Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation

Solaris Recommended Patch Cluster 6/19 local root on x86 Larry W. Cashdollar 7/3/2013 @larry0 If the system administrator is updating the system using update manager or smpatch multi user mode a local user could execute commands as root. This only affects x86 systems as this code resides under a...

Real Player <= 16.0.2.32 资源耗尽漏洞

CVECAN ID: CVE-2013-3299 RealPlayer是网上收听收看实时音频、视频和Flash的工具 Real Player = 16.0.2.32在实现上存在资源耗尽漏洞，在处理特制的HTML文件时，Real Player使用了该文件中的值控制循环操作，在使用该值之前未能正确验证，导致拒绝服务 0 Real Networks RealPlayer = 16.0.2.32 厂商补丁： Real Networks ------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

AVAST Internet Security Suite 8.0.1489 Local Code Injection

Title: ====== AVAST Internet Security Suite - Persistent Vulnerabilities Date: ===== 2013-06-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=969 VL-ID: ===== 969 Common Vulnerability Scoring System: ==================================== 3.4 Introduction: =============...

Realtek Sound Manager AvRack (.wav) - Crash PoC

Exploit for windows platform in category dos / poc junk="\x2E\x73\x6E\x64\x00\x00\x01\x18\x00\x00\x42\xDC\x00\x00\x00\x01" "\x00\x00\x1F\x40\x00\x00\x00\x00\x69\x61\x70\x65\x74\x75\x73\x2E" "\x61\x75\x00\x20\x22\x69\x61\x70\x65\x74\x75\x73\x2E\x61\x75\x22"...

Microsoft PowerPoint 2007 - Crash (PoC)

Microsoft PowerPoint 2007 - Crash PoC Title : Microsoft Office PowerPoint 2007 Crash PoC Date: 2013-01-12 Software Link: http://office.microsoft.com/ Author: Asesino04 Tested on: Windows XP SP2 Special Thanks To : Ness Oum El Bouaghi Bug Description: when you insert a sound to Microsoft office...

Fortigate Firewalls - Cross-Site Request Forgery

Vulnerability ID: CVE-2013-1414 Vulnerability Type: CSRF Cross-Site Request Forgery Product: All Fortigate Firewalls Vendor: Fortinet http://www.fortinet.com Vulnerable Version:...

VideoLAN VLC Media Player 2.0.7 - '.png' Crash (PoC)

!/usr/bin/python VLC Media Player 2.0.7 PNG Crash PoC Vendor Homepage: http://www.videolan.org/ Version: 2.0.7 Tested on: Windows 7 64-bit Author: Kevin Fujimoto Debug Information: Microsoft R Windows Debugger Version 6.12.0002.633 X86 Copyright c Microsoft Corporation. All rights reserved. wait...

AVAST Universal Core Installer - Multiple Vulnerabilities

Document Title: =============== AVAST Universal Core Installer - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=966 Release Date: ============= 2013-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 9...

Java Applet ProviderSkeleton Insecure Invoke Method

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' class Metasploit3 false EXPLOITSTRING =...

Novell Client 4.91 SP4 - 'nwfs.sys' Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Elemata CMS RC3.0 - global.php?id SQL Injection

Elemata CMS RC3.0 - global.php?id SQL Injection Exploit Title : Elemata CMS RC3.0 SQL Injection Date : 23 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://www.elemata.com/ Software Link :...

PEiD 0.95 - Memory Corruption POC

Exploit for windows platform in category dos / poc Title: PEiD v0.95 Memory Corruption About PEiD : PEiD is an intuitive application that relies on its user-friendly interface to detect packers, cryptors and compilers found in PE executable files. Very popular among malware researchers for...

PEiD 0.95 - Memory Corruption (PoC)

PEiD 0.95 - Memory Corruption PoC Title: PEiD v0.95 Memory Corruption About PEiD : PEiD is an intuitive application that relies on its user-friendly interface to detect packers, cryptors and compilers found in PE executable files. Very popular among malware researchers for detection of packers /...

TP-Link Print Server TL PS110U Information Enumeration

Exploit Title: TP-Link Print Server Sensitive Information Enumeration Exploit Author: SANTHO Vendor Homepage: http://www.tp-link.com Software Link: http://www.tp-link.com/en/products/details/?model=TL-PS110U Version: TL PS110U TP-Link TL PS110U Print Server runs telnet service which enables an...

Syslog Server 1.2.3 - Crash PoC

Exploit for windows platform in category dos / poc This software suffers validation errors throughout the basic protocol implementation making it possible to cause overflows, type mismatches and so on. Here is a type mismatch crash: echo "pwn"|nc -u 192.168.200.20 514 0day.today 2018-04-05...

Fobuc Guestbook 0.9 - SQL Injection

Fobuc Guestbook 0.9 - SQL Injection Exploit Title : Fobuc Guestbook 0.9 SQL Injection Date : 11 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://sourceforge.net/projects/fobuc/ Software Link :...

NanoBB 0.7 - Multiple Vulnerabilities

Exploit Title : NanoBB 0.7 Multiple Vulnerabilities Date : 10 June 2013 Exploit Author : CWH Underground Site : www.2600.in.th Vendor Homepage : http://nanobb.sourceforge.net/ Software Link : heanet.dl.sourceforge.net/project/nanobb/v0.7.zip Version : 0.7 Tested on : Window and Linux...

Exim and Dovecot Insecure Configuration Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Exim and Dovecot Insecure Configurati...

HtmlCommentBox Cross Site Scripting

Exploit Title: HtmlCommentBox Multiple Vulnerabilities Release Date: 01/06/2013 Author: Rafay Baloch And Deepankar Arora Website: www.rafayhackingarticles.net Contact: www.rafayhackingarticles.net Vendor: www.htmlcommentbox.com Versions Affected: All Google Dork: intext:"by HtmlCommentBox" 1...

CodeBlocks 12.11 (OSX) - Crash (PoC)

CodeBlocks 12.11 OSX - Crash PoC Exploit Title: CodeBlocks 12.11 Mac OS X Crash POC Date: 27-05-2013 Exploit Author: ariarat Vendor Homepage: http://www.codeblocks.org Software Link: http://sourceforge.net/projects/codeblocks/files/Binaries/12.11/MacOS/codeblocks-12.11-mac.dmg Version: 12.11 Test...