CVE-2012-0796

class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...

CVE-2011-4289

CVE-2011-4289 – Moodle 2.0.x before 2.0.3 : The vulnerability arises because Moodle does not recognize the configuration that restricts email addresses to course members. As a result, remote authenticated users can read full profile pages and obtain sensitive address information. The description ...

Site5 WordPress e-mail spoofing vulnerability-vulnerability warning-the black bar safety net

The following is to use the local build of the site5 wordpress Vulnerability file: diary, simploblack, simplo, journalcrunch, boldy, webfolio my $theme = ‘diary’; my $url = $wordpress.’wp-content/themes/’.$ theme.’/ sendmail.php’; My e-mail=“[email protected]; Receiver email address my $receiver...

Shopware 3.5 - SQL Injection

Shopware 3.5 - SQL Injection !/usr/bin/php ?php Exploit Title: Shopware 3.5 - SQL Injection Date: 13.07.2012 Exploit Author: Kataklysmos Software Link: http://www.shopware.de/ Version: 3.5 function httpreq$host, $q if!$fs = fsockopen$host, 80 exit"Could not open HTTP- Connection to...

A virus specialized for AutoCAD, a perfect cyber espionage tool

A virus specialized for AutoCAD, a perfect cyber espionage tool In recent years we are assisting to a profoundly change in the nature of malware, it is increased the development for spy purposes, for its spread in both private and government sectors. The recent case of Flame malware has...

Adobe Flash Player Object Type Confusion

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Are You 'Siri-less'? Security Firm Urges Closer Look at Popular Personal Assistant App

The Finland-based security firm F-Secure is warning companies to beware of Siri, the voice-activated personal assistant app that last month was banned by IBM for security purposes. The potential for Siri-based data disclosures was cited at a Helsinki press conference, in which F-Secure’s vice...

AyMSite v.3.0.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AyMSite V 3.0.2 sqli Vendor: http://www.aymsoft.com/ Date: 08/06/2012 Author: xDarkSton3x Dork: inurl:aymindex.php?option= E-mail : email protected Category: webapps Example Sites :...

Threat Outbreak Alert: Fake Order Request Details Email Messages on May 16, 2012

Low Alert ID: 25938 First Published: 2012 May 16 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam e-mail messages that claim to contain order request details for the recipient. The text in the e-mail message attempts to convince the...

Threat Outbreak Alert: Fake Statement Notification Email Messages on May 18, 2012

Low Alert ID: 25900 First Published: 2012 May 10 16:25 GMT Last Updated: 2012 May 18 17:02 GMT Version: 3 Summary Cisco Security has detected significant activity related to Portuguese-language spam e-mail messages that claim to contain the recipient's account statement details for review. The te...

E-Mail, Source Code From VMWare Bubbles Up From Compromised Chinese Firm

In what looks like the IT equivalent of the Deepwater Horizon oil spill disaster, purloined data and documents, including source code belonging to the U.S. software firm VMWare, continue to bubble up from the networks of a variety of compromised Chinese firms, according to “Hardcore Charlie,” an...

Joomla The Estate Agent SQL Injection

Exploit Title: joomla component comestateagent SQL injection Vulnerability Date: 10/04/2012 Author: xDarkSton3x E-mail : [email protected] Category:: webapps Google dork: inurl:"comestateagent" Tested on: linux + windows Vendor link: http://www.eaimproved.eu/index.php Exploit/p0c :...

CastRipper 2.9.6 (.pls)/(wvx) buffer overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: CastRipper 2.9.6 .pls/wvx buffer overflow Exploit Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: islambabiaathotmail.com Vendor: http://mini-stream.net/castripper/ Category:: Local Exploits Test...

WM Downloader 3.1.2.2(.asx) Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: WM Downloader 3.1.2.2.asx Buffer Overflow Exploit Author: Caddy-Dz Facebook Page: http://www.facebook.com/ALG.Cyber.Army E-mail: islambabiaathotmail.com Vendor: http://mini-stream.net/downloads/WMDownloader.exe Category:: Loca...

Code injection

@Mail WebMail Client in AtMail Open-Source before 1.05 allows remote attackers to execute arbitrary code via an e-mail attachment with an executable extension, leading to the creation of an executable file under tmp/...

ZyXEL FTP service Remote DDoS

Exploit for windows platform in category dos / poc !/usr/bin/python print"1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0" print"0 1" print"1 /' \ /'\ /\ \ /'\ 0" print"0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1" print"1 //\ \ /' \ /\ //\ Exploit database separated by exploit...

E-mail Client Detection

Binary data 6357.prm...

Webify Photo Gallery CSRF (add admin / change e-mail address)

Exploit for php platform in category web applications Exploit Title: Webify Photo Gallery CSRF add admin Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/webify-photo-gallery-free-php-photo-gallery/32382/ Category:: webapps Demo :...

FreeBSD Ports: bugzilla

The remote host is missing an update to the system as announced in the referenced advisory. VID 309542b5-50b9-11e1-b0d8-00151735203a OpenVAS Vulnerability Test $ Description: Auto generated from VID 309542b5-50b9-11e1-b0d8-00151735203a Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Pluck cms v4.7 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Pluck cms multiple vulnerabilità Date: 09/01/2012 Author: Gordon Security Vendor or Software Link: www.pluck-cms.org Version: 4.7 Category: webapps Website:www.gordon-security.blogspot.com C.S.R.F. 1 Grazie a questo P.o.c...