ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution

===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a...

WordPress Wp-Gpx-Map 1.1.21 Shell Upload

Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link: http://downloads.wordpress.org/plugin/wp-gpx-maps.1.1.21.zip Version...

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...

WordPress WP GPX Map Plugin 1.1.21 - Arbitrary File Upload

WP GPX Map plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible. Solution...

WordPress Plugin wp-gpx-map 1.1.21 - Arbitrary File Upload

Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link: http://downloads.wordpress.org/plugin/wp-gpx-maps.1.1.21.zip Version...

Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress wp-gpx-map version 1.1.21 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/wp-gpx-maps/ Date: 11/05/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.darwinner.it/ Software Link:...

Wireshark 1.6.x < 1.6.8 Multiple Denial of Service Vulnerabilities

The installed version of Wireshark is 1.6.x before 1.6.8. This version is affected by the following vulnerabilities : - Input validation errors exist in the dissectors for ANSI MAP, ASF, BACapp, Bluetooth HCI, IEEE 802.11, IEEE 802.3, LTP, and R3 that can allow specially crafted packets to cause...

Creative Works - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Creative Works Multiple sql web scripts Google Dork:Powered by: Creative Works Software Link:www.creativeworks.com.ec Version:2012 Tested on:linux and windows any os credits:Security Warriors Team SWT...

Wireshark ANSI A MAP Files Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

wireshark: Infinite loop in the ANSI A Interface (IS-634/IOS) dissector

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

Cisco Security Advisory: Cisco IOS Internet Key Exchange Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Internet Key Exchange Vulnerability Advisory ID: cisco-sa-20120328-ike Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +-------------------------------------------------------------------- Summary =====...

Mapping it out

In his presentation at S4, doctoral student Eireann Leverett presented his research showing how more than 10,000 Internet acccessible industrial control systems can be found online, including HVAC systems, building management systems, PLCs and other industrial systems. Here, Leverett shows a Goog...

CVE-2012-0895: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

OpenTTD -- Denial of service (server) via slow read attack

The OpenTTD Team reports: Using a slow read type attack it is possible to prevent anyone from joining a server with virtually no resources. Once downloading the map no other downloads of the map can start, so downloading really slowly will prevent others from joining. This can be further aggravat...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 5281)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

SuSE 10 Security Update : wireshark (ZYPP Patch Number 7796)

This update of wireshark fixes the following vulnerabilities : - Wireshark IKE dissector vulnerability. CVE-2011-3266 - Wireshark Lua script execution vulnerability. CVE-2011-3360 - Wireshark buffer exception handling vulnerability. CVE-2011-3483 - Lucent/Ascend file parser susceptible to infinit...

Skype Software Vulnerabilities - 0 Day Exploitation 2011

Document Title: =============== Skype Software Vulnerabilities - 0 Day Exploitation 2011 References: =========== Document: http://www.vulnerability-lab.com/resources/documents/293.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1757 Conference Mirror:...

iPad Finally Has a Facebook Application

iPad Finally Has a Facebook Application Facebook has just released its official iPad app. The tablet device was unveiled in January 2010, but development and negotiations with Apple stalled the release of Facebook's app until now. Facebook for iPad is now available in App Store. We've been waitin...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1216-1)

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

Official websites of 7 major Syrian city hacked by Anonymous for #OpSyria

Official websites of 7 major Syrian city hacked by Anonymous for OpSyria Official websites of 7 major Syrian city hacked by Anonymous hackers as part of hacktivists Anonymous' Operation Syria OpSyria . Anonymous has replaced the home pages of official Syrian websites with an interactive map of...