Microsoft WMI Administrative Tools WBEMSingleView.ocx ActiveX control vulnerability

Overview The ActiveX control, WBEMSingleView.ocx, that is a part of the WMI Administrative Tools package contains a vulnerability. Description The AddContextRef and ReleaseContext functions of the WMI Object Viewer control can be passed an object pointer from an attacker that results in arbitrary...

CubeCart 3.x Shell Upload

============================================================================== » CubeCart v 3.x Remote File Upload Vulnerability ============================================================================== » Title : CubeCart v 3.x Remote Shell Upload Vulnerability » Script : CubeCart v3.x »...

Easy Online Shop SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...

ViRobot Desktop 5.5 / Server 3.5 Privilege Escalation

Hauri ViRobot Desktop 5.5 & ViRobot Server 3.5 VRsecos.sys =2008.8.1.1 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS Hauri ViRobot Desktop 5.5 and below Hauri ViRobot Server 3.5 and below DETAILS: VRsecos.sys create a device called...

AIX 610005 : U837173

The remote host is missing AIX PTF U837173 which is related to the security of the package devices.common.IBM.ib.rte.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

ManageEngine EventLog Analyzer Multiple Cross-site Scripting (XSS) Vulnerabilities

Title: ManageEngine EventLog Analyzer Multiple Cross-site Scripting XSS Vulnerabilities Risk CVSS2 Base Score: Low 3.9 Solutionary ID: SERT-VDN-1001 CVE ID: Pending Solutionary disclosure URL: http://www.solutionary.com/index/SERT/Vuln-Disclosures/ManageEngine-XSS-vulnerabilities.html Product:...

Create a New User with UID 0 - ARM Meta

Create a New User with UID 0 - ARM Meta. Shellcode exploit for arm platform Exploit Title: Linux/ARM - Create a new user with UID 0 MSF Date: 2010-11-25 Author: Jonathan Salwan - twitter @jonathansalwan Tested on: ARM926EJ-S rev 5 v5l Issue link: https://metasploit.com/redmine/issues/3254 This fi...

WordPress Twitter Feed Plugin - Cross-Site Scripting Vulnerability

Twitter Feed "url" parameter plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

Winzip 15.0 WZFLDVW.OCX Text Property Denial Of Service

Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

Video Charge Studio 2.9.5.643 - '.vsc' Local Buffer Overflow (SEH)

!/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.videocharge.com/download/VideoChargeStudioInstall.exe Version: =...

Frog CMS 0.9.5 Cross Site Request Forgery / Cross Site Scripting

====================================== Vulnerability ID: HTB22682 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfrogcms.html Product: Frog CMS Vendor: Philippe Archambault http://www.madebyfrog.com/ Vulnerable Version: 0.9.5 and probably prior versions Vendor Notification: 09...

CMS Article SQL Injection

=========================================== CMS Article Full SQL Injection =========================================== +Title : CMS Article Full SQL Injection +Software : Article Full +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home :...

Ajax Onlineshop SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== Ajax Onlineshop SQL Injection Vulnerability =========================================== Exploit Title: Ajax Onlineshop Date: 22/11/2010 Author: TA4G - email protected Location: Algeria Vendor:...

PHPGallery 1.1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : phpgallery v 1.1.0 : Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link: http://www.hotscripts.com/listing/phpgallery/ : -------------------------------------------------------------------------...

eBlog 1.7 Multiple SQL Injection Vulnerabilities

eBlog 1.7 Multiple SQL Injection Vulnerabilities Name eBlog Vendor https://emuci.com Versions Affected 1.7 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-10 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)

MP3-Nator - Local Buffer Overflow SEH DEP Bypass Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: C4SS!0 G0M3S Software Link:...

Babylon cross application scrypting

Insufficient translated document content filtering before displaying content in the browser...

Joomla Alfurqan15x SQL Injection

Joomla Component comalfurqan15x SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 16 Nov, 2010 Software Information + Vendor : http://islamis4u.co.cc/ + Download :...

Pre Hospital Management System SQL Injection

In The Name Of GOD + Exploit Title: PRE HOSTPITAL MANAGEMENT SYSTEM SQL Bypass Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/hms.asp + Price : 750.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...