WordPress Denial of Service exploit

Hello 3APA3A! Here is my version of vnd's PoC https://vndh.net/note:wordpress-351-denial-service. This exploit is for Denial of Service vulnerability in WordPress 3.4 - 3.5.1. My version solves some issues in original PoC. Concerning this Denial of Service in WordPress. As I wrote last week in my...

CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

DEBIAN-CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

UBUNTU-CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

CVE-2013-2173

wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service CPU consumption via a crafted value of a certain wp-postpass cookie...

Wireless Disk PRO 2.3 iOS - Multiple Vulnerabilities

Title: ====== Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities Date: ===== 2013-02-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=883 VL-ID: ===== 883 Common Vulnerability Scoring System: ==================================== 6.2 Introduction: =============...

sudo -- Authentication bypass when clock is reset

Todd Miller reports: The flaw may allow someone with physical access to a machine that is not password-protected to run sudo commands without knowing the logged in user's password. On systems where sudo is the principal way of running commands as root, such as on Ubuntu and Mac OS X, there is a...

Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities

Document Title: =============== Wireless Disk PRO v2.3 iPad iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=883 Release Date: ============= 2013-02-25 Vulnerability Laboratory ID VL-ID: ==================================...

IBM Domino Password Protected DB Enumeration

It is possible to enumerate the password protected databases on the remote IBM Domino formerly IBM Lotus Domino Server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid59852; scriptversion"1.5";...

http-method-tamper NSE Script

Attempts to bypass password protected resources HTTP 401 status by performing HTTP verb tampering. If an array of paths to check is not set, it will crawl the web server and perform the check against any password protected resource that it finds. The script determines if the protected URI is...

ZeuS Source Code Leaked, Available for Sale !

ZeuS Source Code Leaked, Available for Sale ! The source is C++ and supposedly contains everything. The seller is asking for 5500 WebMoney/LibertyReserve for the full source code of version 2.0.8.9. The source code has been leaked but the archive is password-protected. Now there's a race to see w...

VU Mass Mailer Authentication Bypass

Exploit for php platform in category web applications ==================================== VU Mass Mailer Authentication Bypass ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Xerox WorkCentre Authorization Bypass Vulnerabilities (XRX10-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that is affected by two authorization bypass vulnerabilities : - The web interface reportedly includes a script named 'YoUgoTIt.php' that will calculate a checksum for a specified folder name that wil...

Broken Web Servers

The remote web server seems password protected or misconfigured. Further tests on it were disabled so that the whole scan is not slowed down. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid42799; scriptversion"$Revision: 1.5 $"; scriptcvsdate"$Date: 2011/08/17 16:19:4...

Microsoft's Police Forensic Tool Leaked to Bad Guys

Microsoft’s Computer Online Forensic Evidence Extractor COFEE has made it into the hands of pirates, and their virtual ships are distributing it. The COFEE application lets officers grab data from password-protected or encrypted sources. That means you can now break the law twice over: download t...

Microsoft IIS WebDAV Remote Authentication Bypass Vulnerability

Microsoft IIS Webserver with WebDAV Module is prone to remote authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Vulnerability

No description provided by source...

CVE-2008-6507

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...

CVE-2008-6507: Undefined Security Weakness

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...