Cache: NonManagedConnectionFactory will log password in clear text when an exception occurs

The NonManagedConnectionFactory in JBoss Enterprise Application Platform EAP 5.1.2 and 5.2.0, Web Platform EWP 5.1.2 and 5.2.0, and BRMS Platform before 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensitive information by readi...

Format Factory v3.0.1 Profile File Handling Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: FormatFactory v3.0.1 Profile File Handling Buffer Overflow Version: = 3.0.1 Date: 2012-11-19 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://www.pcfreetime.com Tested o...

Fake Lookout android app stealing your SMS and MMS messages

Android's App store is currently facing a new dilemma as its security has been compromised once again. Researchers from security firm TrustGo have recently spotted on Google Play a bogus app that supposedly automatizes the updating of a batch of other apps. The malicious code was hidden within an...

Line of code let the Samsung galaxy do Factory Reset-vulnerability warning-the black bar safety net

SAMSUNG including the GALAXY S3 and other models of the smart phone there is a serious security vulnerability, a line of USSD code can be formatted the phone and even damage the SIM card! The current is determined there is a problem of the phone as follows: Galaxy S3, Galaxy S2, Galaxy Ace, Galax...

New Android Exploit Could Force Factory Reset remotely

Clicking one wrong link can cause malicious code to execute, which could do anything from infecting your computer with malware to, apparently, wiping your phone data completely. At the Ekoparty security conference, researcher Ravi Borganokar demonstrated at the Ekoparty security conference in...

Thomson Wireless VoIP Cable Modem - Authentication Bypass

Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated Backup File Access, Plaintext Protocol...

Juniper Junos load factory-default Privilege Escalation (PSN-2012-07-646)

According to its self-reported version number, the remote Junos device has a privilege escalation vulnerability. When the 'load factory-default' command fails in exclusive edit mode, the user is no longer subject to any command or configuration restrictions. C Tenable Network Security, Inc...

WEB Factory Ltda SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Tom Sawyer Software GET Extension Factory - Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3...

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow

Sielco Sistemi Winlog 2.07.16 - Remote Buffer Overflow !/usr/bin/ruby Exploit Title: Sielco Sistemi Winlog Buffer Overflow = v2.07.16 Date: 05.06.2012 Exploit Author: m1k3 Vendor Homepage: http://www.sielcosistemi.com/en/download/public/winloglite.html Software Link:...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Exploit for windows platform in category dos / poc Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Introduction: ============= Format Factory is a multifunctional media converter. Provides functions below ... - All to MP4/3GP/MPG/AVI/WMV/FLV/SWF. - All to...

Format Factory 2.95 Buffer Overflows

Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 VL-ID: ===== 536 Introduction: ============= Format Factory is a...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory v2.95 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 Release Date: ============= 2012-05-01 Vulnerability...

Format Factory - Multiple Buffer Overflow Vulnerabilities

Exploit for windows platform in category local exploits Title: ====== Format Factory - Multiple Buffer Overflow Vulnerabilities Details: ======== The following video has been produced by Ibrahim El-Sayed & Benjamin Kunz Mejri. The video is about how to identify different local stack- & buffer...

Format Factory - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory - Multiple Buffer Overflow Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/539.wmv View: http://www.youtube.com/watch?v=AttylUIjY Article: http://www.vulnerability-lab.com/getcontent.php?id=539...

Format Factory - Multiple Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory - Multiple Buffer Overflow Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/539.wmv View: http://www.youtube.com/watch?v=AttylUIjY Article: http://www.vulnerability-lab.com/getcontent.php?id=539...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Exploit for windows platform in category local exploits Title: ====== Format Factory v2.95 - Buffer Overflow Vulnerabilities Introduction: ============= Format Factory is a multifunctional media converter. Provides functions below ... - All to MP4/3GP/MPG/AVI/WMV/FLV/SWF. - All to...

Format Factory v2.95 - Buffer Overflow Vulnerabilities

Document Title: =============== Format Factory v2.95 - Buffer Overflow Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=536 http://www.vulnerability-lab.com/getcontent.php?id=539 Release Date: ============= 2012-05-01 Vulnerability...

CVE-2012-2441

RuggedCom Rugged Operating System ROS before 3.3 has a factory account with a password derived from the MAC Address field in a banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 SSH or 2 HTTPS session, a...

CVE-2012-1803

RuggedCom Rugged Operating System ROS 3.10.x and earlier has a factory account with a password derived from the MAC Address field in the banner, which makes it easier for remote attackers to obtain access by performing a calculation on this address value, and then establishing a 1 TELNET, 2 remot...