CVE-2011-2421

Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir media file...

CVE-2011-2421: Improper Restriction of Operations within the Bounds of a Memory Buffer

Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted .dir media file...

DIR 100 Router WebFilter - URL Bypass Vulnerability

Document Title: =============== DIR 100 Router WebFilter - URL Bypass Vulnerability References: =========== View: http://www.youtube.com/watch?v=SCFJXJwmdRA Download: http://www.vulnerability-lab.com/resources/videos/221.wmv Release Date: ============= 2011-07-07 Vulnerability Laboratory ID VL-ID...

WebSurgery v0.5 - Web app testing tool Released

WebSurgery v0.5 - Web app testing tool Released WebSurgery is a suite of tools for security testing of web applications. Itwas designed for security auditors to help them with the web applicationplanning and exploitation. Currently, it uses an efficient, fast and stableWeb Crawler, File/Dir...

CVE-2011-2473

The dodumpdata function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opdpipe file, a different vulnerability than CVE-2011-1760...

Preemptive Protection against Adobe Shockwave Player Director File FFFFFF88 Record Parsing Remote Code Execution Vulnerabilities (APSB11-01)

A code execution vulnerability exists in Adobe Shockwave player. The vulnerability is due to an integer overflow error while calculating the size value for heap memory allocation while parsing a FFFFFF88 record. Remote attackers can exploit this vulnerability by enticing target users to open a...

EggAvatar for vBulletin 3.8.x - SQL Injection

EggAvatar for vBulletin 3.8.x - SQL Injection !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift;...

EggAvatar for vBulletin 3.8.x - SQL Injection

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...

CVE-2011-1062: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...

D-LINK DIR-280 Direct Access Administrative Password Change

Hi!, i think i just found a security problem in my D-LINK DIR-280 router, if i send the form with a new admin password it change, even if you are not logged. I test this and it works, but it will be better if somebody else test it too. is just the form from the config site opened in my own browse...

Joomla! Multiple SQL Injection Vulnerabilities

The host is running Joomla! and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Multiple SQL Injection Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks GmbH,...

D-Link DIR-300 CSRF Vuln (Change Admin Account Settings)

Exploit for hardware platform in category web applications document.exploit.submit; 0day.today 2018-01-04...

D-Link DIR-300 Cross Site Request Forgery

document.exploit.submit;...

D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings)

document.exploit.submit;...

D-Link DIR-300 - Cross-Site Request Forgery (Change Admin Account Settings)

D-Link DIR-300 - Cross-Site Request Forgery Change Admin Account Settings document.exploit.submit;...

D-Link Routers - Authentication Bypass (1)

D-Link Routers - Authentication Bypass 1 Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers...

D-Link Routers - Authentication Bypass (1)

Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers that use a PHP based Web interface suffer...

Re: D-Link DIR-300 authentication bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Polish D-Link branch confirmed the bug and produced relevant patched firmware: DIR-300: ftp://ftp.dlink.pl/dir/dir-300/driversoftware/DIR-300fwrevA1-05B09allen20101130.zip...

D-Link bsc_wlan.php Access Bypass

Exploit for hardware platform in category web applications ================================= D-Link bscwlan.php Access Bypass ================================= Hello All, Here is another D-Link vulnerability where you can change the network Key i.e., WEP, WPAx keys. Requirement: 1. You need to ha...

D-Link DIR-300 - WiFi Key Security Bypass

source: https://www.securityfocus.com/bid/45038/info The D-Link DIR-300 wireless router is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to modify the WiFi key and possibly other configuration settings. Successful exploits will lead to other attacks. POST...