Marinet CMS - SQL Injection

========================================================= Marinet cms SQL Injection Vulnerability ========================================================= Name: Marinet cms SQL Injection Vulnerability Date: 2010-05-11 vendor: http://www.marinet.gr/ Author: Ashiyane Digital Security Team Thanks t...

Free Advertisment CMS - 'user_info.php' SQL Injection

========================================================= Free Advertisment cms userinfo.php SQL Injection Vulnerability ========================================================= Name: Free Advertisment cms userinfo.php SQL Injection Vulnerability Date: 2010-05-11 vendor: http://www.laserayaneh.c...

Woodall Creative - SQL Injection

========================================================= Woodall Creative SQL Injection Vulnerability ========================================================= Name: Woodall Creative SQL Injection Vulnerability Date: 2010-05-11 vendor: http://www.woodallcreative.com Author: Ashiyane Digital...

MiniManager For MangosTrinity Server - Denial of Service

MiniManager For MangosTrinity Server - Denial of Service ========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability ========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability Download :...

MiniManager For Mangos/Trinity Server Denial Of Service

========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability ========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability Download : http://sourceforge.net/projects/mmfpm/ Date: 2010-05-10...

MiniManager For Mangos/Trinity Server DoS Vulnerability

Exploit for php platform in category dos / poc ======================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability ======================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability Download :...

MiniManager For Mangos/Trinity Server - Denial of Service

========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability ========================================================= MiniManager For Mangos/Trinity Server DoS Vulnerability Download : http://sourceforge.net/projects/mmfpm/ Date: 2010-05-10...

VMware View 3.1.3 addresses an important cross-site scripting vulnerability

VMware View 3.1.3 addresses an cross-site scripting vulnerability in VMware View. In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL. VMware would like to thank Alexey Sintsov from Digital Security Research Group DSecRG f...

[DSecRG-09-053] VMware Remoute Console - format string

Digital Security Research Group DSecRG Advisory DSECRG-09-053 Application: VMware Remoute Console Version: e.x.p build-158248 Vendor URL: http://vmware.com Bugs: Format String Vulnerabilitys Exploits: YES PoC Reported: 07.08.2009 Vendor response: 13.08.2009 Date of Public Advisory: 09.04.2010 CVE...

BladeCenter AMM Denial Of Service

Digital Security Research Group DSecRG Advisory DSECRG-09-049 Application: IBM BladeCenter Managmet Module Versions Affected: before BPET50G Vendor URL: http://www-03.ibm.com/systems/bladecenter/ Bug: DoS Exploits: YES Reported: 24.07.2009 Vendor response: 26.07.2009 Date of Public Advisory:...

IBM Bladecenter Management Module - Denial of Service

IBM Bladecenter Management Module - Denial of Service DSECRG-09-049 IBM BladeCenter Management Module - DoS vulnerability Source: http://www.dsecrg.com/pages/vul/show.php?id=149 This device can be remotely rebooted by sending a malformed TCP packets Digital Security Research Group DSecRG Advisory...

IBM BladeCenter Management Module - DoS vulnerability

Exploit for hardware platform in category dos / poc ===================================================== IBM BladeCenter Management Module - DoS vulnerability ===================================================== DSECRG-09-049 IBM BladeCenter Management Module - DoS vulnerability Source:...

VMware Remote Console e.x.p build-158248 - Format String

VMware Remote Console e.x.p build-158248 - Format String DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where...

SAP GUI 7.00 - BExGlobal Active-X unsecure method

Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution. Exploits: YES Reported: 16.10.2009 Vendor response:...

JITed egg-hunter stage-0 shellcode

No description provided by source. // JITed egg-hunter stage-0 shellcode // Permanent DEP bypass // // By Alexey Sintsov // [email protected] // [email protected] // // DSecRG - Digital Security Research Group dsecrg.com// // // TAG=3135330731353307 // its mean 0x07333531 twice! // // // This versi...

JITed stage-0 shellcode

JITed stage-0 shellcode. Shellcode exploit for win32 platform Title: JITed stage-0 shellcode Author: Alexey Sintsov Download N/A // JITS0.AS // // VirtualProtect stage-0 shellcode // // how to use stack // // 0000: 0x11111111 -- ret addr to JIT satge0 shellcode // 0004: 0x60616f62 -- pointer on...

TVUPlayer 2.4.9beta1 Active-X Insecure Method

DSECRG-09-065 TuvNetworks TVUPlayer ActiveX component - Insecure method TVUPlayer contains ActiveX component PlayerOcx which contains insecure method that can overwrite any unhidden file in the system. Application: TVUPlayer Versions Affected: Tested on v2.4.9beta1build1797 Vendor URL:...

[DSECRG-09-065] TVUPlayer PlayerOcx.ocx ActiveX - Insecure method

ActiveX component contains insecure method that can overwrite any file in system Digital Security Research Group DSecRG Advisory DSECRG-09-065 Application: TVUPlayer Versions Affected: Tested on v2.4.9beta1build1797 Vendor URL: www.tvunetworks.com Bugs: insecure method, File overwriting Exploits:...

[DSECRG-09-011] HP StorageWorks 1_8 G2 Tape Autoloader - privilege escalation DOS

Digital Security Research Group DSecRG Advisory DSECRG-09-011 Application: HP StorageWorks 1/8 G2 Tape Autoloader Versions Affected: firmware v 2.30 and earlier Vendor URL: http://hp.com/ Bug: Privilege escalation Exploits: YES Reported: 30.09.2008 Vendor Response: 30.09.2008 Date of Public...

vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...