1279 matches found
CVE-2010-1372
The CVE-2010-1372 issue affects the Joomla! extension HD FLV Player (com_hdflvplayer) version 1.3. The vulnerability is an SQL injection in the index.php id parameter, enabling remote attackers to manipulate the database. CVSS2 base score 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). No explicit exploit deta...
CVE-2010-1372
SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
CVE-2010-1372: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the HD FLV Player comhdflvplayer component 1.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...
HD Moore on Metasploit, Exploitation and the Art of Pen Testing
Dennis Fisher talks with HD Moore, the founder of the Metasploit Project and the chief security officer at Rapid7, about the evolution of Metasploit, the difficulty of client-side exploitation in the age of DEP and ASLR and the decision on when to publish an exploit. Podcast audio courtesy of...
Joomla! Component HD FLV Player - 'id' SQL Injection
source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Joomla! Component HD FLV Player - id SQL Injection
Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...
Windows SYSTEM Escalation via KiTrap0D
This module will create a new session with SYSTEM privileges via the KiTrap0D exploit by Tavis Ormandy. If the session in use is already elevated then the exploit will not run. The module relies on kitrap0d.x86.dll, and is not supported on x64 editions of Windows. Module Options msf use...
World Cup Email Scams on the Rise
Cybercrooks have begun punting World Cup ticket and HD TV viewing scams as a successor to earlier lottery-based cons. Read the full article. The Register...
Mozilla Firefox Crash Exploit
Firefox 3.5 Vulnerability Firefox 3.5 Heap Spray Vulnerabilty Author: SBerry aka Simon Berry-Byrne Thanks to HD Moore for the insight and Metasploit for the payload Loremipsumdoloregkuw Loremipsumdoloregkuwiert Loremikdkw / Calc.exe / var shellcode =...
Mozilla Firefox 3.5 Remote Buffer Overflow Exploit (untested crash)
No description provided by source. html head titleFirefox 3.5 Vulnerability/title Firefox 3.5 Heap Spray Vulnerabilty /br Author: SBerry aka Simon Berry-Byrne /br Thanks to HD Moore for the insight and Metasploit for the payload div id="content" p FONT /FONT /p p FONTLoremipsumdoloregkuw/FONT/p p...
Mozilla Firefox 3.5 (Font tags) Remote Buffer Overflow Exploit
No description provided by source. html head titleFirefox 3.5 Vulnerability/title Firefox 3.5 Heap Spray Vulnerabilty /br Author: SBerry aka Simon Berry-Byrne /br Thanks to HD Moore for the insight and Metasploit for the payload div id="content" p FONT /FONT /p p FONTLoremipsumdoloregkuw/FONT/p p...
Mozilla Firefox 3.5 Remote Buffer Overflow Exploit (untested crash)
Exploit for unknown platform in category remote exploits =================================================================== Mozilla Firefox 3.5 Remote Buffer Overflow Exploit untested crash =================================================================== Firefox 3.5 Vulnerability Firefox 3.5...
Mozilla Firefox 3.5 - Font tags Remote Buffer Overflow
Firefox 3.5 Vulnerability Firefox 3.5 Heap Spray Vulnerabilty Author: SBerry aka Simon Berry-Byrne Thanks to HD Moore for the insight and Metasploit for the payload Loremipsumdoloregkuw Loremipsumdoloregkuwiert Loremikdkw / Calc.exe / var shellcode =...
Month of Twitter Bugs Coming in July
A security researcher who specializes in browser and Web 2.0 vulnerabilities plans to use the month of July to expose serious vulnerabilities in the Twitter ecosystem. The Month of Twitter Bugs, a project which launches on July 1, is the handiwork of Aviv Raff. It will disclose a combination of...
Elecard AVC HD Player Buffer Overflow Vulnerability
Elecard AVC HD Player is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elecard AVC HD Player Version Detection
The script detects the Elecard AVC HD Player installed on host and sets the version in KB. OpenVAS Vulnerability Test $Id: secpodelecardavchdplayerdetect.nasl 7293 2017-09-27 08:49:48Z cfischer $ Elecard AVC HD Player Application Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009...
Elecard AVC HD Player Version Detection
The script detects the Elecard AVC HD Player installed on host. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...
Elecard AVC HD Player Buffer Overflow Vulnerability
This host is installed Elecard AVC HD Player and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodelecardavchdplayerbofvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Elecard AVC HD Player Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...
