Mandriva Linux Security Advisory : wireshark (MDVSA-2011:105)

This advisory updates wireshark to the latest version 1.2.17, fixing several security issues : - Large/infinite loop in the DICOM dissector. Bug 5876 Versions affected: 1.2.0 to 1.2.16 and 1.4.0 to 1.4.6. - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a corrupted...

Wireshark < 1.2.17 / 1.4.7 Multiple DoS Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.17 or 1.4.x less than 1.4.7. As such, it is affected by the following vulnerabilities : - An error exists in DICOM dissector that can allow denial of service attacks when processing certain malformed packets. Issue 5876 - An error exists i...

openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

Babylon Dictionary <= DLL Hijacking Exploit

Exploit for windows platform in category local exploits Exploit Title: Babylon Dictionary Special Greets To : KedAns-Dz & All Algerians Hackers Vulnerable extensions: .dcb Vulnerable Dlls: besextension.dll ------------------------------- include define DllExport declspec dllexport DllExport void...

Cain & Abel v4.9.39 updated version Download !

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords,...

KLA10280 DoS vulnerability in OpenOffice.org

Multiple critical vulnerabilities have been found in OpenOffice.org. Malicious users can exploit these vulnerabilities to cause denial of service or possibly execute arbitrary code. Below is a complete list of vulnerabilities 1. An integer overflow can be exploited remotely via specially designed...

Design/Logic Flaw

Unspecified vulnerability in the Export component in Oracle Database Server 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7, and 11.2.0.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Select Any Dictionary...

Cкрипт для работы со слепыми инъекциями

Скрипт для работы со слепыми инъекциями. Наверное аналогов очень много, но этот скрипт заточен под слепые инъекции, а так же я постарался включить в него все возможные функции к примеру работа с informationschema очень полезно если версия БД = 5 или вывод файла что будет применимо если версия БД ...

The use of PMK Hashes for the WPA/WPA2 high-speed hack-vulnerability warning-the black bar safety net

Author: Christopher Yang This article relates to the Hash key based on the Cowpatty under the genpmk tool to make, this is the ZerOnesecurityteam is the wireless security group by with Aircrack-ng airolib-ng and related tools of convenience, versatility and repeated the comparison after the final...

JITed egg-hunter stage-0 shellcode

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

Joomla! Component user_id com_sqlreport - Blind SQL Injection

============================================================================== »Joomla Component userid comsqlreport Blind SQL Injection Vulnerability ============================================================================== » Script: Joomla » Language: PHP » Founder: Snakespc...

HTTP Interesting File Scanner

This module identifies the existence of interesting files in a given directory path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Interesting File Scanner', 'Description' = %q This modu...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4582

The supplied documents confirm a concrete vulnerability: XOOPS 2.0.18, within the Dictionary module, is affected by an SQL injection in detail.php. The issue arises from the id parameter, which allows remote attackers to execute arbitrary SQL commands. This is a database command injection affecti...

CVE-2009-4582

SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...

[SECURITY] Fedora 12 Update: stardict-3.0.1-20.fc12

StarDict is a Cross-Platform and international dictionary written in Gtk2. It has powerful features such as "Glob-style pattern matching," "Scan selection word," "Fuzzy query," etc...

XOOPS Module dictionary 2.0.18 (detail.php) SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '18845' ssvid version = '1.0' author = 'kikay' vulDate = '2009-12-30' createDate ...

XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection

XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id" EXPLOIT :...

CPE Inventory

This routine uses information collected by other routines about CPE identities of operating systems, services and applications detected during the scan. Note: Some CPEs for specific products might show up twice or more in the output. Background: After a product got renamed or a specific vendor wa...