Ubiquiti UbiFi mFi AirVision - Cross-Site Request Forgery

Ubiquiti UbiFi mFi AirVision - Cross-Site Request Forgery Vendor Homepage: http://www.ubnt.com/ Tested on: Kali Linux ----------------------------------------- Affected Products/Versions: ----------------------------------------- UniFi Controller v2.4.6 mFi Controller v2.0.15 AirVision Controller...

EFF Releases Open Wireless Router Firmware

The EFF is working on an open wireless router firmware that’s designed to be a secure and flexible alternative to the existing software that runs on home and small business routers, much of which is notoriously insecure. The Open Wireless Router project, which the organization announced at the HO...

Quantum Art QP7.Enterprise news.asp p_news_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

pigyard art gallery Multiple Vulnerabilities

No description provided by source. Pigyard Art Gallery Multiple Remote Vulnerabilities Script Buy Now : http://www.pigyardgallery.com/howtobuy.php author: ZoRLu home: www.yildirimordulari.org contact: [email protected] not: msn i ekleyipte aptal aptal konusmayýn yok ben seni eklemedim sen beni...

Microsoft Clip Art Gallery 5.0 - Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1034/info A vulnerability exists within the Microsoft Clip Art Gallery, where a remote user can crash the Clip Art application or possibly execute arbitrary code. Clip art can be downloaded from any website and incorporat...

DeviantArt Malwaretising Campaigns lead to Potentially Unwanted Apps

Today, the estimated number of known computer threats like viruses, worms, backdoors, exploits, Trojans, spyware, password stealer, and other variants of potentially unwanted software range into millions. It has the capability to create several different forms of itself dynamically in order to...

Dennis Fisher and Mike Mimoso Discuss Day One at the RSA Conference 2014

Dennis Fisher and Mike Mimoso discuss the happenings on day one of the RSA Conference, including Art Coviello’s keynote and what makes the NSA mad. Download: digitalunderground146.mp3...

Debian Security Advisory DSA 2814-1 (varnish - denial of service)

A denial of service vulnerability was reported in varnish, a state of the art, high-performance web accelerator. With some configurations of varnish a remote attacker could mount a denial of service child-process crash and temporary caching outage via a GET request with trailing whitespace...

Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)

Plogue Sforzando 1.665 - Buffer Overflow SEH PoC !/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link:...

MoinMoin - Arbitrary Command Execution

!/usr/bin/env python -- coding: utf-8 -- ascii = '\x1b1;31m' ascii +=' \r\n' ascii +=' ██████████ ██████ ███ ███ ███ ██████████ ████████ ███ ███████ \r\n' ascii +=' ███████████ ████████ ███ ████ ███ ███████████ ████████ ███ ███████ \r\n' ascii +=' ██▒ ██▒ ██▒ ██▒ ███ ██▒ ██▒█▒███ ██▒ ██▒ ██▒ ██▒...

MoinMoin - Arbitrary Command Execution

MoinMoin - Arbitrary Command Execution !/usr/bin/env python -- coding: utf-8 -- ascii = '\x1b1;31m' ascii +=' \r\n' ascii +=' ██████████ ██████ ███ ███ ███ ██████████ ████████ ███ ███████ \r\n' ascii +=' ███████████ ████████ ███ ████ ███ ███████████ ████████ ███ ███████ \r\n' ascii +=' ██▒ ██▒ ██...

Fedora Update for php-ZendFramework FEDORA-2012-9979

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2012-9979 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Manol Informatics SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x Support...

Joomla Art Uploader 1.0.1 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla Modules - Art Uploader Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Anchor CMS 0.6 Cross Site Scripting

Exploit for php platform in category web applications Anchor CMS v0.6 Multiple Persistent XSS Vulnerabilities function xss0document.forms"xss0".submit; function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; function xss3document.forms"xss3".submit; function...

Art And Soul Design SQL Injection

Exploit Title: Art And Soul Design SQL Injection Vulnerability Date: 18/01/2012 - 04.24 Author: 3spi0n Software Website: http://www.artandsoul.co.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: image.php $ Demo Sites: www.the-picture-box.co.uk/image.php?id=2" SQL...

FineArtPost Cross Site Scripting

FineArtPost XSS Cross Site Scripting Vulnerability Software : FineArtPost Date : 7/1/2012 Vendor : http://www.fineartpost.com/ Get App. : http://www.fineartpost.com/aboutfap/pricing.php Beta : http://www.fineartpost.com/fap2/beta.php Price : $149.59 Dork : inurl:"/displayimages.php?uid="...

ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-346 December 13, 2011 - -- CVE ID: CVE-2011-3413 - -- CVSS: 7.5,...

CVE-2010-5042

Cross-site scripting XSS vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party...