Vulnerability in OpenSSL CVE-2010-4252

An error in OpenSSL’s experimental J-PAKE implementation which could lead to successful validation by someone with no knowledge of the shared secret. The OpenSSL Team still consider the implementation of J-PAKE to be experimental and is not compiled by default...

J-Integra 2.11 Active-X Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

J-Integra 2.11 - Remote Code Execution

J-Integra 2.11 - Remote Code Execution esp = String100, "B" calc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%48%49" & unescape"%49%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%68" & unescape"%58%50%30%42%31%42%41%6b%41%41%78%32%41%42%32%42" &...

J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow

J-Integra 2.11 - ActiveX SetIdentity Buffer Overflow //payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+...

J-Integra 2.11 - ActiveX SetIdentity() Buffer Overflow

//payload is windows/exec cmd=calc.exe shellcode = unescape '%uc931%ue983%ud9de%ud9ee%u2474%u5bf4%u7381%u3d13%u5e46%u8395'+ '%ufceb%uf4e2%uaec1%u951a%u463d%ud0d5%ucd01%u9022%u4745%u1eb1'+ '%u5e72%ucad5%u471d%udcb5%u72b6%u94d5%u77d3%u0c9e%uc291%ue19e'+...

J-Integra 2.11 - Remote Code Execution

esp = String100, "B" calc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%48%49" & unescape"%49%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%68" & unescape"%58%50%30%42%31%42%41%6b%41%41%78%32%41%42%32%42" & unescape"%41%30%42%41%41%58%38%41%42%50%75%59%79%39%6c%4a" &...

Joomla JE FAQ Pro Blind SQL Injection

--------------------------------------------------------------------------------- Joomla Component JE FAQ Pro : Multiple Remote Blind Sql Injection --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn :...

Joomla Component com_jcafe SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comjcafe SQL Injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

CVE-2010-1977

Directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1977

Summary (CVE-2010-1977): A directory traversal/local-file-inclusion vulnerability in the Joomla! extension J!WHMCS Integrator (com_jwhmcs) 1.5.0 allows remote attackers to read arbitrary files by using a ".." path in the controller parameter of index.php. Affected software: Joomla! with com_jwhmc...

CVE-2010-1977: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the J!WHMCS Integrator comjwhmcs component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1340

Directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1340

CVE-2010-1340 affects the Joomla! component com_jresearch. A directory traversal in jresearch.php allows a remote attacker to read arbitrary local files by injecting “..” into the controller parameter of index.php, effectively a local file inclusion. The Nuclei template confirms the LFI vector an...

CVE-2010-1340: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla J!WHMCS Integrator Local File Inclusion

============================================================================================================ o Joomla Component J!WHMCS Integrator Local File Inclusion Vulnerability Software : comjwhmcs version 1.5.0 Vendor : https://client.gohigheris.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBo...

Joomla J!Research Local File Inclusion

--------------------------------------------------------------------------------- Joomla Component J!Research Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email & msn : chipdebiosalt+64gmail.com...

J. River Media Jukebox 12 MP3 File Handling Remote Heap Overflow PoC

Summary Media Jukebox 12 is a media player application for playing various media files on a Windows machine. Description Media Jukebox 12 suffers from a heap overflow vulnerability when processing .mp3 files and its metadata ID3 tags. When a malicious .mp3 file is played the application pops out ...

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attacker...

J. River Media Jukebox 12 - '.mp3' Remote Heap Buffer Overflow

source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the...