PotPlayer 1.5.42509 Beta Denial Of Service

Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: ------- !/usr/bin/python rawinput"Hit Ente...

PotPlayer 1.5.42509 Beta - Integer Division by Zero Denial of Service

Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: ------- !/usr/bin/python rawinput"Hit Ente...

[OWASP GoatDroid] Project that will help educate security to application developers Android

OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications:...

FreeBSD Security Advisory FreeBSD-SA-13:14.openssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-13:14.openssh Security Advisory The FreeBSD Project Topic: OpenSSH AES-GCM memory corruption vulnerability Category: contrib Module: openssh Announced: 2013-11-19...

SA-CONTRIB-2013-093 - Invitation - Access Bypass

The Invitation module restricts registration to users who have an invite code for running a private beta. The module provides default views that don't check access to views prior to displaying private information like usernames and email addresses. CVE identifiers issued CVE-2013-7063 Versions...

Vivotek IP Cameras RTSP Authentication Bypass

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras RTSP Authentication Bypass 1. Advisory Information Title: Vivotek IP Cameras RTSP Authentication Bypass Advisory ID: CORE-2013-0704 Advisory URL:...

MetInfo 5.0 Beta Admin Remote Password Change

Exploit for php platform in category web applications Exploit Title: MetInfo 5.0 Beta Admin Remote Password Change Google Dork:"Powered by MetInfo 5.0 Beta" Exploit Author: Index Php Vendor Homepage:www.metinfo.cn Version: 5.0 Beta Tested on: Windows, PHP 5.2 exploit username password 0day.today...

DEBIAN-CVE-2013-4249

Cross-site scripting XSS vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbitrary web script or HTML via a URLField...

Wapkul Beta 3 SQL Injection Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

Blast XPlayer - Local Buffer Overflow (PoC)

Title: Blast XPlayer Local Buffer Overflow PoC Vendor: http://sourceforge.net/projects/blast-player/files/latest/download?source=dlp Versions: Beta Platform: nix, windows Bug: Buffer Overflow ------------------------------------------------------- 1 Introduction 2 Proof of concept 3 Credits...

FBI Warning Users About Financial Malware Beta Bot

The FBI began warning computer users about the Beta Bot Trojan this week, sounding the alarm about malware that has targeted a variety of online payment platforms and financial institutions over the few last months. According to an intelligence note prepared by the Internet Crime Complaint Center...

PotPlayer 1.5.39036 - .wav Crash (PoC)

PotPlayer 1.5.39036 - .wav Crash PoC Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

PotPlayer 1.5.39036 - '.wav' Crash (PoC)

Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

PotPlayer 1.5.39036 Proof Of Concept

Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

Apple to Fix Malicious Fake USB Charger Flaw

Apple claims it will fix a previously disclosed flaw in the current iteration of its mobile operating system, iOS 6, that can allow hackers complete access to an iPhone or iPad via a fake USB charger. Reuters confirmed the impending fix Wednesday after speaking with Apple spokesman Tom Numayr at...

Firefox Adds Mixed Content Blocking by Default

The proliferation of SSL-protected sites has been a boon for security conscious Web users in the last couple of years, as more and more sites have taken the step of offering encrypted connections for sensitive sessions. But one of the problems that’s cropped up is that the dynamic nature of today...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don't know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don’t know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

Cuppa CMS Remote/Local File Inclusion Vulnerability

Cuppa CMS is prone to a file inclusion vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Beta Bot Trojan Emerges as New Type of Banking Malware

A new strain of banking malware, Beta Bot, has been refined over the last few months to target ecommerce and comes complete with an array of features to help prevent it from being caught by usual security measures. According to research conducted by RSA Security’s Limor Kessem, the bot started ou...