Digitale Age scripte Remote XSS/FPD Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2012-4516

librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the address resolution information for the application via a malicious ibacm service...

[SECURITY] Fedora 17 Update: xulrunner-16.0.1-1.fc17

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

[SECURITY] Fedora 18 Update: xulrunner-16.0.1-1.fc18

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

Metasploit < 4.4 - pcap_log Plugin Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

PHP 5.3.4 Win Com Module - Com_sink

PHP 5.3.4 Win Com Module - Comsink Exploit Title: PHP 5.3.4 Win Com Module Comsink Local Exploit Google Dork: Nil Date: 9/10/2012 Author: FB1H2S Software Link: PHP Windows Version: 5.3.4 Tested on: Microsoft XP Pro 2002 SP2...

PHP 5.3.4 Win Com Module - Com_sink

Exploit Title: PHP 5.3.4 Win Com Module Comsink Local Exploit Google Dork: Nil Date: 9/10/2012 Author: FB1H2S Software Link: PHP Windows Version: 5.3.4 Tested on: Microsoft XP Pro 2002 SP2...

Trellis Desk CSRF Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Megabirlik Bilgi Islem Cross Site Scripting

---------------------------------------------------------------- Megabirlik Bilgi Islem Cross Site Scripting ---------------------------------------------------------------- Exploit Title : Megabirlik Bilgi Islem alert/0/ Greets To : | Amir | B3HZ4D | Packetstormsecurity.org | Exploit-db.com | |...

Unfixed XSS vulnerability at c2.com

Security researcher Sony, has submitted on 09/02/2012 a cross-site-scripting XSS vulnerability affecting c2.com, which at the time of submission ranked 38577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/08/2012. It is currently unfixed. I...

Element C2 SQL Injection

---------------------------------------------------------------- Element C2 SQL Injection ---------------------------------------------------------------- Exploit Title: Element C2 SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Software Link: www.elementc2.com Impact :...

[SECURITY] Fedora 17 Update: xulrunner-15.0-2.fc17

XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XP COM applications that are as rich as Firefox and Thunderbird. It provides mecha nisms for installing, upgrading, and uninstalling these applications. XULRunner a lso provides libxul, a solution which allows the embedding ...

PHP. S3. TO upload the exploit-vulnerability warning-the black bar safety net

PHP S3 upload vulnerability This web-based vulnerability is more serious, can directly access the shell, is given below exploits the method of Vulnerability information: Can any upload the PHP, TXT, JPG, PNG format file change your shell to sh3ll.php.jpg or sh3ll.php%0%0.1.jpg Exploit demo: Use:...

Sagem Fast 2604 Frimware CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: FAST2604 ADSL Password change Author: The Black Devils FAST2604 ADSL Router Software Version:3.33.8a4GDJAWEB Exploit By Nuevo Asesino password ====== 123456 Now you can get the username & the password...

BCM96338 ADSL Router Get pppoe password CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: BCM96338 ADSL Router Get pppoe password Author: The Black Devils BCM96338 ADSL Exploit By Nuevo Asesino Now you can get the username & the password ------------------------------------------------------ Contact...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

Siemens Simatic S7-300 - PLC Remote Memory Viewer (Metasploit)

Siemens Simatic S7-300 - PLC Remote Memory Viewer Metasploit Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class...

Siemens Simatic S7-300 - PLC Remote Memory Viewer (Metasploit)

Exploit Title: Siemens Simatic S7 300 Remote Memory Viewer Backdoor Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-1200 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300 PLC Remote Memory Viewer',...

Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Quicktime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Quicktime.qts. T...

Espejo Design SQL Injection

== ABOUT ME: --- TAURUS OMAR --- INDEPENDENT SECURITY RESEARCHER --- ACCESOILEGAL.BLOGSPOT.COM --- @omartaurus --- omar-taurusatdragonsecuritydotorg --- omar-taurusatlivedotcom === INFO: Author : TAURUS OMAR Category : Webapps / 0day Title Exploit : Espejo Design - SQL Injection Vulnerability...