The Importance of Patching Human Vulnerabilities

Today’s threat landscape is very complex. Cybercriminals use a wide range of threats to hijack people’s computers and to make money illegally. These threats include Trojans of many different kinds, worms, viruses and exploit code which is designed to enable malware to make use of vulnerabilities ...

LionWiki 3.X (index.php) Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== LionWiki 3.X index.php Shell Upload Vulnerability =================================================== Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author:...

LionWiki 3.x - 'index.php' Arbitrary File Upload

Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork : "powered by LionWiki " exploit :...

Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability

No description provided by source. CVE : CVE-2010-0805 !-- .text:600058F7 and ebp+pv, 0 .text:600058FE lea eax, ebp+pv .text:60005904 push eax ; unsigned int16 .text:60005905 push dword ptr ebx+10h ; struct IOleClientSite .text:60005908 call GetHostURLIOleClientSite ,ushort .text:6000590D mov eax...

XT-Commerce 1 Beta 1 Create / Download Backup

======================================================================================== | Title : XT-Commerce v1 Beta 1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by XT-Commerce | Tested on: windows SP2 Français V.Pnx...

Mini-stream Ripper 3.1.0.8 - Local Stack Overflow

Mini-stream Ripper 3.1.0.8 - Local Stack Overflow Mini-stream Ripper 3.1.0.8 = Local stack overflow exploit Author: Hazem Mofeed Download: http://www.mini-stream.net/mini-stream-ripper/download/ Home: http://hakxer.wordpress.com BUFFER + RET + RET + SHELLCODE -- Exploited...

NotSopureEdit 1.4.1 Remote File Inclusion

======================================================== NotSopureEdit Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm cr4wl3r member from Inj3ct0r Team 1 1 0...

Microsoft Issues Fix-It Workaround for IE Zero-Day

Microsoft has released a one-click “fix-it” workaround to help Internet Explorer users block malware attacks against an unpatched browser vulnerability. The Fix-It workaround, available here, effectively disables peer factory in the iepeers.dll binary in affected versions of Internet Explorer. Th...

CVE-2010-0188 Exploit Code

Exploit Title: Adobe Acrobat libtiff Remote Code Execution Date: 2010-03-12 Author: villy http://bugix-security.blogspot.com/ Software Link: http://adobe.com/ Version: Adobe Reader 9.x 9.3.1 Tested on: windows xpsp2 and xp3 CVE : CVE-2010-0188 Full python code on the link :...

Exploit Code Published for Latest IE Zero-Day

Using obvious clues from a McAfee blog post, an Israeli hacker was able to pinpoint the latest Internet Explorer zero-day vulnerability and create working exploit code. The exploit code, which provides a clear roadmap to launch drive-by download attacks against IE 6 and IE 7 users, is being fitte...

JAD java decompiler 1.5.8g (.class) Stack Overflow DoS

Exploit for unknown platform in category local exploits ====================================================== JAD java decompiler 1.5.8g .class Stack Overflow DoS ====================================================== !/usr/bin/env python JAD java decompiler 1.5.8g .class Stack Overflow DoS Test...

JAD java Decompiler 1.5.8g - .class Stack Overflow Denial of Service

JAD java Decompiler 1.5.8g - .class Stack Overflow Denial of Service !/usr/bin/env python JAD java decompiler 1.5.8g .class Stack Overflow DoS Tested on Windows Software Link: http://www.varaneckas.com/jad Author: l3D Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email:...

JAD java Decompiler 1.5.8g - argument Local Crash

JAD java Decompiler 1.5.8g - argument Local Crash !/usr/bin/env python JAD java decompiler 1.5.8g argument Local Crash Tested on Windows Software Link: http://www.varaneckas.com/jad Author: l3D Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] The software...

Lenovo Hotkey Driver 5.33 - Local Privilege Escalation

Lenovo Hotkey Driver 5.33 - Local Privilege Escalation Author: Chilik Tamir - Amdocs Power Security Testing Group Website: http://invalid-packet.blogspot.com/2010/03/full-disclosure-security-vulnerability.html Subject: Security vulnerability in Lenovo Hotkey Driver and Access Connections version...

Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit

No description provided by source. / Apache 2.2.14 modisapi Dangling Pointer Remote SYSTEM Exploit CVE-2010-0425 ------------------------------------------------------------------------------ Advisory: http://www.senseofsecurity.com.au/advisories/SOS-10-002 Description: pwn-isapi.cpp exploits a...

MASA2EL Music City v1. 0 remote injection vulnerability+exploit code-exploit warning-the black bar safety net

google:Powered By : MASA2EL Music City 1.0 Trojan: http://server/path/index.php?go=singer&id=-13//union//select//1,concatUserName,0x3a,PasSword,3,4//from//masa2eladmin,3,4//from//masa2eladmin--...

Internet Explorer VBScript Windows Help arbitrary code execution

Overview Microsoft Internet Explorer is vulnerable to arbitrary code execution through the use of VBScript and Windows Help. Description Microsoft Internet Explorer supports the use of VBScript, in addition to the more widely-used JavaScript scripting language. Several VBScript commands allow a...

Bispage SQL Injection

Exploit Title: bispage Bypass Vulnerability Author: SaMir-BonD [email protected] Organization : TEAM-DZ Formal sites : t00ls.org - h4kz.com Software Link: N/A Script's Language: .ASP Tested on: Windows PHP/4.3.11 os Dork :"Developed by Bispage.com" CVE : if exists Code : exploit code Site page :...

MDaemon SMTP and IMAP Command Buffer Overflow (CVE-2004-1546)

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. A vulnerability exists in the way the MDaemon mail server processes certain SMTP and IMAP commands. A stack buffer overflow occurs when an overly long argument...

Windows Media Player 11.0.5721.5145 Buffer Overflow

!/usr/bin/perl Windows Media Player 11.0.5721.5145 .mpg Buffer Overflow Exploit Homepage: www.microsoft.com Exploit Coded by: cr4wl3r From: Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the condition that is not in the intention of the read...