NullHole Exploit Kit Landing Page

NullHole exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with NullHole xploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Executio...

Spartan Exploit Kit Landing Page

Spartan exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Spartan exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution...

Angler Exploit Kit Landing Page Patterns

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Beta (Sundown) Exploit Kit Landing Page

Beta exploit kit, a.k.a. Sundown exploit kit, is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Beta exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perfor...

F5 BIG-IP ASM 11.4.1 Filter Bypass

Details ======= Product: F5 BIG-IP Application Security Manager ASM Vulnerability: Web Application Firewall Bypass Author: Peter Lapp, lappsec gmail com CVE: None assigned Vulnerable Versions: Confirmed 11.4.0, 11.4.1. Should apply to all releases. Fixed Version: None Summary ======= The F5 ASM i...

RIG Exploit Kit Landing Page

RIG exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

F5 Networks BIG-IP : BIG-IP Automatic Update Check and ASM Automatic Signature Update man-in-the-middle vulnerability (K16090)

The automatic signature update functionality in the 1 Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the 2 Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0...

Hackers use PDF generator to steal the WEB files on the server-the vulnerabilities and early warning-the black bar safety net

TCPDF PDF generator is the most popular today for creating a PDF document the PHP library one of today's most popular open source projects. It every day with millions of user usage, the carrier generally is a CMS program or other WEB application. However, the hacker using TCPDF's a loophole that...

HanJuan Exploit Kit Landing Page (CVE-2015-0313)

HanJuan exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with HanJuan exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution...

Analysis of Flash Zero Day Shows Layers of Obfuscation

The Flash zero day that made its way into the Angler exploit kit was wrapped in multiple layers of obfuscation and has the ability to inject its malicious payload straight into users’ browsers. In the last week, since the news broke of the Adobe Flash zero-day flaw appearing in the Angler kit,...

帝友P2C借贷系统前台getshell#1

简要描述： 帝友P2C借贷系统前台getshell1 详细说明： 这次是帝友公司旗下出的另一套电子商务cms 不是帝友p2p！ 官方最新版本是 帝友P2C借贷系统V1.01 上传头像处存在getshell 已官方演示站做演示 已注册账号，账号密码都是test1a 访问 http://p2c.diyou.cc/?user&m=approve/safe 上传头像，抓包 修改数据包，插入一句话木马，修改后缀为php后缀 虽然回显500，但是phpshell已经上传了 dyupfiles/avatar/diyou/用户id.php 得到...

FatPlayer-0.6b-(.wav)

Exploit Title: FatPlayer 0.6b Malicious WAV Buffer Overflow Vulnerability SEH Date: 10/18/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/fatplayer/files/ Version: 0.6 Beta junk = "\x41" 4132 nSEH = "\x90\x90\xeb\x06" SEH = 0x0046bee3.pack'V' pop pop...

ActFax-4.31---Local-System

Title: ActFax 4.31 Local Privilege Escalation Exploit Author: Craig Freyman @cd1zz Discovered: July 10, 2012 Vendor Notified: June 12, 2012 Description: http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html sc = "\x89\xe5\xdb\xce\xd9\x75\xf4\x58\x50\x59\x49\x49\x49\x49"...

BlazeVideo-HDTV-Player-6.6

Exploit Title: BlazeVideo HDTV Player 6.6 Professional Direct Retn Date: 11-25-2012 Exploit Author: Nezim @nezimlufni Vendor Homepage: http://www.blazevideo.com/ Version: BlazeVideo HDTV Player 6.6 Professional filename="video.PLF" junk = "http://"+"\x90"253 junk +="\x33\xBF\x96\x7C" junk +="\x90...

Magnitude Exploit Kit Landing Page

Magnitude exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Magnitude exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code...

LeapFTP-3.1.0-URL-Handling

Exploit Title: LeapFTP 3.1.0 URL Handling SEH Exploit Google Dork: "k3170makan is totally awesome" hehehe Date: 2014-08-28 Exploit Author: k3170makan Vendor Homepage: http://www.leapware.com/ Software Link: http://www.leapware.com/download.html Version: 3.1.0 Tested on: Windows XP SP0 DoS on...

Astrum Exploit Kit Landing Page

Astrum exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Astrum exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Angler Exploit Kit Landing Page - Ver 2

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...

Gondad Exploit Kit Landing Page

Gondad exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Gondad exploit kit by enticing them to visit a malicious web page. Successful infection will compromise the security of all data on the victim's...

Angler Exploit Kit Landing Page

Angler exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with Angler exploit kit by enticing them to visit a malicious web page. Successful infection will allow the attacker to perform Remote Code Execution o...