42 matches found
ipTIME Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Please find a text-only version below sent to security mailing-lists. The complete version on exploits about my last advisory of ipTIME products is posted here:...
Netgear Prosafe VPN Firewalls - Multiple vulnerabilities
About Encripto AS ================= Encripto is a Norwegian company which provides specialized services within IT-security. Our core expertise is security testing, network security monitoring and training. Encripto is committed to information security. We do research to discover trends, new...
GLSA-201406-30 : sudo: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-201406-30 sudo: Privilege escalation When the Sudo envreset option is disabled it is enabled by default, certain environment variables are not blacklisted as expected. Impact : A local attacker, authorized to run commands using...
Allied Telesis AT-RG634A Unauthenticated Webshell
Title: Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. Vulnerability Information: - CVE: CVE-2014-1982 - Type of Vulnerability: - CWE-78 : OS Command Injection - CWE-306 : Missing Authentication for Critical Function Affected products: - Allied Teles...
[Xplico 1.1.0] Open Source Network Forensic Analysis Tool (NFAT)
The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn’t a network protocol analyzer. Xplico is ...
Linux/x86 - Bind TCP (1111/TCP) Shell + SO_REUSEADDR Set (Avoiding SIGSEGV) + Null-Free Shellcode (103 bytes)
Linux/x86 - Bind TCP 1111/TCP Shell + SOREUSEADDR Set Avoiding SIGSEGV + Null-Free Shellcode 103 bytes. Shellcode exploit for Linuxx86 platform / Shell Bind TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is...
Linux/x86 - Reverse TCP (127.1.1.1:55555/TCP) Shell + Null-Free Shellcode (72 bytes)
Linux/x86 - Reverse TCP 127.1.1.1:55555/TCP Shell + Null-Free Shellcode 72 bytes. Shellcode exploit for Linuxx86 platform / Shell Reverse TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed under the...
Linux/x86 - Reverse TCP Shellcode (67 bytes)
Linux/x86 - Reverse TCP Shellcode 67 bytes. Shellcode exploit for Linx86 platform / Tiny Shell Reverse TCP Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed under the Creative Commons...
Linux/x86 - Bind TCP (Random TCP Port) Shell + Null-Free Shellcode (57 bytes)
Linux/x86 - Bind TCP Random TCP Port Shell + Null-Free Shellcode 57 bytes. Shellcode exploit for Linuxx86 platform / Tiny Shell Bind TCP Random Port Shellcode - C Language Linux/x86 Written in 2013 by Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This source is licensed...
CVE-2012-2297
The CVE-2012-2297 entry refers to the Creative Commons module for Drupal (6.x-1.x) with XSS vulnerabilities in the 6.x-1.0 to 6.x-1.1 range. The root cause is insufficient filtering of license description text, enabling remote authenticated users with the administer creative commons permission to...
CVE-2012-2297
Multiple cross-site scripting XSS vulnerabilities in the Creative Commons module 6.x-1.x before 6.x-1.1 for Drupal allow remote authenticated users with the administer creative commons permission to inject arbitrary web script or HTML via the 1 creativecommonsusermessage or 2...
SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS)
CVE: CVE-2012-2297 The Creative Commons module allows users to select and assign a Creative Commons license to a node and any attached content, or to the entire site. The module did not sufficiently filter the text describing licenses. This vulnerability is mitigated by the fact that an attacker...
Creative Commons SQL Injection
By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Creative Commons SQL Injection Vulnerability Vendor : http://creativecommons.org Author : CR9 Home : Http://Nopotm.ir Archive : Http://Nopotm.ir/forums Email :...
Microsoft Word 2003 - Record Parsing Buffer Overflow (MS09-027) (Metasploit)
$Id: ms09-027 10477 2011-04-13 11:59:02Z mc $ This file is not part of the Metasploit Framework and may not be subject to redistribution and commercial restrictions. TODO some testing to find the real banned characters and maxlen add those parameters to the .rb file drop in appropriate directory...
Joomla Component idoblog 1.1b30 (com_idoblog) SQL Injection Vuln
No description provided by source. comidoblog SQL Injection ALL VERSIONS Descubierto por : KKR Somos: knet, kiko, ricota, servl Contacto: elricotaATgmailDOTcom + Ediciones anteriores tenian las mismas fallas pero no fixearon todo... + Esta sql injection afecta todas las versiones. - + exploit: -...
Joomla Component idoblog 1.1b30 (com_idoblog) SQL Injection Vuln
Exploit for unknown platform in category web applications ================================================================ Joomla Component idoblog 1.1b30 comidoblog SQL Injection Vuln ================================================================ comidoblog SQL Injection ALL VERSIONS Descubier...
Joomla! Component idoblog 1.1b30 (com_idoblog) - SQL Injection
comidoblog SQL Injection ALL VERSIONS Descubierto por : KKR Somos: knet, kiko, ricota, servl Contacto: elricotaATgmailDOTcom + Ediciones anteriores tenian las mismas fallas pero no fixearon todo... + Esta sql injection afecta todas las versiones. - + exploit: -...
Joomla! Component NeoReferences 1.3.1 - catid SQL Injection
Joomla! Component NeoReferences 1.3.1 - catid SQL Injection joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT :...
Joomla! Component NeoReferences 1.3.1 - 'catid' SQL Injection
joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT : index.php?option=comneoreferences&Itemid=27&catid=99887766//union//select//concatusername,0x3a,password//from//josusers/%20where%20userid=1=1/ S@BUN...
CVE-2006-4778
CVE-2006-4778 affects Creative Commons Tools ccHost before 3.0. The vulnerability is an SQL injection in the URL used to populate the file ID, allowing remote attackers to execute arbitrary SQL commands. The issue is documented in NVD/NIST records (and CVE lists) with a base score of 7.5 (HIGH) u...