DEBIAN-CVE-2015-0857

Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a 1 tar file or 2 file within a tar file...

RTL INSIDE - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RTL INSIDE published at the 'play' market has multiple vulnerabilities...

Ashley Madison Hacker – An Insider Woman Employee?

"Ashley Madison was not hacked!" This is what declared by John McAfee, former founder of antivirus software company McAfee. So far everyone must be aware of Ashley Madison massive data breach. Last week, the hackers, who called themselves Impact Team, posted 10GB of personal data for tens of...

CVE-2014-6669

CVE-2014-6669 affects the Android app “Inside Crochet” (package com.magazinecloner.insidecrochet). The provided documents state that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The Point Inside Shopping & Travel aka com.pointinside.android.app application 3.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5677

The CVE-2014-5677 entry affects the Point Inside Shopping & Travel Android app (com.pointinside.android.app) version 3.1.0, where the SSL/TLS implementation does not verify X.509 certificates. According to the description, this improper certificate validation enables man-in-the-middle attackers t...

kernel: powerpc: tm: crash when forking inside a transaction

A flaw was found in the way the Linux kernel performed forking inside of a transaction. A local, unprivileged user on a PowerPC system that supports transactional memory could use this flaw to crash the system...

RHEL 6 : MRG (RHSA-2013:0829)

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Calendarix 0.8.20071118 - SQL Injection

No description provided by source. Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : inurl:calday.php?op=day&catview= Solution : Updat...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:0744 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

Unfixed XSS vulnerability at www.insidefutures.com

Security researcher aSUaBANG, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.insidefutures.com, which at the time of submission ranked 259142 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

vBulletin 4.0.4 Code Execution

/======================================================================\ || || || Vurnerebility vBulletin - http://www.vbulletin.org || || Local or adserver Javascript,forumdisplay.php" Code Execution || || Version license 4.0.4 || || info set cookies, error issue & critical-information-disclosur...

ShortCMS 1.2.0 SQL Injection

Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in printView page of News . : :::I...

ShortCMS 1.2.0 - SQL Injection

ShortCMS 1.2.0 - SQL Injection Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in...

Calendarix v0.8.20071118 SQL Injection

Exploit for unknown platform in category web applications ====================================== Calendarix v0.8.20071118 SQL Injection ====================================== Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et http://vulnWebSite/calday.php?op=day&catview=-2...

Unfixed XSS vulnerability at www.informatique-inside.com

Security researcher Xylitol, has submitted on 08/03/2009 a cross-site-scripting XSS vulnerability affecting www.informatique-inside.com, which at the time of submission ranked 2253234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2009. ...

Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow

Abee Chm eBook Creator 2.11 - Filename Local Stack Overflow exploit.py Abee Chm eBook Creator 2.11 Stack overflow Exploit By:Encrypt3d.M!nd it's the same exploit i wrote for chm maker,everything is the same!! but there's a lil note that when importing 'DevilInside.chmprj' a message will pops up a...

Abee Chm Maker 1.9.5 - '.CMP' Local Stack Overflow

exploit.py Abee Chm Maker 1.9.5 Stack overflow Exploit By:Encrypt3d.M!nd After importing "Devilinside.cmp" file into the program go to FileMake CHM.. Then...watch : . i've used SEH overwrite method to make it more stable. btw:it's universal so don't bother your self with finding addresses ; ns =...

Chasys Media Player 1.1 (.pls) Stack Overflow Exploit #2

No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .pls Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header =...