1279 matches found
HTC HD Mini Gets Hacked, Now Runs Android !
The HTC HD Mini, also previously known as Photon, is pretty old as far as smartphones go--the Windows Mobile 6.5 phone was first released back in February 2010. So a XDA Developer member has given the cellphone a new lease of life by bringing Android and Linux OS to it. Forum member "Cotulla"...
Check Point Endpoint Security Server Information Disclosure
R7-0038: Check Point Endpoint Security Server Information Disclosure February 7, 2011 -- Vulnerability Details: The Check Point Endpoint Security Server and Integrity Server products inadvertently expose a number of private directories through the web interface. These directories include the SSL...
CVE-2010-4233: Undefined Security Weakness
The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access...
CVE-2010-4231: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...
CVE-2010-4232: Improper Authentication
The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // slash slash at the beginning of a URI, as demonstrated by the //system.html URI...
CVE-2010-4234: Undefined Security Weakness
The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service device reboot via a large number of requests in a short time interval...
CVE-2010-4230: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method...
Realtek HD Audio Control Panel 2.1.3.2 Buffer Overflow
done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwri...
Realtek HD Audio Control Panel 2.1.3.2 Exploit
Exploit for windows platform in category local exploits ============================================== Realtek HD Audio Control Panel 2.1.3.2 Exploit ============================================== done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH...
Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow
Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter...
Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow
done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter. Shellcode can by run via classic ret overwrite or SEH Handler overwri...
HD Moore on the Windows DLL Vulnerability
Dennis Fisher talks with HD Moore about the newly discovered DLL load vulnerability in Windows, which affects several dozen applications and can be used by attackers to silently compromise remote machines, as well as the guidance and workarounds that Microsoft is offering for users and developers...
HD Moore: Critical Flaw in 40 Different Windows Apps
Metasploit’s HD Moore was in the midst of researching the recently patched LNK Windows shortcut vulnerability when he stumbled upon a serious problem that exposes more than 40 different Windows software programs to remote code execution attacks. Moore issued a brief warning about the issue via...
[R7-0035] VxWorks Authentication Library Weak Password Hashing
R7-0035: VxWorks Authentication Library Weak Password Hashing August 2, 2010 -- Vulnerability Details: This vulnerability allows remote attackers to bypass the authentication process for the Telnet and FTP services of the VxWorks operating system. This flaw occurs due to an insecure password...
JC - Top 25 Movie Trailers module XSS Vulnerability
Exploit for php platform in category web applications =================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...
Making Penetration Testing Mainstream
HD Moore, the founder of the Metasploit Project and now the CSO of Rapid7, talks at the SOURCE conference in Boston about the mainstream acceptance and importance of penetration testing...
Mandriva Update for gdm MDVA-2010:133 (gdm)
Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Mandriva Update for gdm MDVA-2010:133 (gdm)
Check for the Version of gdm OpenVAS Vulnerability Test Mandriva Update for gdm MDVA-2010:133 gdm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
Sql injection
SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
