Smadav AntiVirus - Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana email protected / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download...

Multiple SQL Injection vulnerabilities in ClipBucket

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in ClipBucket, which can be exploited to perform SQL Injection attacks. 1 Multiple SQL Injections in ClipBucket: CVE-2012-5849 1.1 The vulnerability exists due to improper sanitation of input in multiple parameters within...

Joomla Component com_garyscookbook file upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comgaryscookbook file upload Author: Over-X email: email protected Vendor or Software Link: www.joomla.it Version: 242 Google dork: "inurl:comgaryscookbook" Tested on: win Xp...

Xivo 1.2 Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Xivo 1.2 Arbitrary File Download under root privileges =============================================================== Date: 6/11/2012 Exploit Author: Mr.Un1k0d3r Vendor Homepage: https://wiki.xivo.fr Software Link:...

Microsoft Internet Explorer 9 - Memory Corruption Crash (PoC)

Microsoft Internet Explorer 9 - Memory Corruption Crash PoC / settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; /...

Internet Explorer 9 Memory Corruption

/ settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; / http://0xffe4.org / ?...

Microsoft Internet Explorer 9 - Memory Corruption Crash (PoC)

/ settimelimit0; iniset'memorylimit', '300M'; if!fileexists"junk.htm" $string = ""; fileputcontents"junk.htm", $string; print "View the sourcecode of the iframe below right click - view source: \n"; print "\n"; for$i = 0; $i \n"; / http://0xffe4.org / ?...

dedeCMS latest injection vulnerability a gold-bug warning-the black bar safety net

Brief description: Since the parameters of the variables not be initialized testing and using the class reflection skills leads to plus\feedback.php in the variable $typeid presence of injection risk. Detailed description: Since the official has already released patches and vulnerabilities are no...

KMPlayer '.avi'文件本地拒绝服务漏洞

BUGTRAQ ID: 56322 KMPlayer是来自韩国的影音全能播放器，是从linux平台移植而来的，几乎可以播放您系统上所有的影音文件。 KMPlayer 3.0.0.1440及其他版本存在安全漏洞，本地攻击者可利用此漏洞使受影响应用崩溃。 0 KMPlayer 3.0.0.1440 厂商补丁： KMPlayer -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://kmplayer.kde.org/ !/usr/bin/perl Title : KmPlayer v3.0.0.1440 Local...

The Broadcom LAN chip BCM4325 AND BCM4329 denial of service vulnerability-vulnerability warning-the black bar safety net

This vulnerability is the Broadcom Wireless card firmware, the model for the BCM4325 and the BCM4329, the attacker can send specific wireless network packets causing a denial of service attack. A major influence on the equipment: BCM4325 Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 HTC Droid...

Microsoft Excel 2010 - Crash (PoC) (1)

Microsoft Excel 2010 - Crash PoC 1 Title : Microsoft Office Excel 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-27 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug :...

Aladdin Knowledge System Ltd - 'PrivAgent.ocx' ChooseFilePath Buffer Overflow

//Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+ '%u655d%ub8dc%u4fd6%uf619%udaf0%u51aa%uf500%u83b2%u7e62%u6020%u0b47%u54fc%u5f0c'+...

Microsoft Paint 5.1 Memory Corruption

!/usr/bin/perl Title : Microsoft Paint 5.1 memory corruption Version : build 2600.xpsp Service Pack3 Date : 2012-10-21 Vendor : http://www.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh Notice : for testing POC...

hMailServer 5.3.3 IMAP Remote Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: hMailServer 5.3.3 IMAP Remote Crash PoC Vendor Homepage: http://hmailserver.com Software Link: http://www.hmailserver.com/index.php?page=backgrounddownloadfile&downloadid=207 Version: hMailServer 5.3.3 - Build 1879 Tested on: -...

NASA Tri-Agency Climate Education (TrACE) 1.0 XSS

NASA Tri-Agency Climate Education TrACE v1.0 Multiple XSS Vulnerabilities Vendor: NASA Product web page: http://www.nasa.gov Affected version: 1.0 Summary: The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE...

NASA Tri-Agency Climate Education (TrACE) 1.0 SQL Injection

NASA Tri-Agency Climate Education TrACE v1.0 SQL Injection Vulnerability Vendor: NASA Product web page: http://www.nasa.gov Affected version: 1.0 Summary: The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE...

NASA Tri-Agency Climate Education (TrACE) v1.0 Multiple XSS Vulnerabilities

Summary The Tri-Agency Climate Education TrACE Catalog provides search and browse access to a catalog of educational products and resources. TrACE focuses on climate education resources that have been developed by initiatives funded through NASA, NOAA, and NSF, comprising a tri-agency collaborati...

Microsoft Office Picture Manager 2010 - Crash (PoC)

Title : Microsoft Office Picture Manager 2010 memory corruption Version : Microsoft Office professional Plus 2010 Crash : http://img715.imageshack.us/img715/7364/pocl.png Date : 2012-10-24 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter :...

Microsoft Office Picture Manager 2010 memory corruption

notice : for testing POC please run the Microsoft Office Picture Manager under a Debugger and then open the POC file Successful exploits can allow attackers to execute arbitrary code Title : Microsoft Office Picture Manager 2010 memory corruption Version : Microsoft Office professional Plus 2010...

Multiple vulnerabilities in BabyGekko

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in BabyGekko, which can be exploited to include local PHP files, perform SQL Injection and Cross-Site Scripting XSS attacks. 1 Multiple SQL Injections in BabyGekko: CVE-2012-5698 Two SQL injections exist in BabyGekko...