Oracle Live Help On Demand Webcare Cross Site Scripting

Exploit Title: Oracle Live Help On Demand Webcare Cross Site Scripting Date: 29.02.2012 Author: Sony Software Link: http://www.oracle.com/index.html Google Dorks:inurl:UI/gui.php Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Windows Live Writer ActiveX DoS (WindowsLiveWriter.Application.dll)

Exploit for windows platform in category dos / poc Title: Windows Live Writer ActiveX DoS WindowsLiveWriter.Application.dll Author: Dmar al3noOoz Mail : email protected Software Link : http://explore.live.com/ Version: 14.0.8117.416 Tested on: Windows XP targetFile = "C:\Program Files\Windows...

UBUNTU-CVE-2012-1193

The resolver in PowerDNS Recursor aka pdnsrecursor 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

UBUNTU-CVE-2012-1191

The resolver in dnscache in Daniel J. Bernstein djbdns 1.05 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names"...

kpathsea, mendexk, texlive security update

CentOS Errata and Security Advisory CESA-2012:0137 Updated texlive packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS bas...

RHEL 6 : texlive (RHSA-2012:0137)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0137 advisory. TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent...

Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

Moderate: Red Hat Security Advisory: texlive security update

Updated texlive packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15.2

ManiaDrive is an arcade car game on acrobatic tracks, with a quick and nerv ous gameplay tracks almost never exceed one minute. Features: Complex car physics, Challenging "story mode", LAN and Internet mode, Live scores, Track editor, Dedicated server with HTTP interface and More than 30 blocks...

Al Jazeera news network hacked by Syrian Hackers

Al Jazeera news network hacked by Syrian Hackers Arabic-language news network Al Jazeera's website was hacked last week by a Syrian hacktivist group in support of the government's actions in the country. Aljazeera is broadcaster owned by the state of Qatar through the Qatar Media Corporation and...

Trendnet Camera (Multiple Products) - Remote Security Bypass

Trendnet Camera Multiple Products - Remote Security Bypass source: https://www.securityfocus.com/bid/51922/info Multiple Trendnet Camera products are prone to a remote security-bypass vulnerability. Successfully exploiting this issue will allow remote attackers to gain access to a live stream fro...

Trendnet Camera (Multiple Products) - Remote Security Bypass

source: https://www.securityfocus.com/bid/51922/info Multiple Trendnet Camera products are prone to a remote security-bypass vulnerability. Successfully exploiting this issue will allow remote attackers to gain access to a live stream from the camera. http://www.example.com/anony/mjpg.cgi...

[SECURITY] Fedora 16 Update: ettercap-0.7.4-3.fc16

Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st...

[SECURITY] Fedora 15 Update: ettercap-0.7.4-3.fc15

Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st...

Sandcat Browser - Penetration Testing Oriented Browser

Penetration Testing Oriented Browser - Sandcat Browser The fastest web browser combined with the fastest scripting language packed with features for pen-testers. Sandcat Browser is a freeware portable pen-test oriented multi-tabbed web browser with extensions support developed by the Syhunt team,...

Ajax Upload Shell Upload

Exploit Title: Ajax Upload Arbitrary File Upload Date: 30/01/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Ajax Upload http://valums.com/ajax-upload/ Tested on: Linux Comment Agradezco a mis amigos: Hernan Jais, Alfon...

Ajax Upload Arbitrary File Upload

Exploit for multiple platform in category web applications Exploit Title: Ajax Upload Arbitrary File Upload Date: 30/01/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Ajax Upload http://valums.com/ajax-upload/ Tested o...

Ajax Upload - Arbitrary File Upload

Exploit Title: Ajax Upload Arbitrary File Upload Date: 30/01/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Ajax Upload http://valums.com/ajax-upload/ Tested on: Linux Comment Agradezco a mis amigos: Hernan Jais, Alfon...

miniCMS v1.0 / v2.0 php injection

Exploit for php platform in category web applications Title : miniCMS v1.0 : v2.0 php inject code Author : Or4nG.M4n Version : all version GDork : "This site is managed using MiniCMS©" Download : http://sourceforge.net/projects/mini-cms/files/mini-cms/ Thnks : +----------------------------------+...

MiniCMS 1.0/2.0 - PHP Code Injection

Title : miniCMS v1.0 : v2.0 php inject code Author : Or4nG.M4n Version : all version GDork : "This site is managed using MiniCMS©" Download : http://sourceforge.net/projects/mini-cms/files/mini-cms/ Thnks : +----------------------------------+ | xSs m4n i-Hmx h311 c0d3 | sp. Cyb3r-Crystal |...