PT-2012-2899 · Inria · Ocaml

Name of the Vulnerable Software and Affected Versions: OCaml versions 3.12.1 and earlier Description: The issue allows context-dependent attackers to cause a denial of service, specifically CPU consumption, by providing crafted input to an application that uses hash tables. This is possible becau...

Joomla Discussions SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Joomla Discussions Component (com_discussions) SQL Injection

No description provided by source. Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity...

Joomla! Component com_discussions - SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Postgres Schema Dump

This module extracts the schema information from a Postgres server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Postgres Schema Dump', 'Description' = % This module extracts the schema...

MSSQL Schema Dump

This module attempts to extract the schema from a MSSQL Server Instance. It will disregard builtin and example DBs such as master, model, msdb, and tempdb. The module will create a note for each DB found, and store a YAML formatted output as loot for easy reading. This module requires Metasploit:...

PT-2012-2228 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP version SP2 Windows Server 2003 version SP2 Windows Vista version SP2 Windows Server 2008 version SP2, R2, and R2 SP1 Windows 7 versions Gold and SP1 Description: A security feature bypass issue exists due to the improper loading o...

Tienda Virtual - 'art_detalle.php' SQL Injection

source: https://www.securityfocus.com/bid/51240/info Tienda Virtual is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access o...

Microsoft ASP.NET and PHP Hash Collision Denial of Service (CVE-2011-3414)

A denial of service vulnerability has been reported in Microsoft ASP.NET and PHP. The vulnerability is caused due to the way common web framework implementations use hash tables to map parameters and values of web requests. A remote attacker may exploit this vulnerability by generating multiple...

PHP Hashtables Denial of Service

Exploit for php platform in category dos / poc 0day.today 2018-02-06...

RedTeam Pentesting GmbH

Advisory: Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes The Owl Intranet Engine uses no salting in the password hashing procedure. Furthermore, users in the "Administrators" group are able to see the MD5 password hashes of every user using the web interface. Details...

Cain & Abel v4.9.43 Released

Cain & Abel v4.9.43 Released Cain & Abel is a password recovery tool for Microsoft operating systems.It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using dictionary and brute force attacks, decoding scrambled passwords, revealing passwor...

RHEL 6 : kernel (RHSA-2011:1465)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1465 advisory. - kernel: tpm: infoleak CVE-2011-1162 - kernel: corrupted GUID partition tables can cause kernel oops CVE-2011-1577 - kernel: taskstats io...

kernel: corrupted GUID partition tables can cause kernel oops

Heap-based buffer overflow in the isgptvalid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service OOPS or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on...

ITHorizon (lang) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ITHorizon lang SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by ITHorizon Script Page : http://www.ithorizon.net/ Exploit http://127.0.0.1/PATH/contact.php?lang=1' SQL...

SjXjV 2.3 - post.php SQL Injection

SjXjV 2.3 - post.php SQL Injection source: https://www.securityfocus.com/bid/50426/info SjXjV is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the...

QuickTime < 7.7.1 Multiple Vulnerabilities

Binary data 6052.prm...

ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability

ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-295 October 18, 2011 -- CVE ID: CVE-2011-3222 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktime...

Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Quicktim...

kernel: corrupted GUID partition tables can cause kernel oops

Heap-based buffer overflow in the isgptvalid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier allows physically proximate attackers to cause a denial of service OOPS or possibly have unspecified other impact via a crafted size of the EFI GUID partition-table header on...