Reading material

Stuxnet expert and industry gadfly Ralph Langner was in attendance at S4 this year, as he has been in past years. This year, however, Langner had a new book to promote: Robust Control System Networks – a kind of call to arms for the industrial control sector to respond to a ‘post Stuxnet’ world...

Social Book Facebook Clone Script Cross Site Scripting

Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...

Calibre E-Book Reader - Local Privilege Escalation (3)

/ .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss / include include include include include int mainint argc,...

Calibre E-Book Reader - Local Privilege Escalation (3)

Calibre E-Book Reader - Local Privilege Escalation 3 / .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss /...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

Calibre E-Book Reader Local Root

Exploit for linux platform in category local exploits / .80 Calibrer Assault Mount by zx2c4 Yesterday's assult mount used inotify to mount into /etc/pam.d. Today we expand the attack by adding a race toggler so we can mount from non-block devices. Enjoy. - zx2c4 2011-11-4 greets to djrbliss /...

Calibre E-Book Reader Local Root Race Condition Exploit

Exploit for linux platform in category local exploits !/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventin...

Calibre E-Book Reader Local Root

!/bin/sh .60-Calibrer Assault Mount by zx2c4 Yesterday we learned how Calibre's usage of execlp allowed us to override PATH and get root, in my ".50-Calibrer Assault Mount" exploit. Today we exploit a more fundumental issue with Calibre's mount helper -- namely, that it allows us to mount a vfat...

Calibre E-Book Reader - Local Privilege Escalation (2)

Calibre E-Book Reader - Local Privilege Escalation 2 Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root Date: Nov 2, 2011 Author: zx2c4 Software Link: http://calibre-ebook.com/ Tested on: Gentoo Platform: Linux Category: Local CVE: pending !/bin/sh .60-Calibrer...

Calibre E-Book Reader - Race Condition Privilege Escalation

Calibre E-Book Reader - Race Condition Privilege Escalation !/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes...

Calibre E-Book Reader Local Root Race Condition

!/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventing symlinks and checking path prefixes. - djrbliss &...

Calibre E-Book Reader - Local Privilege Escalation (2)

Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root Date: Nov 2, 2011 Author: zx2c4 Software Link: http://calibre-ebook.com/ Tested on: Gentoo Platform: Linux Category: Local CVE: pending !/bin/sh .60-Calibrer Assault Mount by zx2c4 Yesterday we learned how Calibre...

Calibre E-Book Reader - Race Condition Privilege Escalation

!/bin/sh .70-Calibrer Assault Mount by Dan Rosenberg @djrbliss and zx2c4 Yesterday we learned how Calibre's ability to mount anything anywhere resulted in a local root. Today's exploit shows a race condition to subvert recent changes preventing symlinks and checking path prefixes. - djrbliss &...

Calibre E-Book Reader Local Root

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits Exploit Title: .60-Calibrer Assault Mount: Another Calibre E-Book Reader Local Root Date: Nov 2, 2011 Author: zx2c4 Software Link: http://calibre-ebook.com/ Tested on: Gentoo Platform: Linux Category: Local CVE: pending !/bin/sh .60-Calibrer...

Calibre E-Book Reader - Local Privilege Escalation (1)

Calibre E-Book Reader - Local Privilege Escalation 1 !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

CVE-2010-4990

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

Sql injection

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4982

The CVE-2010-4982 entry describes a SQL injection vulnerability in the My Kazaam Address & Contact Organizer. The affected component is address_book/contacts.php, where the var1 parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. The exploitation status is n...