WordPress All-In-One Security / Firewall 4.1.2 CAPTCHA Bypass

------------------------------------------------------------------------ Multiple vulnerabilities in All In One WP Security & Firewall plugin login CAPTCHA ------------------------------------------------------------------------ Sipke Mellema, July 2016...

Ruby pack_pack Use After Free Vulnerability

Talos Vulnerability Report TALOS-2016-0033 Ruby packpack Use After Free Vulnerability June 14, 2016 CVE Number CVE-2016-2338 DESCRIPTION An exploitable User After Free vulnerability exists in the packpack function of Ruby. In packpack function each element of array which should be “pack”, based o...

7zip UDF CInArchive::ReadFileItem Code Execution Vulnerability

Summary An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution. Tested Versions 7-Zip 32 15.05 beta 7-Zip 64 9.20 Product URLs http://www.7-zip.org/ Details...

Endian Firewall Proxy Password Change Command Injection

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 'Endian Firewall Proxy Password Change Command Injection', 'Description' = %q This module exploits an OS command injection...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds =...

Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation

Apple Mac OSX xnu 1228.x - hfs-fcntl Kernel Privilege Escalation !/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/nul...

vegadns-dyn0.txt

VegaDNS XSS ----------- Desc: Multiple vulns in VegaDNS Risk: Medium to High Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Project blurb : VegaDNS is a tinydns administration tool written in PHP to allow easy administration of DNS records through a web browser. Affected Versio...

3Dmax 6.x backburner Manager 2.2 - Denial of Service

3Dmax 6.x backburner Manager 2.2 - Denial of Service 3Dmax backburner Manager Dos Exploit There are security hole in 3Dmax backburner Manager Default listen port is 3234. It's can be Dos by long string Tested on Version 3dmax 5.0 backburner Manager Version 2.0 3dmax 6.0 backburner Manager Version...

Critical WFTPD buffer overflow vulnerability

Name of Advisory: Critical WFTPD buffer overflow vulnerability Severity: Critical Discoverer: axl [email protected] Released: Today Vendor Notified: Today WFTPD who? what? when? Vendor quote: "WFTPD Server has been a leading FTP server for Windows since it was released in 1993. Its stability and...

WFTPD Server 3.21 - Remote Buffer Overflow

/ WFTPD buffer overflow exploit, c axl 2004, [email protected] Discovered by the very same guy :p Tested WFTPD versions: - WFTPD Pro Server 3.21 Release 1 trial latest version - WFTPD Pro Server 3.20 Release 2 trial - WFTPD Server 3.21 Release 1 trial latest version - WFTPD Server 3.10 Release 1...

ftls.org Guestbook 1.1 Script Injection

ftls.org Guestbook 1.1 Script Injection Vulnerabilities Discovered By BrainRawt [email protected] About MyGuestbook: ------------------ Your basic guestbook that can be downloaded at http://www.ftls.org/en/examples/cgi/Guestbook.shtmls1. Vulnerable tested Versions: --------------------...

Advisory for Jana server

Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...

Cayman 3220-H DSL Router DOS

Cayman 3220-H DSL Router DOS - Intro Simple DOS attack against Cayman 3220-H DSL Router. This message has been copied to Cayman. Description Large username or password strings sent to the Cayman HTTP admin interface restart the router. Router log will show "restart not in response to admin...