GOM Player 2.1.28.5039 - AVI Denial of Service (PoC)

GOM Player 2.1.28.5039 - AVI Denial of Service PoC done by BraniX www.hackers.org.pl found: 2011.03.29 published: 2011.03.29 tested on: Windows XP SP3 Home Edition App: GOM Player 2.1.28.5039 App Url: http://download.cnet.com/GOM-Media-Player/3000-136324-10551786.html GOM.exe MD5:...

Rumble 0.25.2232 Denial Of Service

------------------------------------------------------------------------ Software................Rumble 0.25.2232 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://humbedooh.users.sourceforge.net/ Discovery Date..........3/27/2011 Tested...

wodWebServer.NET 1.3.3 - Directory Traversal

------------------------------------------------------------------------ Software................wodWebServer.NET 1.3.3 Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://www.weonlydo.com/WebServer.NET/web-http-net-server.asp Vendor...

HTB22898: XSRF (CSRF) in Ripe website manager

Vulnerability ID: HTB22898 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor Notification: 10 March 2011...

HTB22895: XSS vulnerability in Ripe website manager

Vulnerability ID: HTB22895 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor Notification: 10 March 2011...

HTB22902: XSS in SyndeoCMS

Vulnerability ID: HTB22902 Reference: http://www.htbridge.ch/advisory/xssinsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium...

SyndeoCMS 2.8.02 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type: SQL injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking &...

HTB22897: SQL injection vulnerability in Ripe website manager

Vulnerability ID: HTB22897 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor Notification: 10...

HTB22900: Multiple XSS vulnerabilities in SyndeoCMS

Vulnerability ID: HTB22900 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type: XSS Cross Site Scriptin...

netjukebox 5.25 Cross Site Scripting

------------------------------------------------------------------------ Software................netjukebox 5.25 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.netjukebox.nl/ Vendor Contact Date.....3/10/2011 Disclosure...

Oracle fcgi-bin/echo Cross Site Scripting

Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...

XSS in Oracle default fcgi-bin/echo

Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...

CMS Lokomedia 1.5 Arbitary File Upload Vulnerability

Exploit for php platform in category web applications Software: CMS Lokomedia Vendor: http://bukulokomedia.com/home Vuln Type: Arbitary file upload Download link: http://bukulokomedia.com/lokomedia-1.5.rar Author: eidelweiss contact: eidelweissatwindowslivedotcom Home: www.eidelweiss.info DORK: u...

Web Poll Pro 1.0.3 Cross Site Scripting

Product: Web Poll Pro Vendor: http://www.got.my Vulnerable Version: 1.0.3 and probably prior versions Vulnerability Type: Stored XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

VLC Media Player ".ape"文件拒绝服务漏洞

BUGTRAQ ID: 46868 VLC Media Player是一款免费的媒体播放器。 VLC Media Player在处理".ape"文件时存在远程拒绝服务漏洞，攻击者可利用此漏洞使受影响应用程序崩溃，造成拒绝服务。 VideoLAN VLC Media Player 1.0.5 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ KedAns-Dz （）提供了如下测试方法： !/usr/bin/perl Title : VLC medi...

LotusCMS 3.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech...

Fake Webcam 6.1 - Local Crash (PoC)

!/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec team, inj3ct0r...

LotusCMS 3.0.3 - Multiple Vulnerabilities

LotusCMS 3.0.3 - Multiple Vulnerabilities Vulnerability ID: HTB22886 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011...

b2evolution 4.0.3 - Persistent Cross-Site Scripting

Source: http://packetstormsecurity.org/files/view/99362/b2evolution403-xss.txt ------------------------------------------------------------------------ Software................b2evolution 4.0.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5...

VideoLAN VLC Media Player 1.0.5 - '.ape' Denial of Service

source: https://www.securityfocus.com/bid/46868/info VLC Media Player is prone to a denial-of-service vulnerability. Successful exploits may allow attackers to crash the affected application, denying service to legitimate users. VLC Media Player 1.0.5 is vulnerable; other versions may also be...