Microsoft Windows - Escalate UAC Protection Bypass (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows...

Windows Escalate UAC Protection Bypass

Exploit for windows platform in category local exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Florida Digital Publisher Says It's the Source of Apple UDID Leak

The chief executive of a Florida-based digital publisher said Monday he believes his company is the source of a data leak of a million Apple unique device IDs — not the FBI as a hacktivist group claimed. “A little more than a week ago, BlueToad was the victim of a criminal cyber attack, which...

Fedora Update for apache-poi FEDORA-2012-10835

Check for the Version of apache-poi OpenVAS Vulnerability Test Fedora Update for apache-poi FEDORA-2012-10835 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RV Article Publisher Cross Site Request Forgery

Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

Endonesia 8.5 CMS Publisher Module SQL Injection

. \ || \ \ \ / \ /\ \ |/ \ | / \ | | / | Y Y / \ | \ \ /|| |||| / /| / / / / / Exploit Title: Endonesia 8.5 CMS Publiher Module Sql Injection Vulnerability Google Dork: Intext:"Powered by Endonesia 8.5" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ download Link :...

RV Article Publisher - Cross-Site Request Forgery

RV Article Publisher - Cross-Site Request Forgery Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

RV Article Publisher - Cross-Site Request Forgery

Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin...

Ad Manager Pro SQL Injection / Cross Site Scripting

----------------------------------------------------------- Ad Manager Pro Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/ad-manager-pro/ Demo - http://www.scripts-demo.com/admanagerpro/ ISRAEL...

[SECURITY] Fedora 17 Update: apache-poi-3.8-2.fc17

The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...

Yahoo Patches Vulnerability that Led to 450,000-Password Breach

Yahoo announced today it’s fixed the security hole that allowed a hacker group this week to post some 450,000 email addresses and passwords belonging to freelance writers. “We have taken swift action and have now fixed this vulnerability, deployed additional security measures for affected Yahoo!...

Ganesha Digital Library 4.0 - Multiple Vulnerabilities

Ganesha Digital Library 4.0 - Multiple Vulnerabilities ===================================================== Ganesha Digital Library 4.0 Multiple Vulnerabilities =====================================================...

Fedora Update for apache-poi FEDORA-2012-7683

Check for the Version of apache-poi OpenVAS Vulnerability Test Fedora Update for apache-poi FEDORA-2012-7683 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

WordPress Network Publisher Plugin 5.0.1 - Cross Site Scripting

WordPress Network Publisher plugin's "networkpubkey" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker...

WordPress Network Publisher 5.0.1 Cross Site Scripting

Hi We have used our tool, THAPS, to identify vulnerabilities in this WordPress plugin. We have confirmed at least one of the reported vulnerabilities and created a working exploit located below. Attached is one or more log files containing the output of our tool, identifying the location of the...

WordPress Plugin Network Publisher 5.0.1 - networkpub_key Cross-Site Scripting

WordPress Plugin Network Publisher 5.0.1 - networkpubkey Cross-Site Scripting source: https://www.securityfocus.com/bid/53516/info Network Publisher plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress Plugin Network Publisher 5.0.1 - 'networkpub_key' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53516/info Network Publisher plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CVE-2012-0543

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...

CVE-2012-0543

CVE-2012-0543 affects Oracle Fusion Middleware BI Publisher (XML Publisher) 10.1.3.4.1/10.1.3.4.2; an unspecified vulnerability in the BI Publisher Administration vector allows remote attackers to affect integrity. The supplied documents do not specify the root cause beyond this component, any co...