DIGIT CMS 1.0.7 Cross Site Scripting / SQL Injection

Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT" Version : 1.0.7 Tested on: ubuntu 11.04 CVE : - Finders...

DIGIT CMS 1.0.7 - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/51316/info DIGIT CMS is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...

DIGIT CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT"...

Reaver brute force attack Tool, Cracking WPA in 10 Hours

Reaver brute force attack Tool, Cracking WPA in 10 Hours The WiFi Protected Setup protocol is vulnerable to a brute force attack that allows an attacker to recover an access point's WPS pin, and subsequently the WPA/WPA2 passphrase, in just a matter of hours. Reaver is a WPA attack tool developed...

Securstar - DriveCrypt - Local Kernel Denial of Service/Memory Disclosure/Privilege Escalation

===============================ADVISORY=============================== Advisory: Securstar - DriveCrypt - Local Kernel Denial of Service/Memory Disclosure/Privilege Escalation Advisory ID: DSEC-2011-0001 Author: Neil Kettle, Digit Security Ltd Affected Software: Securstar DriveCrypt Vendor URL:...

CVE-2009-5055

Open Ticket Request System OTRS before 2.4.4 grants ticket access on the basis of single-digit substrings of the CustomerID value, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by visiting a ticket, as demonstrated by leveraging the...

Data Encryption Systems - DESLock+ - Local Kernel Code Execution/Denial of Service

===============================ADVISORY=============================== Advisory: Data Encryption Systems - DESLock+ - Local Kernel Code Execution/Denial of Service Advisory ID: DSEC-2011-0002 Author: Neil Kettle, Digit Security Ltd Affected Software: Data Encryption Systems - DESLock+ Vendor URL:...

DESlock+ 4.1.10 - vdlptokn.sys Local Kernel Ring0 SYSTEM

DESlock+ 4.1.10 - vdlptokn.sys Local Kernel Ring0 SYSTEM / deslock-vdlptokn.c Copyright c 2009 by DESlock+ include include include define VDLPTOKNIOCTL 0x00222010 define DLKFDISKRIOCTL 0x80002008 define DLKFDISKSLOT 0x00000CF8 define ARGSIZEa a/sizeof void / Win2k3 SP1/2 - kernel EPROCESS token...

Silicon Graphics Inc (SGI) - IRIX - Local Kernel Memory Disclosure/Denial of Service

===============================ADVISORY=============================== Advisory: Silicon Graphics Inc SGI - IRIX - Local Kernel Memory Disclosure/Denial of Service Advisory ID: DSEC-2010-0001 Author: Neil Kettle, Digit Security Ltd Affected Software: Silicon Graphics SGI IRIX Vendor URL:...

HP OpenView OmniBack II Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...

VMware Fusion 2.0.5 - vmx86 kext Local Buffer Overflow (PoC)

/ vmware-pop.c Copyright c 2009 by VMware Fusion include include include include include define VMX86IOCTL 0x80045643 struct ioctlreq struct ioctlreqbuf uaddr; ; struct ioctlreqbuf char pad0x8; int len; char pad0xC; ; int main int argc, char argv struct ioctlreq req; struct ioctlreqbuf buf; int f...

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service (PoC)

Solaris 10 OpenSolaris - fasttrap Local Kernel Denial of Service PoC / solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define...

Solaris 10 OpenSolaris - dtrace Local Kernel Denial of Service (PoC)

Solaris 10 OpenSolaris - dtrace Local Kernel Denial of Service PoC / solaris-dtrace-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Mon 17 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include include include...

Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)

/ solaris-dtrace-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Mon 17 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include include include include define DTRACEHELPER "/dev/dtrace/helper" static unsigned int...

Solaris 10 / OpenSolaris - 'fasttrap' Local Kernel Denial of Service (PoC)

/ solaris-fasttrap-dos.c Copyright c 2008 by Solaris = 10/Opensolaris local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Sun Solaris 10 SPARC Sun OpenSolaris include include include include include include define DTRACEFASTTRAP "/devices/pseudo/fasttrap@0:fasttrap" void hammer void addr...

Mac OS X xnu <=1228.x (vfssysctl) Local Kernel DoS PoC

No description provided by source. / xnu-vfssysctl-dos.c Copyright c 2008 by [email protected] Apple MACOS X xnu = 1228.x local kernel DoS POC by mu-b - Wed 19 Nov 2008 - Tested on: Apple MACOS X 10.5.5 xnu-1228.8.201/RELEASEI386 - Private Source Code -DO NOT DISTRIBUTE -...

Mac OS X xnu <= 1228.3.13 (macfsstat) Local Kernel Memory Leak/DoS

Exploit for macOS platform in category dos / poc ================================================================== Mac OS X xnu Apple MACOS X xnu include include include include include include include define LEAKBUFBYTESa sizeof struct statfsa define LEAKMACBYTESa sizeof inta struct macgetfssta...

Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service (PoC)

Apple Mac OSX xnu 1228.x - vfssysctl Local Kernel Denial of Service PoC / xnu-vfssysctl-dos.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include void hammer void arg char buf1024 255 + 1; int n, name6; memset buf, 0, sizeof buf; while 1 name0 =...

Apple Mac OSX xnu 1228.3.13 - zip-notify Remote Kernel Overflow (PoC)

Apple Mac OSX xnu 1228.3.13 - zip-notify Remote Kernel Overflow PoC / xnu-appletalk-zip.c Copyright c 2008 by Apple MACOS X xnu include include include include include include include include include include include int main int argc, char argv struct sockaddrat daddr, saddr; char p, buf1024; int...

Mac OS X xnu Root Exploit

!/bin/bash xnu-hfs-fcntl-v2.sh Copyright c 2008 by Apple MACOS X 792.0 \n" \ "http://www.digit-labs.org/ -- Digit-Labs 2008!@$!\n\n" if ! -f $EXPFILE ; then echo -n " compiling exploit..." gcc -Wall $EXPFILE.c -o $EXPFILE 2 /dev/null if $? != 0 ; then echo " failed" exit $? else echo " done" fi f...