MS-DOS: Arbitrary command execution in MS-DOS

Versions 1.1 and 2.0 of MS-DOS allow a malicious actor to execute arbitrary system commands via the main application interface. Prerequisites: MS-DOS 1.1 or MS-DOS 2.0 installation Input device e.g. keyboard Steps to reproduce: Enter the command mode Type VER to make sure that the system is on of...

OkCupid: Xss high issue in www.okcupid.com main domain in users signup page

Xss high issue in www.okcupid.com main domain in users signup page Poc url : you can use any url below for reproduce xss issue https://www.okcupid.com/signup?nextpage=%2Fsignup%2Fpaths%2Fsplashnewinga%2F3.html4ee57alert"xss by...

FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability

Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

Wordpress Templatic Themes CSRF File Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Templatic Themes CSRF File Upload Vulnerability Monetize Uploader Author : Jje Incovers Date : 31/03/2014 Category : Web Applications Type : PHP Vendor : http://templatic.com/ Download :...

AudioCoder 0.8.29 - Memory Corruption (SEH)

Exploit for windows platform in category local exploits Exploit Title: AudioCoder-0.8.29 Memory Corruption to Code executionSEH Author: sajith version: AudioCoder-0.8.29 vulnerable app link: http://www.mediacoderhq.com/getfile.htm?site=dl.mediacoderhq.com&file=AudioCoder-0.8.29.exe Tested in...

FTP Drive + HTTP 1.0.4 iOS - Code Execution

FTP Drive + HTTP 1.0.4 iOS - Code Execution Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID...

Microsoft Windows Media Player '.wav'文件内存破坏漏洞

Bugtraq ID:66403 Microsoft Windows Media Player是一款微软开发的媒体播放程序。 Microsoft Windows Media Player处理'.wav'文件存在内存破坏漏洞，允许攻击者利用漏洞构建恶意文件，诱使用户解析，可使应用程序崩溃或执行任意代码。 0 Microsoft Windows Media Player 11.0.5721.5230 目前没有详细解决方案提供： ttp://windows.microsoft.com/fr-FR/windows/windows-media-player !/usr/bin/python +...

FTP Drive + HTTP 1.0.4 iOS - Code Execution

Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID: ====================================...

D-Link DIR-600L跨站请求伪造漏洞

D-Link DIR-600L是款无线路由器产品。 D-Link DIR-600L修订版A1固件版本1.0、修订版B1固件版本2.0，没有正确检查某些请求的合法性，这可使某些用户通过HTTP请求执行未授权操作。 0 D-Link DIR-600L 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com/ Exploit Title: Dlink DIR-600L Hardware Version AX Firmware Version 1.00 CSRF Vulnerability Google Dork:...

Jorjweb "id" SQL注入漏洞

Jorjweb是一款基于WEB的应用。 Jorjweb ajedrez47/Paginas/infotorneo.php不正确过滤用户提交给"id"参数的数据，允许远程攻击者利用漏洞提交特殊的SQL查询，可操作或获取数据库数据。 0 Jorjweb 目前没有详细解决方案提供： http://www.jorjweb.com/ PoC: http://jorjweb.localhost:8080/ajedrez47/Paginas/infotorneo.php?id=REMOTE SQL-INJECTION WEB VULNERABILITY!-- Demo Urls:...

GOMMP 2.2.56.5183 Memory Corruption PoC

Usage Info cmdpoc.py !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOMMP 2.2.56.5183 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://player.gomlab.com/eng/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...

jetVideo 8.1.1 Basic (.wav) Local Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: jetVideo 8.1.1 Basic .wav Local Crash PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.jetaudio.com/download/jetvideo.html + Friendly Sites...

FreePBX config.php Remote Code Execution Vulnerability

This Metasploit module exploits a vulnerability found in FreePBX version 2.9, 2.10, and 2.11. It's possible to inject arbitrary PHP functions and commands in the "/admin/config.php" parameters "function" and "args". This module requires Metasploit: http//metasploit.com/download Current source:...

Windows Media Player 11.0.5721.5230 Memory Corruption PoC

Exploit for windows platform in category dos / poc !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Windows Media Player 11.0.5721.5230 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor:...

Light Audio Player 1.0.14 Memory Corruption PoC

Usage Info cmdPoc.py Open your file.wav with the software. !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Light Audio Player 1.0.14 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor:...

PHP Login Script 2.0 Cross Site Scripting

Cross Site Scripting on PHP Login Script v2.0 + Date: 24/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://php-login-script.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php + Version: v2.0 + Exploit :...

jetVideo 8.1.1 - Basic .wav Local Crash (PoC)

jetVideo 8.1.1 - Basic .wav Local Crash PoC !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: jetVideo 8.1.1 Basic .wav Local Crash PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.jetaudio.com/download/jetvideo.html + Friendly Sites:...

Light Audio Player 1.0.14 - Memory Corruption (PoC)

Light Audio Player 1.0.14 - Memory Corruption PoC !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Light Audio Player 1.0.14 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor:...

Windows Media Player 11.0.5721.5230 Memory Corruption

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Windows Media Player 11.0.5721.5230 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://windows.microsoft.com/fr-FR/windows/windows-media-player + Friendly Sites:...

Microsoft Windows Media Player 11.0.5721.5230 - Memory Corruption (PoC)

Microsoft Windows Media Player 11.0.5721.5230 - Memory Corruption PoC !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Windows Media Player 11.0.5721.5230 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor:...