1022 matches found
HP Data Protector 8.10 Remote Command Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector 8.10 Remote Command Execution', 'Description' = %q This module exploits a remote command execution on HP Data...
Threat Outbreak Alert RuleID13760: Email Messages Distributing Malicious Software on February 28, 2015
Medium Alert ID: 37679 First Published: 2015 March 2 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13760 may contain the following files: Name | Siz...
Threat Outbreak Alert RuleID13697: Email Messages Distributing Malicious Software on February 24, 2015
Medium Alert ID: 37568 First Published: 2015 February 24 18:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13697 may contain the following files: Name |...
Threat Outbreak Alert RuleID13679: Email Messages Distributing Malicious Software on February 23, 2015
Medium Alert ID: 37556 First Published: 2015 February 23 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13679 may contain the following files: Name |...
MvMmallv5. 5SQL injection of php exp exploit-vulnerability warning-the black bar safety net
Vulnerability type: MvMmall v5. 5. 1 SQL injection vulnerability Default background:admincp. php? module=index Google search:”Powered by MvMmall v5. 5. 1" One, use: php exp use 1 Install the php environment Use phpnow very simple to install. 2 Use exp attack Link: Extract password: aahj The exp...
Adobe Flash Player Improper File Validation (APSB15-01: CVE-2015-0301)
An improper file validation issue has been reported in Adobe Flash Player. The vulnerability occurs when the Flash Broker application allows malicious dlls or exes files to be written to one of the whitelisted directories. such a malicious dll dropped in these directories could be used to deliver...
Threat Outbreak Alert RuleID4961KVR: Email Messages Distributing Malicious Software on July 8, 2016
Medium Alert ID: 36917 First Published: 2015 January 6 13:54 GMT Last Updated: 2016 July 8 20:47 GMT Version: 63 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4961 and...
Microsoft-Office-2010-Exec-Code
Exploit Title: MS Office 2010 Download Execute Google Dork: NA Date: 19 Feb 2013 Exploit Author: g11tch Vendor Homepage: Software Link: Version: ALL import binascii import sys import time print "Microsoft Office 2010, download -N- execute " print " What do you want to name your .doc ? " print "...
Microsoft Windows - win32k.sys Denial of Service
Microsoft Windows - win32k.sys Denial of Service Exploit Title: Microsoft Windows Win32k.sys Denial of Service Date: 20-11-2014 Exploit Author: Kedamsky [email protected] Vendor Homepage: http://microsoft.com Software Link: http://www.microsoft.com/en-us/download/windows.aspx Version: XP SP3, Vist...
HP Data Protector 8.10 Remote Command Execution
This module exploits a remote command execution on HP Data Protector 8.10. Arbitrary commands can be executed by sending crafted requests with opcode 28 to the OmniInet service listening on the TCP/5555 port. Since there is a strict length limitation on the command, rundll32.exe is executed, and...
Windows latest 2 0 1 4 providing the right tools MS14-0 5 8 EXP-vulnerability warning-the black bar safety net
By CrowStrike found that the use of more than six months of Windows local to mention the right vulnerability MS14-0 5 8CVE-2 0 1 4-4 1 1 3tool have been disclosed. Lift it right the success rate reaches 1 0 0%: The following figure shows that the current user has insufficient permissions cannot a...
CVE-2 0 1 4-4 1 1 3 exploit Process Analysis-vulnerability warning-the black bar safety net
0x00 description By VMware and Windbg build the 3 2-bit kernel debugging environment, the system is xp sp2, 执行漏洞利用程序win32.exe calc.exe, pop-up a SYSTEM of permissions calc. ! enter image description here Through the IDA analysis win32.exe can be seen signed int cdecl sub4010F2 function by calling...
Out-of-bounds
IOServer before Beta2112.exe allows remote attackers to cause a denial of service out-of-bounds read and master entry consumption via a null DNP3 header...
CVE-2014-5425
IOServer before Beta2112.exe allows remote attackers to cause a denial of service out-of-bounds read and master entry consumption via a null DNP3 header...
CVE-2014-5425
CVE-2014-5425 affects IOServer and related DNP3 implementations. The flaw is an out-of-bounds read triggered by a null DNP3 header, leading to potential remote denial of service by exhausting master entries. According to ICS-CERT advisories, IOServer (Beta2112.exe) and related DNP3 implementation...
CrowdStrike found Windows x64 to mention the right to 0day (CVE-2 0 1 4-4 1 1 3)-vulnerability warning-the black bar safety net
Monitoring the program to display from the WEBSHELL using Win64. exe to elevate permissions | 1 | net localgroup administrators admin /add ---|--- 1 2 3 4 next...
Threat Outbreak Alert RuleID8337: Email Messages Distributing Malicious Software on December 11, 2014.
Medium Alert ID: 35945 First Published: 2014 October 6 14:56 GMT Last Updated: 2014 December 12 13:40 GMT Version: 44 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337K...
ManageEngine Desktop Central StatusUpdate Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability in ManageEngine DesktopCentral v7 to v9 build 90054 including the MSP versions. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution as SYSTEM. Some early builds of version ...
Sql injection
Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the 1 SerialNumber field to activate.asp or 2 UID field to User-Edit.asp...
