2130 matches found
Kingview Touchview 6.53 - EIP Overwrite
Exploit Title: Kingview Touchview EIP direct control Date: June 24 2012 Exploit Author: Carlos Mario Penagos Hollmann Vendor Homepage: www.kingview.com Version: 6.53 Tested on: Windows SP 1 CVE : Open kingivew click on Make choose network configuration---network parameter , then go to the node ty...
Attackers Targeting MSXML Flaw With Malicious Flash Files
The unpatched vulnerability in Internet Explorer’s MSXML component that Microsoft warned users about earlier this month is being used in attacks that employ malicious Flash files. Researchers say that the attacks are taking the form of drive-by downloads launched from compromised legitimate sites...
Cisco AnyConnect Secure Mobility Client and Secure Desktop WebLaunch Software Downgrade Vulnerability
Cisco AnyConnect Secure Mobility Client and Secure Desktop contain a vulnerability that could allow an unauthenticated, remote attacker to replace software components on a targeted system. The vulnerability exists because the affected software performs insufficient validation of user-supplied...
Wordpress Plugins (wp-easy-gallery v1.8) Arbitrary Shell Upload
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Novell Client 4.91 SP3/4 Privilege Escalation
Novell Client 4.91 SP3/4 Privilege escalation exploit Download link: http://download.novell.com/Download?buildid=SyZ1G2ti7wU SecurityFocus: http://www.securityfocus.com/bid/27209/info CVE: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5762 Patch:...
BeyondCHM 1.1 - Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= ============================================================================= BeyondCHM 1.1 Buffer Overflow price 32.56 EUR Url: http://www.beyondchm.com/ Author: shinnai...
LibreOffice 3.5.2.2 Memory Corruption
Exploit for multiple platform in category dos / poc -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ?php ------------------------------------------------------------------------------ LibreOffice 3.5.2.2 - soffice.exe\soffice.bin memory corruption author: shinnai mail: shinnaiatautisticidotorg site...
DocuWiki 2012/01/25 Cross Site Request Forgery / Cross Site Scripting
DokuWiki Ver.2012/01/25 Latest Version CSRF Add User Exploit Discovered by : Khashayar Fereidani Team Website : HTTP://IRCRASH.COM IRCRASH Security Community Facebook : http://facebook.com/fereidani Twitter : https://twitter.com/!/IRCRASH Facebook Page :...
Radius Manager V3.0.0=>4.0 CSRF Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
idev-WebsiteBuilder 1.0 CSRF Vulnerability
Exploit for php platform in category web applications Application Name : idev-WebsiteBuilder 1.0 Vulnerable Type : CSRF Demo : http://idevspot.com/demos/idev-websitebuilder/admin Author : Jonturk75 Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-09...
Wolf CMS 0.75 Persistent Cross Site Scripting
+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms al...
Exploit For Ms12-020 RDP Bug Moves to Metasploit
As the inquiry into who leaked the proof-of-concept exploit code for the MS12-020 RDP flaw continues, organizations that have not patched their machines yet have a new motivation to do so: A Metasploit module for the vulnerability is now available. It’s been a week now since Microsoft released a...
Researcher Says 5 Million Machines Exposing RDP Service Online
With exploit code for the MS12-020 RDP vulnerability available in various places, the question now becomes, if a worm or large-scale attack appears, how big is the target base? As it turns out, it’s pretty big. As in, five million machines big. Dan Kaminsky, a network security researcher, last we...
Cisco Unified Communications Manager Device Registration SQL Injection Vulnerability
Cisco Unified Communications Manager contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands in a database underlying the affected application. The vulnerability is due to improper sanitization of input in device registration requests. An...
Novell Groupwise Messenger 2.1.0 - Memory Corruption
Luigi Auriemma Application: Novell GroupWise Messenger http://www.novell.com/products/groupwise/ Versions: NMAPARM1 allows to corrupt the heap memory: 0042BCD9 |. 8B0B MOV ECX,DWORD PTR DS:EBX ; 3 0042BCDB |. 8B55 FC MOV EDX,DWORD PTR SS:EBP-4 ; 3 0042BCDE |. C1EE 02 SHR ESI,2 0042BCE1 |. 81C6...
GAzie <= 5.20 Cross Site Request Forgery
Exploit for php platform in category web applications ======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql...
GAzie 5.20 - Cross-Site Request Forgery
GAzie 5.20 - Cross-Site Request Forgery ======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql database backe...
Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries
Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...
Mempodipper - Linux Local Root for >=2.6.39, 32-bit and 64-bit
No description provided by source. Exploit code is here: http://git.zx2c4.com/CVE-2012-0056/plain/mempodipper.c Blog post about it is here: http://blog.zx2c4.com/749 Exploit Title: Mempodipper - Linux Local Root for =2.6.39, 32-bit and 64-bit Date: Jan 21, 2012 Author: zx2c4 Tested on: Gentoo,...
Attackers Reused Adobe Reader Exploit Code From 2009 In Extremely Targeted Hacks
The targeted attack that exploited a previously unknown vulnerability in Adobe’s Reader application last month was extremely focused on defense industrial base firms, and affected just a handful of systems, according to a company spokesman. Fewer than 20 machines, spread across a number of firms ...