1949 matches found
BlazeVideo HDTV Player 6.6 Professional Universal DEP+ASLR Bypass
Exploit for windows platform in category local exploits Exploit Title: BlazeVideo HDTV Player 6.6 Professional Universal DEP+ASLR Bypass Author: modpr0be Software Download: http://www.blazevideo.com/download.php?product=blazevideo-hdtv-pro Date: 07/10/2011 Tested on: Windows XP SP3, Windows Vista...
OpenJDK: Deserialization allows creation of mutable SignedObject (Deserialization, 6618658)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors related to...
WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection
WordPress Plugin Tweet Old Post 3.2.5 - SQL Injection Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL:...
WordPress Tweet Old Post 3.2.5 SQL Injection
Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL: http://localhost/wordpress/wp-admin/admin.php?page=ExcludePosts POST Data:...
WordPress Tweet Old Post Plugin <= 3.2.5 - SQL Injection
Tweet Old Post plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress Tweet Old Post plugin <= 3.2.5 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress Tweet Old Post plugin Software Link: http://downloads.wordpress.org/plugin/tweet-old-post.zip Version: 3.2.5 tested --------------- PoC POST data --------------- URL:...
CVE-2011-2978
Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-mail address aka oldemail field for e-mail change notifications, which makes it easier for remote...
JDK: unspecified vulnerabilities fixed in 6u26 (Sound)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound, a different...
PT-2011-1008 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.0-rc4 Description: The bluetooth subsystem in the Linux kernel does not properly initialize certain data structures, allowing local users to obtain potentially sensitive information from kernel memory via a...
Adobe Reader 5.1 - XFDF Buffer Overflow (SEH)
Exploit Title: Adobe Reader 5.1 XFDF Buffer Overflow Vulnerability SEH Google Dork: N/A or filtype ".xfdf" Date: 04/01/2011 Author: [email protected] / http://extraexploit.blogspot.com Software Link: http://www.oldversion.com/download/acrobat51.exe Version: Acrobat formerly Adobe Reader 5.1...
UK Authorities Charge Suspected LulzSec Member for DDoS Attacks
A 19 year-old UK man was charged on Wednesday for the role he played in attacks on the UK’s Serious Organized Crime Agency SOCA as well as UK’s British Phonographic Industry BPI and International Federation of the Phonographic Industry IFPI, according to a statement released by the Metropolitan...
kernel: ipv4: netfilter: arp_tables: fix infoleak to userspace
net/ipv4/netfilter/arptables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected '\0' character at the end of string data in the values of certain structure members, which allows local users to obtain potentially sensitive information from kernel memory by...
Anti-injection code is not anti-injection-vulnerability warning-the black bar safety net
Here we use the old y system to illustrate the problem. The vulnerability appears in the js. the asp file. If CheckStrRequest"ClassNo" "" then ClassNo = splitCheckStrRequest"ClassNo","|" 'Here is to get the variable using checkstr filter, but the feeling didn't play a role. Then divided into an...
14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server !
14 Year Old Hacker Hired by Microsoft after doing phishing via Call of Duty Server ! These are the kinds of things dreams are made of, a 14 year old hacker on Call of Duty was just recruited by Microsoft. You heard me right, Microsoft. This is exactly what Sony should have done with George Hotz –...
InterPhoto Gallery 2.5.0 File Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
WordPress OPS Old Post Spinner Plugin 'ops_file' Parameter Directory Traversal Vulnerability
WordPress OPS Old Post Spinner Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
DerbyCon Security Conference 2011
We are happy to announce that Offensive Security will be sponsoring DerbyCon. DerbyCon is a new hacker conference located in Louisville Kentucky. Our goal is to bring back an old style, community driven hacker con chocked full of amazing talks, live events and all around fun. The idea for DerbyCo...
openldap: DoS when submitting special MODRDN request
modrdn.c in slapd in OpenLDAP 2.4.x before 2.4.24 allows remote attackers to cause a denial of service daemon crash via a relative Distinguished Name DN modification request aka MODRDN operation that contains an empty value for the OldDN field...
Wordpress OPS Old Post Spinner 2.2.1 Plugin LFI Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress OPS Old Post Spinner 2.2 Vulnerability...........Local File Inclusion Download................http://1manfactory.com/ops Release...