SA-CONTRIB-2014-042 - Internationalization - Access Bypass

This module enables you to build multilingual Drupal sites providing missing translation features for Drupal core. The module doesn't sufficiently check content access permissions and under certain circumstances allows users with the "access content" permission to see path aliases from unpublishe...

Firefox 28 Patches Four Pwn2Own Zero-Day Vulnerabilities

The Firefox web browser took a beating during last week’s Pwn2Own contest with researchers bringing four zero-day vulnerabilities and exploits to the table, walking away with a collective $200,000 in prize money in the process. Yesterday, Mozilla capped all four bugs among 18 security advisories...

SA-CONTRIB-2014-025 - Open Omega - Access Bypass

This theme is a sub theme of omega used as as a sample theme for the open Public Distribution. The theme doesn't sufficiently check the users menu access when building the header and footer menus, so that it can expose the title and path of restricted items in the menu. This vulnerability is...

Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service UID - Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python import sys,socket banner = """ Coded by: Muhammad EL Harmeel m.harmeelatgmaildotcom Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows...

Eudora Qualcomm WorldMail 9.0.333.0 - IMAPd Service UID Buffer Overflow

!/usr/bin/python Tested on 6.1.19.0 import sys,socket banner = """ Coded by: Muhammad Alharmeel Details: - PRE AUTHENTICATION Eudora Qualcomm WorldMail 9.0.333.0 IMAPd Service Preauthentication Buffer Overflow. - Tested on: Windows Server 2003 SP1. - SEH gets overwritten at 749 bytes when using U...

[Rootkit Hunter] Scanning tool to ensure you for about 99.9%* you're clean of nasty tools

Rootkit scanner is scanning tool to ensure you for about 99.9% you're clean of nasty tools. This tool scans for rootkits, backdoors and local exploits by running tests like: - MD5 hash compare - Look for default files used by rootkits - Wrong file permissions for binaries - Look for suspected...

Foursquare vulnerability that exposes 45 million users' email addresses

A location based Social Networking platform with 45 million users,'Foursquare' was vulnerable to the primary email address disclosed. Foursquare is a Smartphone application that gives you details of nearby cafes, bars, shops, parks using GPS location and also tells about your friends nearby...

SA-CONTRIB-2013-094 - EU Cookie Compliance - Cross Site Scripting (XSS)

This module enables you to display notifications so that visitors can give their consent to setting cookies by your website. The module doesn't sufficiently fiter and validate configuration values entered by administrators. This vulnerability is mitigated by the fact that an attacker must have a...

SA-CONTRIB-2013-081 - Spaces - Access bypass

This module enables you to make configuration options generally available only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces submodule, Spaces OG, doesn't properly handle deleting of organic group group spaces when the option to move t...

Bitbot (C2 Web Panel) - 'gate2.php' Multiple Vulnerabilities

Exploit Title: Bitbot C2 Panel gate2.php SQLi + XSS Date: 08/19/2013 Exploit Author: Brian Wallace bwall aka @botnethunter Software Link: https://sourceforge.net/p/flippingbitbot/wiki/Home/ Vulnerable Virtual Machine including Bitbot Tested on: Debian/Ubuntu from StringIO import StringIO import...

Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities

Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streaming Engine which has four years of refinement and debugging...

Java Reflection API Vulnerability Exploited

No Java component has had a bigger bull’s eye on its back this year than the Java Reflection API. Bug hunters and hackers alike have found a number of zero-days related to the Reflection API, most of which enable the remote execution of code outside the Java sandbox that’s supposed to prevent suc...

Bifrost 1.2.1 - Remote Buffer Overflow

Bifrost 1.2.1 - Remote Buffer Overflow !/usr/bin/python2.7 By : Mohamed Clay import socket from time import sleep from itertools import izip, cycle import base64 import sys def rc4cryptdata, key: x = 0 box = range256 for i in range256: x = x + boxi + ordkeyi % lenkey % 256 boxi, boxx = boxx, boxi...

First week at MEGA Bounty Program, paid out thousands of dollars for seven Bugs

One week after launching a Bug bounty program by the Kim Dotcom's new file-storage and sharing service MEGA claims to have fixed seven vulnerabilities. Although Mega hasn't shared how much money and to whom it paid out in the first week. But as promised, it is clear that MEGA paid out thousands o...

Linux/x86 - Egghunter (0x50905090) + Null-Free Shellcode (38 bytes)

Linux/x86 - Egghunter 0x50905090 + Null-Free Shellcode 38 bytes. Shellcode exploit for Linuxx86 platform / Egg Hunter Shellcode - C Language - Linux/x86 Copyright C 2013 Geyslan G. Bem, Hacking bits http://hackingbits.com [email protected] This program is free software: you can redistribute it...

Simple Web Server 2.2-rc2 Code Execution

use IO::Socket; Exploit Title: SWS 2.2-rc2 - Remote code execution Egghunting + ASLR bypass Date: 28/8/2012 Special Regards to Mr.pr0n ,Corelan team , immunity u guys are first !!! based on a POC by MR. Pr0n Author: Dhruval [email protected] Tested on Windows 7 32bit NOTE : If exploit is not...

Irfanview JPEG2000 4.3.2.0 jp2 Stack Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Irfanview JPEG2000 %q This modul...

Irfanview JPEG2000 jp2 Stack Buffer Overflow

This module exploits a stack-based buffer overflow vulnerability in version 'Irfanview JPEG2000 jp2 Stack Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in version = 4.3.2.0 of Irfanview's JPEG2000.dll plugin. This exploit has been tested on ...

BizShop - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: BizShop - SQL Injection Vulnerability Author: Dark-Puzzle Category : Webapps Vendor Homepage: http://bizshop.com/ Google Dork: inurl:videos.php?id intext:"Powered by BizShop Webmaster Service" Date: 24 June 2012 Vendor : BizShop...

URL Hunter 3.1.2.1 stack buffer overflow

Exploit for windows platform in category local exploits download : http://www.rm-to-mp3.net/downloads/urlhuntersetup.exe / Exploit Title: URL Hunter 3.1.2.1 .m3u stack buffer overflow Author: Ayrbyte Vendor or Software Link: Mini-stream Software Link : http://mini-stream.net/url-hunter/ Version:...