感信息泄露POC:http://xxx.com/extmail/cgi/env.cgi...
PHP 5.6 GMP unserialize() Use-After-Free
Use After Free Vulnerability in unserialize with GMP Taoguang Chen - Write Date: 2015.8.17 - Release Date: 2015.9.4 A use-after-free vulnerability was discovered in unserialize with GMP object's deserialization that can be abused for leaking arbitrary memory blocks or execute arbitrary code...
Dedecms远程写文件漏洞
来源链接：http://seclists.org/fulldisclosure/2015/Jun/47 http://blog.nsfocus.net/dedecms-write-file-vuln/ 0x00 漏洞概述2015年6月17日seclists网站上公布了Dedecms的一个远程getshell漏洞细节，造成这个漏洞的原因也有些让人玩味。官方已在2015年6月18日发布了修复版本，下载链接：http://www.dedecms.com/products/dedecms/downloads/本篇文章将分析这个漏洞的成因，并给出触发利用方法。0x01...
Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation
Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKqG Disconnect+Desktop.pkg: sha256 =...
Advertising software use the Apple OS X system vulnerabilities to steal data-vulnerability warning-the black bar safety net
! Malwarebytes security researchers found an advertisement software installation program is accessing MAC OS X's password management system Keychain to. In July, researchers have identified the Mac OS X operating system of a local elevation of Privilege（LPF）vulnerabilities. Experts have found tha...
Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation
Disconnect.me Mac OSX Client 2.0 - Local Privilege Escalation Disconnect.me is the search engine entrusted by the Tor Browser. Unfortunately, the Mac OS X client has an LPE to root vulnerability 0day. Original Download = v2.0: https://disconnect.me/premium/mac Archived Download: http://d-h.st/LKq...
Virtual Freer Authentication Bypass
Title : Virtual Freer 1.57 - Authentication Bypass Tested : CentOS / php Vendor Homepage: http://freer.ir Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes , reza.esparghamatgmaildotcom Website : www.reza.es Twitter : https://twitter.com/rezesp...
Shopify Bug Bounty #8 - (FilePath) Cross Site Vulnerability
Document Title: =============== Shopify Bug Bounty 8 - FilePath Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1592 Release Date: ============= 2015-09-03 Vulnerability Laboratory ID VL-ID: ====================================...
SphereFTP Server 2.0 Crash
!/usr/bin/python Exploit Title: SphereFTP Server v2.0 Remote Crash PoC Date: 2015-09-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.menasoft.com/blog/?p=32 Software Link: http://www.menasoft.com/sphereftp/sphereftpwin32v20.zip Version: 2.0...
SphereFTP Server 2.0 - Crash (PoC)
!/usr/bin/python Exploit Title: SphereFTP Server v2.0 Remote Crash PoC Date: 2015-09-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.menasoft.com/blog/?p=32 Software Link: http://www.menasoft.com/sphereftp/sphereftpwin32v20.zip Version: 2.0...
SphereFTP Server 2.0 - Crash PoC
Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: SphereFTP Server v2.0 Remote Crash PoC Date: 2015-09-02 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.menasoft.com/blog/?p=32 Software Link:...
SphereFTP Server 2.0 - Crash (PoC)
SphereFTP Server 2.0 - Crash PoC !/usr/bin/python Exploit Title: SphereFTP Server v2.0 Remote Crash PoC Date: 2015-09-02 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.menasoft.com/blog/?p=32 Software Link:...
Ganglia Web Frontend < 3.5.1 - PHP Code Execution
Assuming that ganglia is installed on the target machine at this path:/var/www/html/ganglia/ 2. Assuming the attacker has minimal access to the target machine and can write to "/tmp". There are several methods where a remote attacker can also trigger daemons or other system processes to create...
Mpxplay MultiMedia Commander 2.00a - .m3u Stack Buffer Overflow (PoC)
Mpxplay MultiMedia Commander 2.00a - .m3u Stack Buffer Overflow PoC Exploit Title: Mpxplay Multimedia Commander Stack-based BOF Date: 9/1/2015 Exploit Author: UnN0n Software Link: http://sourceforge.net/p/mpxplay/activity?source=projectactivity Version: V2.00a Tested on: Windows 7 x8632 BIT Steps...
WordPress sourceAFRICA 0.1.3 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress sourceAFRICA Plugin Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : https://wordpress.org/plugins/sourceafrica/ Date: 2015-08-29 Tested On : Elementary Os - Firefox Software Link...
Mpxplay MultiMedia Commander 2.00a - '.m3u' Stack Buffer Overflow (PoC)
Exploit Title: Mpxplay Multimedia Commander Stack-based BOF Date: 9/1/2015 Exploit Author: UnN0n Software Link: http://sourceforge.net/p/mpxplay/activity?source=projectactivity Version: V2.00a Tested on: Windows 7 x8632 BIT Steps to Produce the Crash: 1- open 'mpxpmmc.exe'. 2- Browser Crash.m3u i...
Ganglia Web Frontend 3.5.1 - PHP Code Execution
Ganglia Web Frontend 3.5.1 - PHP Code Execution...
Ganglia Web Frontend PHP Code Execution
...
Ganglia Web Frontend < 3.5.1 - PHP Code Execution Exploit
Exploit for php platform in category web applications ?php / Author : Andrei Costin andrei theATsign firmware theDOTsign re Desc : CVE-2012-3448 PoC Details : This PoC will create a dummy file in the /tmp folder and will copy /etc/passwd to /tmp. To modify the attack payload, modify the code...