4847 matches found
FireEye Uncovers Android Remote Access Malware
UPDATE: A previous version of this story incorrectly stated that the malware disables any antivirus application. In reality, the malware only uninstalls a particular antivirus application,“com.ahnlab.v3mobileplus,” that is often bundled with certain banking applications. A new remote access tool...
Xerox Workcenter 4150 Remote Buffer Overflow
No description provided by source. Application: Xerox Workcenter 4150 Remote Buffer Overflow Platforms: Xerox Workcenter 4150 Discover Date: 2009-12-21 Author: Francis Provencher Protek Research Lab's Blog: http://www.Protekresearchlab.com 1 Introduction 2 Report Timeline 3 Technical details 4 Th...
ManageEngine ServiceDesk Plus 8.0 - Multiple Stored XSS Vulnerabilities
No description provided by source. ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help desk requests and...
Baby Gekko CMS 1.1.5c - Multiple Stored XSS Vulnerabilities
No description provided by source. Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web content fast and ea...
ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability
No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...
Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC
No description provided by source. !/usr/local/bin/perl Macro Express Pro 4.2.2.1 MXE File Syntactic Analysis Buffer Overflow PoC Vendor: Insight Software Solutions, Inc. Product web page: http://www.macros.com Affected version: 4.2.2.1 and 4.2.1.1 Summary: Macro Express is the premier Windows...
Seattle Lab Mail 5.5 - POP3 Buffer Overflow
No description provided by source. $Id: seattlelabpass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
Sonicwall Scrutinizer 9.5.2 - SQL Injection Vulnerability
No description provided by source. Title: ====== Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability Date: ===== 2013-02-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=789 9984: Investigate Vulnerability Lab issues this ticket included tracking the creation o...
TCExam <= 11.2.011 - Multiple SQL Injection Vulnerabilities
No description provided by source. TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based...
ImpressPages CMS 3.6 - manage() Function Remote Code Execution Exploit
No description provided by source. ?!/usr/bin/python ImpressPages CMS v3.6 manage Function Remote Code Execution Exploit Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6, 3.5 and 3.1 Summary: ImpressPages CMS is an open source web content management...
IrfanView RLE Image Decompression Buffer Overflow Vulnerability
No description provided by source. Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...
XnView 1.98.8 TIFF Image Processing Heap Overflow
No description provided by source. Application: XnView TIFF Image Processing Heap Overflow Platforms: Windows Secunia: SA48666 PRL: 2012-16 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
Zen Cart 1.3.9f (typefilter) - Local File Inclusion Vulnerability
No description provided by source. Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML...
Cool PDF Reader 3.0.2.256 Buffer Overflow
No description provided by source. Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis...
Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC
No description provided by source. / Title: Native Instruments Kontakt 4 Player NKI File Syntactic Analysis Buffer Overflow PoC Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 4.1.3.4125 Standalone Summary: KONTAKT 4 PLAYER is the free sample...
Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption Vulnerability
No description provided by source. Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 5.5.1 R10584 or 5.5.1.10584 Tested on: Microsoft Windows XP Professional SP3...
AnvSoft Any Video Converter 4.3.6 Stack Overflow Exploit
No description provided by source. !/usr/bin/python Exploit Title: AnvSoft Any Video Converter 4.3.6 Stack Overflow Author: cikumel @mhxx and y0k @riy0wid from @spentera research Website: http://www.spentera.com Platform: Windows Tested on: Windows XP SP3 Based on POC by Vulnerability-Lab...
Aladdin eToken PKI Client 4.5 - Virtual File Handling Unspecified Memory Corruption PoC
No description provided by source. !/usr/bin/perl -w Title: Aladdin eToken PKI Client v4.5 Virtual File Handling Unspecified Memory Corruption PoC Summary: The eToken PKI Client is the software that enables eToken USB operation and the implementation of eToken PKI-based solutions. These solutions...
XnView RAS Image Processing Heap Overflow
No description provided by source. Application: XnView RAS Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-14 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...
Novell Groupwise Address Book Remote Code Execution
No description provided by source. Application: Novell Groupwise Address Book Remote Code Execution Platforms: Windows Exploitation: Remote code execution CVE Number: 2011-4189 Novell TID: 733885 PRL: 2012-04 Author: Francis Provencher Protek Research Lab's Website:...