CVE-2013-1442

Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain...

CVE-2013-1442

Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain...

CVE-2013-1442

CVE-2013-1442 affects Xen 4.0–4.3.x on CPUs with AVX or LWP. The issue is that XSAVE/XRSTOR state extension of a saved/restored vCPU may leave residual data in registers after touching other extended registers, enabling a local guest OS to read sensitive information from those registers. The vuln...

CVE-2013-1442

Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCPU after touching other restored extended registers, which allows local guest OSes to obtain...

Information leak on AVX and/or LWP capable CPUs

ISSUE DESCRIPTION When a guest increases the set of extended state components for a vCPU saved/ restored via XSAVE/XRSTOR to date this can only be the upper halves of YMM registers, or AMD's LWP state after already having touched other extended registers restored via XRSTOR e.g. floating point or...

Amazon Linux AMI : perl-libwww-perl (ALAS-2011-17)

The Net::HTTPS module in libwww-perl LWP before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof...

Broadkam PJ871 Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications !/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; prin...

Broadkam PJ871 Authentication Bypass

!/usr/bin/perl d3c0der use HTTP::Request; use LWP::UserAgent; print "= Target : "; $ip=; chomp $ip; print "= new password : "; $npass=; chomp $npass; if $ip ! /^http:/ $ip = 'http://' . $ip; if $ip ! //$/ $ip = $ip . '/'; print "\n"; print "-attacking , plz wait ! : $ip\n";...

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files t...

Seowonintech Routers Remote Root File Dumper

This exploit dumps an arbitrary file from the filesystem with root level permissions on Seowonintech routers with firmware less than and equal to 2.3.9. !/usr/bin/perl + Seowonintech routers ; $bug = $host."/cgi-bin/systemconfig.cgi?filename=".$file."&btntype=load&action=APPLY"; if$file eq "" pri...

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection

vBulletin 5.0.0 Beta 11 5.0.0 Beta 28 - SQL Injection Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: "Powered by vBulletin™ Version 5.0.0 Beta" Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28...

StarVedia IPCamera IC502w IC502w+ v020313 - UsernamePassword Disclosure

StarVedia IPCamera IC502w IC502w+ v020313 - UsernamePassword Disclosure !/usr/bin/perl + StarVedia IPCamera IC502w IC502w+ v020313 remote bypass username/password disclosure exploit Author: Todor Donev Email: todor.donev at gmail dot com Type: Hardware Thanks to Tsvetelina Emirska the best friend...

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM Exploit

Exploit for multiple platform in category web applications !/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by...

SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x - Remote Command Execution

!/usr/bin/perl Title: SonicWALL GMS/VIEWPOINT 6.x Analyzer 7.x Remote Root/SYSTEM exploit Name: sgmsRCE.pl Author: Nikolas Sotiriu lofi Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. use strict; use HTTP::Request::Common qwPOST; us...

XML-RPC PingBack API Remote DoS Exploit (through xmlrpc.php)

Exploit for php platform in category dos / poc Exploit Title: XML-RPC PingBack API Remote Denial of Service exploit through xmlrpc.php Date: 04/01/2013 Category: Remote Exploit Author: D35m0nd142 Tested on: Debian Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common; use...

WordPress - PICA Photo Gallery Automatic SQL Injection (perl)

Exploit for php platform in category web applications Exploit title: WordPress - PICA Photo Gallery Automatic SQL Injection perl Author: D35m0nd142 Software Link: http://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Google Dork: intext:"Powered by Apptha." inurl:gallery Thanks to...

Debian: Security Advisory (DSA-2570-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Baar3 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

Joomla! Component com_kunena - 'search' SQL Injection

!/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.org/ Special thanks to Taurusomar system"clear"; prin...

Joomla! Component com_kunena - search SQL Injection

Joomla! Component comkunena - search SQL Injection !/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.or...