3806 matches found
CSO Lanifex Outreach Project Tool 0.946 b Request Origin Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6630/info It has been reported that OPT accepts the values supplied supplied by users in HTTP headers as the originating IP address of a request. It is possible for a remote host to supply a fake IP address in one of thes...
Linux Kernel < 2.6.36-rc6 pktcdvd Kernel Memory Disclosure
No description provided by source. / cve-2010-3437.c Linux Kernel 2.6.36-rc6 pktcdvd Kernel Memory Disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: https://bugzilla.redhat.com/showbug.cgi?id=638085 The PKTCTRLCMDSTATUS device ioctl retrieves a pointer to a...
Fake Identd 0.9/1.x Client Query Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5351/info Fake Identd is an open source Ident server designed to return the same information to all incoming requests. It is implemented by Tomi Ollila, and available for Linux and a number of other Unix based operating...
Social Engine 4.x (Music Plugin) Arbitrary File Upload Vulnerability
No description provided by source. Exploit Title: Social Engine 4.x Music Plugin Arbitrary File Upload Google Dork: inurl:user/auth/forgot Date: 22/12/2010 Author: MyDoom Moroccan Hacker Contact: [email protected] Software Link: http://http://www.socialengine.net Version: Social Engine 4.x...
eFiction <= 2.0 Fake GIF Shell Upload Exploit
No description provided by source. ?php ---efiction20xpl.php 15.19 17/11/2005 eFiction = 2.0 fake GIF Shell Upload coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: If fighting is sure to result in victory, then you must fight,...
Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC
No description provided by source. !/usr/bin/python asmb-heap.py Automated Solutions Modbus/TCP OPC Server Remote Heap Corruption PoC Jeremy Brown 0xjbrown41-gmail-com Jan 2011 A specially crafted length field in a MODBUS packet header can trigger heap corruption. 00408312 | 8B5424 3C MOV EDX,DWO...
Aircrack-ng 0.7 - (Specially Crafted 802.11 Packets) Remote BoF Exploit
No description provided by source. / airodump-exp.c - aircrack/airodump-ng 0.7 remote exploit Proof of concept exploit for a stack and heap based overflow in airodump-ng. The vulnerability can be exploited by transmitting some specially crafted 802.11 packets to execute arbitrary code on any...
Fake Webcam 6.1 - Local Crash PoC
No description provided by source. !/usr/bin/ruby Title: Fake Webcam v.6.1 Local Crash PoC Impact: Crashes the process Tested on: Windows XP SP1/SP2 EN Target: Fake Webcam v.6.1 Download Link: http://www.fakewebcam.com/Download/setup.exe Author: Anastasios Monachos secuid0 -...
OpenSSH/PAM <= 3.6.1p1 Remote Users Ident (gossh.sh)
No description provided by source. !/bin/sh OpenSSH = 3.6.p1 - User Identification. Nicolas Couture - [email protected] Description: -Tells you wether or not a user exist on a distant server running OpenSSH. Usage: -You NEED to have the host's public key before executing this script...
Red Hat CloudForms Management Engine 5.1 - agent/linuxpkgs Path Traversal
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit4 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def...
Zomplog <= 3.7.6 - Local File Inclusion Vulnerabilty (win32)
No description provided by source. Made by Bl0od3r tech-bl0od3r.blogspot.com use IO::Socket; use Switch; $port = 80; $target = @ARGV0; $folder = @ARGV1; @paths= ../../../../../var/log/httpd/accesslog, ../../../../../var/log/httpd/errorlog, ../apache/logs/error.log, ../apache/logs/access.log,...
Star Wars Battlefront <= 1.1 Fake Players Denial of Service Exploit
No description provided by source. / Copyright 2004 Luigi Auriemma This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later...
Cisco Adaptive Security Appliance 8.x Web VPN FTP or CIFS Authentication Form Phishing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35475/info Cisco Adaptive Security Appliance ASA is prone to a vulnerability that can aid in phishing attacks. An attacker can exploit this issue to display a fake login window that's visually similar to the device's logi...
Zeus Alternative Pandemiya Banking Malware For Sale in Underground Forums
A new and relatively rare Zeus Trojan program has found which is totally different from other banking Trojans and has capability to secretly steal data from forms, login credentials and files from the victim as well as can create fake web pages and take screenshots of victim's computer. Researche...
Fake 'Placebo Apps' Booted From Google Play, Amazon
A handful of apps purporting to specialize in virus detection and malware scanning were recently removed from Google’s Play marketplace and Amazon after being deemed fake. Security researchers at FireEye discovered five apps in particular that accounted for up to 50,000 downloads and essentially...
Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 30, 2014
Medium Alert ID: 34429 First Published: 2014 May 30 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order request for the recipient. The text in the email message attempts to convince the recipient to op...
Threat Outbreak Alert: Fake Bank Statements Notification Email Messages on May 29, 2014
Medium Alert ID: 34416 First Published: 2014 May 29 18:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank statements for the recipient. The text in the email message attempts to convince the recipient to open the...
Threat Outbreak Alert: Fake Picture Sharing Email Messages on May 29, 2014
Medium Alert ID: 34412 First Published: 2014 May 29 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to...
Iranian Campaign Snooped on U.S. and Israeli Officials
Iranian spies have carried out an intelligence gathering campaign since at least 2011 by targeting U.S. military, diplomats, D.C. journalists, and government emissaries, just to name a few, a via social media. According to iSIGHT Partners, a cyber threat intelligence firm, attackers have long bee...
Threat Outbreak Alert: Fake Payment Details Email Messages on May 28, 2014
Medium Alert ID: 34404 First Published: 2014 May 29 13:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment details for the recipient. The email message attempts to convince the recipient to open the attachment and...