Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Exploit for windows platform in category local exploits Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application...

[SECURITY] Fedora 18 Update: systemd-201-2.fc18.8

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

[SECURITY] Fedora 19 Update: systemd-204-15.fc19

systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...

CVE-2013-4922

CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...

iOS 7 Beta Vulnerable to Screen-Lock Bypass

An iPhone user in Spain who downloaded the beta version of Apple iOS 7, which was made available Monday, was able to bypass its screen-lock security feature. The revamped mobile operating system was unveiled by the Cupertino, California technology giant last week at its annual World Wide Develope...

Hacking iPhone to bypass iOS 7 Lockscreen

About this time every year, Apple gives a gift to mobile developers: the newest version of iOS. The all-new Apple iOS 7 launched at WWCD 2013 this week and Just after 48 hours of iOS 7 release, 36-year old Jose Rodriguez iPhone user able to hack and bypass Lockscreen to access the Photos in just ...

Hacking iPhone to bypass iOS 7 Lockscreen

About this time every year, Apple gives a gift to mobile developers: the newest version of iOS. The all-new Apple iOS 7 launched at WWCD 2013 this week and Just after 48 hours of iOS 7 release, 36-year old Jose Rodriguez iPhone user able to hack and bypass Lockscreen to access the Photos in just ...

Activating mobile malware with Music and Light Sensors

Researchers at the University of Alabama at Birmingham UAB presented the research that it is possible to trigger malware hidden in mobile devices using music, lighting, or vibration. In a research paper titled "Sensing-Enabled Channels for Hard-to-Detect Command and Control of Mobile Devices", th...

OPC UA Activate Session Request Command

...

[Nessus 5.2] Nessus Vulnerability Scanner

New release of the Nessus vulnerability scanner! This is a major release moving from 5.0.3 to 5.2.0 and includes several new features and enhancements, including: IPv6 is now supported on all platforms including Windows Nessus server support for Windows 8 and Windows 2012 Add attachments within...

SSL/TLS: Collect and Report Certificate Details

This script collects and reports the details of all SSL/TLS certificates. This data will be used by other tests to verify server certificates. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

A4tech Bloody2 Mouse Activation

Software: Bloody2 To activate core 3 you must pay 20$ to a4tech. Let's pay much less = This is private exploit. You can buy it at https://0day.today...

Design/Logic Flaw

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

DEBIAN-CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

CVE-2012-4422

CVE-2012-4422 affects WordPress prior to 3.4.2 with multisite enabled. The vulnerability arises when network-wide activation of plugins is performed without verifying network-administrator privileges, potentially allowing remote authenticated users to make unintended plugin changes by abusing the...

CVE-2012-4422

wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges before performing a network-wide activation of an installed plugin, which might allow remote authenticated users to make unintended plugin changes by leveragi...

Sciretech 3.0.0 SQL Injection / CSRF Vulnerability

Exploit for php platform in category web applications ========================================================= Vulnerable Software: Sciretech ® Multimedia Manager Version 3.0.0 Aka: Sciretech ® File Manager Version 3.0.0 Official site: www.sciretech.com Vulnerabilities: Blind SQL Injection And...