Livejournal.com Cross Site Scripting

Exploit Title: Livejournal.com Cross Site Scripting Date: 27.02.2012 Author: Sony Software Link: http://www.livejournal.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/livejournalcom-cross-site-scripting.html...

Mozilla Firefox 4.0.1 - 'Array.reduceRight()' Remote Overflow

function hexx var y = x.toString16; y = "0x"+y; return y; function itoai return String.fromCharCodei; // n - length in bytes 1 unicode char = 2 bytes function puffx, n whilex.length n x += x; return x.substring0,n; function arr2hextab var s = ""; forvar i in tab x = tabi; x = x.toString16;...

Sagem F@ST 2604 ADSL Router - Cross-Site Request Forgery

================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title: Sagem F@ST 2604 CSRF Vulnerability ADSL Router Author: KinG...

Facebook Hacking - Student jailed for eight months

Facebook Hacking - Student jailed for eight months 26-year-old Glenn Steven Mangham, a student in the UK, has been sentenced to eight months in prison for hacking into Facebook from his bedroom at his parents house. Facebook spent $200,000 £126,400 dealing with Mangham's crime, which triggered a...

Stikom Library SQL Injection

Exploit Title: STIKOM Library SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website: http://library.stikom.edu/ Date : 14.02.2012 Platform : Php Demos Site : library.stikom.edu/informasi/detail-gematika.php?id=9SQL http://digilib.stikom.edu/content.php?type=10SQL...

Kayako SupportSuite 3.x <= 3.70.02 Multiple Vulnerabilities

The remote host contains a version of Kayako SupportSuite 3.x that is equal to or earlier than 3.70.02 and is, therefore, affected by multiple vulnerabilities : - Numerous cross-site scripting issues exist in the script 'staff/index.php' and in the 'LiveSupport' module. PT-2011-01, PT-2011-04 - A...

EMC Celerra Control Station Default Credentials

The remote host appears to be an EMC Celerra control station. Such devices come with two well known default credentials which give full control on the configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

OS Identification : SMTP

Nessus was able to identify the remote operating system based on the banner reported by the mail server running on it. C Tenable, Inc. include"compat.inc"; if description scriptid57915; scriptversion"2.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/31";...

UNIX Gather .fetchmailrc Credentials

Post Module to obtain credentials saved for IMAP, POP and other mail retrieval protocols in fetchmail's .fetchmailrc This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UNIX Gather .fetchmailrc...

Android Webkit XSS / Cross Domain Issues

Android Multiple Vulnerabilities Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2012/2/8 References: http://www.80vul.com/android/android-0days.txt Ph4nt0m Webzine 0x06 has been releasedhttp://www.80vul.com/webzine0x06/,there three papers on the android application security about the...

Debian DSA-2399-2 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1938 The UNIX socket handling allowed attackers to trigger a buffer overflow via a long path name. - CVE-2011-2483 The...

Apache httpOnly Cookie Disclosure(CVE-2012-0053)

No description provided by source. // Source: https://gist.github.com/1955a1c28324d4724b7b/7fe51f2a66c1d4a40a736540b3ad3fde02b7fb08 // Most browsers limit cookies to 4k characters, so we need multiple function setCookies good // Construct string for cookie value var str = ""; for var i=0; i 819;...

Adobe Flash Player MP4 SequenceParameterSetNALUnit Code Execution

Exploit for windows platform in category remote exploits Abysssec Public Exploit CVE-2011-2140 This exploit tested on Adobe Flash Player = 10.3.181.34 XP sp3 twitter : @abysssec contact : info at abysssec.com...

Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution

Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution Abysssec Public Exploit CVE-2011-2140 This exploit tested on Adobe Flash Player = 10.3.181.34 XP sp3 twitter : @abysssec contact : info at abysssec.com...

HostBill App 2.3 - Remote Code Injection

HostBill App 2.3 - Remote Code Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah, The Most Beneficent, The Most Merciful-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: suffering from RemotE injection php code Vendor:hostbillapp.com + Software:HostBill + Version : v2.3 + author:Dr.DaShE TEAM:...

SirmaNET Web Design SQL Injection

Exploit Title: SirmaNET Web Design SQL Injection Vulnerability Date: 09/01/2012 - 03.04 Author: 3spi0n Software Website: www.sirmanet.com Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Demo Sites: www.yigitemlakfinans.com/index.php?sayfa=emlaklar.php&kid1=63" SQ...

linux/x86 - port bind shellcode 84 bytes

Title : Shellcode - porT bind 84 bytes Author :TrOoN E-mail : email protected | www.facebook.com/fysl.fyslm Home : city 617 logts : Draria . algeria Web Site : www.1337day.com platform :Linux/x86 | uBuntU Fr Type : local exploit /SHELL CODE /ETc... 8048304: 6a 66 push $0x66 8048306: 58 pop %eax...

linux/x86 - netcat : connect back port 8081 - 77 bytes

Title : Linux/x86 - netcat : connect back port 8081 - 76 bytes Author :TrOoN E-mail : email protected | www.facebook.com/fysl.fyslm Home : city 617 logts : Draria . algeria Web Site : www.1337day.com platform :Linux/x86 | backBox | uBuntU Fr Type : local exploit /SHELL CODE / 08048060 : 8048060: ...

PHPList 2.10.9 Cross Site Request Forgery / Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : phplist - version 2.10.9 CSRF/XSS Vulnerability version : 2.10.9 Author : Cyber-Crystal Date : n/a Dork : inurl:"powered by phplist - version 2.10.9" Software Link : http://www.phplist.com/...

Avira-Guard

Avira AntiVir personal edition avguard.exe 7.00.00.52 is prone to a local heap overflow because it fails to perform adequate boundary-checks. Successfully exploiting will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts will resul...