XSRF (CSRF) in Webmatic

Vulnerability ID: HTB22570 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwebmatic.html Product: Webmatic Vendor: Valarsoft http://www.valarsoft.com/ Vulnerable Version: 3.0.5 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

XSS vulnerability in Auto CMS

Vulnerability ID: HTB22564 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinautocms.html Product: Auto CMS Vendor: Roberto Aleman http://ventics.com/autocms/ Vulnerable Version: 1.6 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: XSS Cross Site...

SQL injection vulnerability in TCMS

Vulnerability ID: HTB22576 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintcms2.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: SQL Injection Status: N...

Seagull v0.6.7 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== Seagull v0.6.7 SQL Injection Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

Seagull 0.6.7 - SQL Injection

1 1 0 Sweet the Algerian Haxxor 0 1 0 0 1 1 +Exploit Title: seagull-0.6.7 SQLinjection Vulnerabilitie 0 0 +Date: 29/08/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://seagullproject.org/ 0 0 +Download: 1 1 +Version: 0.6.7 and lesser 0 0 +Tested on: WinXp sp3 ...

Seagull 0.6.7 - SQL Injection

Seagull 0.6.7 - SQL Injection 1 1 0 Sweet the Algerian Haxxor 0 1 0 0 1 1 +Exploit Title: seagull-0.6.7 SQLinjection Vulnerabilitie 0 0 +Date: 29/08/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://seagullproject.org/ 0 0 +Download: 1 1 +Version: 0.6.7 and...

Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801

Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Apple CoreGraphics Preview Memory Corruption when parsing PDF files...

Hycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Thu 26 Aug 2010 07:53:22 PM EEST Vendor: http://www.hycus.com/ Download: http://www.hycus.com/download/hycuscms-1.0.1.zip --- -= CSRF PoC 1 - Change Admin Password =- Hycus CMS 1.0.1 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- Hycus CMS 1.0.1...

Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864

I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file CVE-2010-2864...

Nvidia Driver - 'nview.dll' DLL Hijacking

/ Nvidia Driver nview.dll Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.nvidia.com/Download/index.aspx?lang=en-us Details: Compile the following code and rename it to nview.dll and place file with one of the affected types in the same directory of the dll Affected...

Microsoft Group Convertor - 'imm.dll' DLL Hijacking

/ Greetz to :b0nd, Fbih2s,r45c4l,Charles ,j4ckh4x0r, punter,eberly, Charles, Dinesh Arora Exploit Title: Microsoft Group Convertor DLL Hijacking imm.dll Date: 25/08/2010 Author: Beenu Arora Tested on: Windows XP SP3 Vulnerable extensions: grp Compile and rename to imm.dll, create a file in the sa...

TechSmith Snagit 10 (Build 788) - dwmapi.dll DLL Hijacking

TechSmith Snagit 10 Build 788 - dwmapi.dll DLL Hijacking / TechSmith Snagit 10 Build 788 Dll Hijacking Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://www.techsmith.com/download/snagittrial.asp Details: Compile the following code and rename it to dwmapi.dl and place file with one of t...

Flash Movie Player 1.5 - File Magic Denial of Service

Flash Movie Player 1.5 - File Magic Denial of Service Flash Movie Player v1.5 File Magic Crash http://www.eolsoft.com/ http://www.eolsoft.com/freeware/flashmovieplayer/ Author: Matthew Bergin Website: http://berginpentesting.com Date: August 25, 2010 Description: Flash Movie Player is a free...

Media Player Classic 1.3.2189.0 - 'iacenc.dll' DLL Hijacking

/ Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types in the same directory of the dll Affected types: m2ts, m2t,...

Flash Movie Player 1.5 - File Magic Denial of Service

Flash Movie Player v1.5 File Magic Crash http://www.eolsoft.com/ http://www.eolsoft.com/freeware/flashmovieplayer/ Author: Matthew Bergin Website: http://berginpentesting.com Date: August 25, 2010 Description: Flash Movie Player is a free stand-alone player for ShockWave Flash SWF animations, bas...

AV Music Morpher Gold 5.0.38 - .m3u Denial of Service

AV Music Morpher Gold 5.0.38 - .m3u Denial of Service !/usr/bin/python Exploit Title: AV Music Morpher Gold .m3u Local Crash PoC Date: 08-20-2010 Author: b0telh0 Software Link: http://www.musicmorpher.com/download.php?product=musicgold Version: 5.0.38 Tested on: Windows XP SP3 pt-br VirtualBox .a...

SonicWALL E-Class SSL-VPN ActiveX Control Format String Overflow

-------------------------- NSOADV-2010-005 --------------------------- SonicWALL E-Class SSL-VPN ActiveX Control format string overflow 111101111 11111 00110 00110001111 111111 01 01 1 11111011111111 11111 0 11 01 0 11 1 1 111011001 11111111101 1 11 0110111 1 1111101111 1001 0 1 10 11 0 10 11...

XSS vulnerability in pimcore

Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...

Zomplog CMS 3.9 Cross Site Request Forgery / Cross Site Scripting

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22560 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple2.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...