Pivot <= 1.30 RC2 Privileges Escalation/Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Pivot = 1.30 RC2 privileges escalation / remote commands execution exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dorks: \Powered byPivot\n; echo version specific:...

Pivot 1.40.6 - Remote Arbitrary File Deletion Vulnerability

No description provided by source. Pivot 1.40.6 Remote File Delete Alfons Luja Vuln : extensions/bbclonetools/hrconf.php line 20 ... $bbclonedebug = false; //is never change ... ========================================================= extensions/bbclonetools/count.php ... if $GETrefkey!= &&...

Pivot 1.0 - Remote module_db.PHP File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10553/info It has been reported that Pivot is affected by a remote file include vulnerability contained within the moduledb.php script. This issue is due to a failure of the application to properly sanitize user-supplied...

Easy File Management Web Server v5.3 - UserID Remote Buffer Overflow (ROP)

No description provided by source. !/usr/bin/python Exploit Title: Easy File Management Web Server v5.3 - USERID Remote Buffer Overflow ROP Version: 5.3 Date: 2014-05-31 Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link: http://www.efssoft.com/ Tested on:...

BigAnt Server 2.52 SP5 - SEH Stack Overflow ROP-based exploit (ASLR + DEP bypass)

No description provided by source. Exploit Title: BigAnt Server 2.52 SP5 SEH Stack Overflow ROP-based exploit ASLR + DEP bypass Date: 03/11/2012 Exploit Author: Lorenzo Cantoni Vendor Homepage: http://www.bigantsoft.com/ Version: BigAnt Console 2.52 SP5 Tested on: Windows 7 SP0 x86 Italian -...

pivot 1.40.4-7 Multiple Vulnerabilities

No description provided by source. Pivot - XSS and HTML Injection Vulnerabilities Versions Affected: 1.40.4 and 1.40.7 22nd March 2009 newest Info: Pivot is a web-based tool to help you maintain dynamic sites, like weblogs or online journals. Pivot is released under the GPL so it is completely fr...

openSUSE Security Update : libreoffice (openSUSE-SU-2012:0428-1)

updated to libreoffice-3.4.5.5 SUSE 3.4.5-rc3 : - extras - add SUSE color palette fate312645 - filters - crash when loading embedded elements bnc693238 - crash when importing an empty paragraph rh667082 - writer - do not use an invalidated iterator fdo46337 - updated to libreoffice-3.4.5.4 SUSE...

[SPF v0.1.7] Smartphone Pentest Framework - Support of the SMS shell pivot

The smartphone penetration testing framework, the result of a DARPA Cyber Fast Track project, aims to provide an open source toolkit that addresses the many facets of assessing the security posture of these devices. We will look at the functionality of the framework including information gatherin...

Firebird - Relational Database CNCT Group Number Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Firebird Relational Database CNCT Group Number Buffer Overflow', 'Description' = %q This module exploits a vulnerability in...

Firefox XMLSerializer Use After Free

This module exploits a vulnerability found on Firefox 17.0 use exploit/windows/browser/mozilla/firefoxxmlserializer msf undefinedfirefoxxmlserializer show actions ...actions... msf undefinedfirefoxxmlserializer set ACTION msf undefinedfirefoxxmlserializer show options ...show and set options... m...

Enterasys NetSight nssyslogd.exe Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Enterasys NetSight nssyslogd.exe Buff...

Microsoft Office Excel ReadAV Arbitrary Code Execution

!/usr/bin/perl Microsoft Office Excel ReadAV Arbitrary Code Execution Author: Jean Pascal Pereira [email protected] Vendor URI: http://office.microsoft.com Vendor Description: Microsoft Excel is a commercial spreadsheet application written and distributed by Microsoft for Microsoft Windows and Ma...

Sitecom Home Storage Center Directory Traversal

Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= - System Access - Exposure of...

ComSndFTP v1.3.7 Beta USER Buffer Overflow

Exploit for windows platform in category remote exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

Quest InTrust Annotation Objects Uninitialized Pointer

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

SuSE 11.1 Security Update : LibreOffice (SAT Patch Number 6003)

The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling CVE-2012-1149 This update also fixes the following non-security issues : Extras : - add SUSE color palette fate312645 Filters : - crash when loading embedded...

SuSE 10 Security Update : LibreOffice (ZYPP Patch Number 8022)

LibreOffice 3.4.5 includes many fixes over the previous LibreOffice 3.4.2.6 update. The update fixes the following security issues : - 740453: Vulnerability in RDF handling. CVE-2012-0037 - 752595: overflow in jpeg handling. CVE-2012-1149 - 736146: buffer overflow in the build in icu copy 736146...

PXE Exploit server

PXE exploit server. Remote exploit for windows platform $Id: pxexploit.rb 13493 2011-08-05 17:10:27Z scriptjunkie $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

PXE exploit server

Exploit for windows platform in category remote exploits $Id: pxexploit.rb 13493 2011-08-05 17:10:27Z scriptjunkie $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

MPlayer - '.SAMI' Subtitle File Buffer Overflow (DEP Bypass) (Metasploit)

require 'msf/core' class MetasploitModule 'Mplayer SAMI Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in SMPlayer 0.6.9 Permanent DEP /AlwaysON. The overflow is triggered during the parsing of an overly long string found in a malicious SAMI subtitle...