Microsoft Windows Media Player 11.0.5721.5230 - Memory Corruption (PoC)

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: Windows Media Player 11.0.5721.5230 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://windows.microsoft.com/fr-FR/windows/windows-media-player + Friendly Sites:...

jetVideo 8.1.1 Basic Local Crash Proof Of Concept

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: jetVideo 8.1.1 Basic .wav Local Crash PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.jetaudio.com/download/jetvideo.html + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...

BigDump 0.35b - Arbitrary File Upload

BigDump 0.35b - Arbitrary File Upload + Arbitrary Upload on BigDump v0.35b + Date: 23/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.ozerov.de/bigdump/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: bigdump.php +...

GOM Media Player (GOMMP) 2.2.56.5183 - Memory Corruption (PoC)

GOM Media Player GOMMP 2.2.56.5183 - Memory Corruption PoC !/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOMMP 2.2.56.5183 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://player.gomlab.com/eng/ + Friendly Sites:...

jetVideo 8.1.1 - Basic '.wav' Local Crash (PoC)

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: jetVideo 8.1.1 Basic .wav Local Crash PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://www.jetaudio.com/download/jetvideo.html + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...

GOM Media Player (GOMMP) 2.2.56.5183 - Memory Corruption (PoC)

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOMMP 2.2.56.5183 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://player.gomlab.com/eng/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R print"" print" Title:...

GOM Video Converter 1.1.0.60 Memory Corruption

!/usr/bin/python + Author: TUNISIAN CYBER + Exploit Title: GOM Video Converter 1.1.0.60 Memory Corruption PoC + Date: 22-03-2014 + Category: DoS/PoC + Tested on: WinXp/Windows 7 Pro + Vendor: http://converter.gomlab.com/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R print"" prin...

innoEDIT 6.2 Remote Command Execution

Remote Comand Execution on innoEDIT + Date: 21/03/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage : http://www.inno.com.mx/innoedit.htm + Contact: [email protected] + Tested on Windows 7 and Linux + Vulnerable File: innoedit.cgi + Version : Version 6.2 + Exploit:...

D-Link DIR-600L AX 1.00 - Cross-Site Request Forgery

D-Link DIR-600L AX 1.00 - Cross-Site Request Forgery Exploit Title: Dlink DIR-600L Hardware Version AX Firmware Version 1.00 CSRF Vulnerability Google Dork: N/A Date: 20/03/2014 Exploit Author: Dhruv Shah Vendor Homepage:...

Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20140311 Date: 11th March 2014 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: QNX Neutrino RTOS 6.5.0...

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service

MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service http://cxsecurity.com/ YouTube Kaspersky PoC: https://www.youtube.com/watch?v=joa9IS7U90 ---- 0. Where is the problem? ---- Some time ago I have reported vulnerabilities in regcomp in BSD implementation CVE-2011-3336 and GNU li...

Joomla Multi Calendar 4.0.2 Cross Site Scripting

Hello, Multiple cross-site scripting XSS vulnerabilities in Multi calendar 4.0.2 component for Joomla! allow remote attackers to inject arbitrary web script or HTML code via 1 the calid parameter to index.php or 2 the paletteDefault parameter to index.php. File: /tmpl/layouteditevent.php Lines: 1...

ECSHOP最新版SQL注入漏洞

简要描述： 昨天上午没事，闲着 下载了最新版的ecshop 想挑战挑战自己... 下午 客服美眉打电话来,询问下载ECSHOP的目的，哈哈.. 别说 声音挺甜的... 为了抢我的IPAD ，看来还必须赚RANK啊... 详细说明： 注：需要网店店主权限 1 漏洞代码 这个漏洞比较简单，也许是开发人员疏忽了吧... if isnumeric$POST'lastmodifysttime' && isnumeric$POST'lastmodifyentime' $sql = 'SELECT COUNT AS count' . ' FROM '...

GNUboard SQL Injection

========================== Advisory: GNUboard SQL Injection Vulnerability Author: [email protected] Affected Version: GNUboard5the latest version Vendor URL: http://sir.co.kr/ Vendor Status: UnfixedI know little about Korean，so i do not know how to describe this vul to the vendor...

Phabricator: OAuth Stealing Attack (New)

Hi Evan, I found a new and more dangerous way to steal phabricator facebooks oauth tokens,codes, In this case, I exploited the behavior of Phabricator OAuth Dialog, If you provide a differnet scope in phabricator OAuth Dialog...

QNX Neutrino RTOS 6.5.0 Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20140311 Date: 11th March 2014 Author: Tim Brown URL: / Product: QNX Neutrino RTOS 6.5.0 Vendor: BlackBerry Risk: Medium Summary This advisory concerns the forced disclosure of 2 vulnerabilities that were previous...

Phabricator: OAuth access_token stealing in Phabricator

Hi, I found that an attacker is able to steal accesstokens of facebook users via Phabricator App 184510521580034. when users login to phabricator, they can choose to login via Facebook https://secure.phabricator.com/login/ attaching pic, In this case an attacker is able to exploit this behavior t...

GoldMP4Player Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python coding: utf-8 Exploit Title: GoldMP4Player Buffer Overflow SEH Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Date: 27.02.2014 Tested on: Windows Win 7 En Howto / Notes: open the...

Webuzo 2.1.3 - Multiple Vulnerabilities

Exploit Title: Webuzo Multiple Vulnerabilities Date: 7 October 2013 Exploit Author: Mahendra Vendor Homepage: www.webuzo.com Software Link: http://downloads.webuzo.com/va.php Version: 2.1.3, other version might be vulnerable. Tested on: CentOS release 6.2 FINAL CVE : CVE-2013-6041, CVE-2013-6042,...

GoldMP4Player 3.3 Buffer Overflow

!/usr/bin/python coding: utf-8 Exploit Title: GoldMP4Player Buffer Overflow SEH Software Link: http://download.cnet.com/GoldMP4Player/3000-21394-10967424.html Version: 3.3 Date: 27.02.2014 Tested on: Windows Win 7 En Howto / Notes: open the URL in filename via File - Open Flash URL\n";...