Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwri...

HD Moore on the Windows DLL Vulnerability

Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers...

HD Moore: Critical Flaw in 40 Different Windows Apps

Metasploit’s HD Moore was in the midst of researching the recently patched LNK Windows shortcut vulnerability when he stumbled upon a serious problem that exposes more than 40 different Windows software programs to remote code execution attacks. Moore issued a brief warning about the issue via...

[R7-0035] VxWorks Authentication Library Weak Password Hashing

R7-0035: VxWorks Authentication Library Weak Password Hashing August 2, 2010 -- Vulnerability Details: This vulnerability allows remote attackers to bypass the authentication process for the Telnet and FTP services of the VxWorks operating system. This flaw occurs due to an insecure password...

JC - Top 25 Movie Trailers module XSS Vulnerability

Exploit for php platform in category web applications =================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Making Penetration Testing Mainstream

HD Moore, the founder of the Metasploit Project and now the CSO of Rapid7, talks at the SOURCE conference in Boston about the mainstream acceptance and importance of penetration testing...

Mandriva Update for gdm MDVA-2010:133 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Mandriva Update for gdm MDVA-2010:133 (gdm)

Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Sql injection

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2010-1372

The CVE-2010-1372 issue affects the Joomla! extension HD FLV Player (com_hdflvplayer) version 1.3. The vulnerability is an SQL injection in the index.php id parameter, enabling remote attackers to manipulate the database. CVSS2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No explicit exploit deta...

CVE-2010-1372

SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

HD Moore on Metasploit, Exploitation and the Art of Pen Testing

Dennis Fisher talks with HD Moore, the founder of the Metasploit Project and the chief security officer at Rapid7, about the evolution of Metasploit, the difficulty of client-side exploitation in the age of DEP and ASLR and the decision on when to publish an exploit. Podcast audio courtesy of...

Joomla! Component HD FLV Player - 'id' SQL Injection

source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

World Cup Email Scams on the Rise

Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. The Register...

Mozilla Firefox Crash Exploit

Firefox 3.5 Vulnerability Firefox 3.5 Heap Spray Vulnerabilty Author: SBerry aka Simon Berry-Byrne Thanks to HD Moore for the insight and Metasploit for the payload Loremipsumdoloregkuw Loremipsumdoloregkuwiert Loremikdkw / Calc.exe / var shellcode =...

Mozilla Firefox 3.5 Remote Buffer Overflow Exploit (untested crash)

No description provided by source. html head titleFirefox 3.5 Vulnerability/title Firefox 3.5 Heap Spray Vulnerabilty /br Author: SBerry aka Simon Berry-Byrne /br Thanks to HD Moore for the insight and Metasploit for the payload div id="content" p FONT /FONT /p p FONTLoremipsumdoloregkuw/FONT/p p...

Mozilla Firefox 3.5 (Font tags) Remote Buffer Overflow Exploit

No description provided by source. html head titleFirefox 3.5 Vulnerability/title Firefox 3.5 Heap Spray Vulnerabilty /br Author: SBerry aka Simon Berry-Byrne /br Thanks to HD Moore for the insight and Metasploit for the payload div id="content" p FONT /FONT /p p FONTLoremipsumdoloregkuw/FONT/p p...

Mozilla Firefox 3.5 Remote Buffer Overflow Exploit (untested crash)

Exploit for unknown platform in category remote exploits =================================================================== Mozilla Firefox 3.5 Remote Buffer Overflow Exploit untested crash =================================================================== Firefox 3.5 Vulnerability Firefox 3.5...