Aladdin Knowledge Systems Ltd. PrivAgent - ActiveX Control Overflow

Aladdin Knowledge Systems Ltd. PrivAgent - ActiveX Control Overflow Aladdin Knowledge Systems Ltd. PrivAgent ActiveX Control Overflow // heap spray for IE7 //calc - 196 bytes var shellcode =...

[Binrev] Automate Reversing Windows Binaries for Pentesters

What you can do with this? Static analysis: you can do a basic manual code review for decompiled sources to discover hidden communication channels, search for hard-coded passwords, or SQL injection vulnerabilities. Import decompiled projects to an IDE to reconstruct and modify the original source...

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow (SEH)

Easy LAN Folder Share 3.2.0.100 - Local Buffer Overflow SEH !/usr/bin/python ========================================================================================== Exploit Title: Easy LAN Folder Share Version 3.2.0.100 Buffer Overflow vulnerability SEH Date: 2013-08-03 Exploit Author: sagi-...

Fedora 19 : livecd-tools-19.4-1.fc19 (2013-9827)

Some fixed for running from F19 host. The livecd-tools package provides support for reading and executing Kickstart files in order to create a system image. It was discovered that livecd-tools gave the root user an empty password rather than leaving the password locked in situations where no...

DataLife Engine 9.7 - preview.php PHP Code Injection

DataLife Engine 9.7 - preview.php PHP Code Injection ------------------------------------------------------------------ DataLife Engine 9.7 preview.php PHP Code Injection Vulnerability ------------------------------------------------------------------ - Software Link: http://dleviet.com/ - Affect...

CubeCart 5.0.7 Insecure Backup Handling

OVERVIEW CubeCart 5.0.7 and lower versions are vulnerable to Insecure Backup File Handling which leads to the disclosure of the application configuration file. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that...

CubeCart 3.0.20 Shell Upload

OVERVIEW CubeCart 3.0.20 and lower versions are vulnerable to Arbitrary File Upload. 2. BACKGROUND CubeCart is an "out of the box" ecommerce shopping cart software solution which has been written to run on servers that have PHP & MySQL support. With CubeCart you can quickly setup a powerful...

drupal7 -- multiple vulnerabilities

Drupal Security Team reports: Arbitrary PHP code execution A bug in the installer code was identified that allows an attacker to re-install Drupal using an external database server under certain transient conditions. This could allow the attacker to execute arbitrary PHP code on the original...

CVE-2012-3152

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the Octob...

ReVuln Emerges as New Player in Vulnerability Sales Market

It’s getting difficult these days to keep track of all of the companies, public and otherwise, that are buying and selling vulnerabilities or information on bugs, and now there’s another group on the scene: ReVuln. But, unlike other companies in the industry, ReVuln is mostly focusing its efforts...

Microsoft Reaches Settlement with Site Linked to Nitol Botnet

Microsoft announced today it’s reached a settlement with the operator of a Chinese Web site whose domain and sub-domains hosted more than 500 kinds of malware, including the Nitol botnet found on brand new computers. In a lawsuit filed two weeks ago by the software giant, Microsoft alleged the...

CVE-2012-1468

Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a file with an executable extension that is not ".php", then accessing it via a direct request to the file in...

ActFax 4.31 Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Title: ActFax 4.31 Local Privilege Escalation Exploit Author: Craig Freyman @cd1zz Discovered: July 10, 2012 Vendor Notified: June 12, 2012 Description: http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html...

Adobe Flash Player 11.3 Font Parsing Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 "Adobe Flash Player 11.3 Font Parsing...

DiscuzX1. 5+ prop of the brush sub-vulnerability-vulnerability warning-the black bar safety net

If the user group set up"to purchase items a discount"option to buy when the price is discounted price, and sell when the price is not discounted price. That is the time to buy discount, sell when it is the original price. Buy: $magic'discountprice' = $G'group''magicsdiscount' ? intval$magic'pric...

PHP CGI Argument Injection Remote Exploit (PHP Version)

Exploit for php platform in category web applications PHP CGI Argument Injection Remote Exploit PHP CG...

OSClass 2.3.5 Directory Traversal

Advisory ID: CSA-12004 Title: OSClass directory traversal vulnerability Product: OSClass Version: 2.3.5 and probably prior Vendor: osclass.org Vulnerability type: Directory traversal Risk level: 2 / 3 Credit: www.codseq.it Vendor notification: 2012-01-25 Public disclosure: 2012-03-07 Original...

BigDump Importer v0.32b remote file upload

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : BigDump Importer v0.32b RFU Date : 05-03-2012 Author : TeaM MosTa Version : ALL Dork :...

piwigo v.2.3.3 SQL Injector

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : piwigo SQL comments.php?displaymode=albums SQL 1 myerror...

opacwebaloes (Fckeditor) Remote File Upload

Exploit for asp platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : opacwebaloes rfu Fckeditor Date : 19-02-2012 Author : TeaM MosTa Version : All Dork :...