23 matches found
WordPress DesignFolio+ Theme File Upload
Exploit Title: Wordpress Theme DesignFolio+ Arbitrary File Upload Vulnerability Google dork: inurl:wp-content/themes/DesignFolio-Plus Author: CrashBandicot Date: 04.03.2015 OSVDB-ID: 119623 Vendor HomePage: https://github.com/UpThemes/DesignFolio-Plus Software Link:...
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation
VideoLAN VLC Media Player 2.1.5 - DEP Access Violation Title : VLC Player 2.1.5 DEP Access Violation Vulnerability Discoverer: Veysel HATAS @muh4f1z Web page : www.binarysniper.net Vendor : VideoLAN VLC Project Test: Windows XP SP3 Status: Fixed Severity : High CVE ID : CVE-2014-9597 NIST:...
Sun Java JDK 1.x - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, whic...
Joomla Wire Immogest SQL Injection
IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...
Eaton Network Shutdown Module 3.21 PHP Code Injection
Eaton Network Shutdown module versions 3.21 and below suffer from a remote PHP code injection vulnerability. This is a python exploit for a previously disclosed finding. !/usr/bin/env python Quick 'n' Dirty - Metasploit module didn't do it for me 2013 - Filip Waeytens - http://www.wsec.be Usage...
Joomla! Component com_icagenda - 'id' Multiple Vulnerabilities
Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . ------------------------------------------------------------------------------ Exploit Title:...
Apache Tomcat < 6.0.18 UTF8 Directory Traversal Vulnerability
No description provided by source. /Apache Tomcat 6.0.18 UTF8 Directory Traversal Vulnerability get /etc/passwd Exploit c0d3r: mywisdom thanks for not being lame to change exploit author tis is one of my linux w0rm module for user enumerations, i've dual os worm thanks to:...
Apache Tomcat < 6.0.18 - 'utf8' Directory Traversal
/Apache Tomcat include include include include include include include include include include define EXPLOIT "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.0\n\n" define RCVBUFSIZE 9999 define tester "root:x" void cls char esc = 27; printf"%c%s",esc,"2J"; printf"%c%s",esc,"1;1H";...
Apache Tomcat 6.0.18 - utf8 Directory Traversal
Apache Tomcat 6.0.18 - utf8 Directory Traversal /Apache Tomcat include include include include include include include include include include define EXPLOIT "GET /%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd HTTP/1.0\n\n" define RCVBUFSIZE 9999 define tester "root:x" void cls char esc = 27;...
Wireshark 1.2.5 LWRES getaddrbyname Buffer Overflow
Exploit Title: Wireshark 1.2.5 LWRES getaddrbyname BOF - Calc.exe Date: 2-14-2010 Author: Nullthreat and Pure|Hate Software Link: http://media-2.cacetech.com/wireshark/win32/wireshark-win32-1.2.5.exe Version: 1.2.5 Tested on: Windows XP SP2 CVE : 2010-0304 OSVDB-ID: 61987 Code : !/usr/bin/env...
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)
DJ Studio Pro 5.1.6.5.2 - Local Overflow SEH !/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow...
DJ Studio Pro 5.1.6.5.2 - Local Overflow (SEH)
!/usr/bin/ruby Exploit Title : DJ Studio Pro 5.1.6.5.2 SEH Exploit Date : 2009-12-30 Author : Sébastien Duquette - [email protected] Software Link : http://www.e-soft.co.uk/ Version : 5.1.6.5.2 Tested on : Windows XP SP2 En OSVDB ID : 58159 Overflow originally discovered by prodigy exec calc.exe...
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities
Barracuda Web Firewall 660 Firmware 7.3.1.007 - Multiple Vulnerabilities Pentest Information: ==================== GESEC Team remove discover a input validation vulnerability on Barracuda - Web Application Firewall 660 Appliance. A remote attacker is able to get sensitive customer sessions hijack...
gAlan 0.2.1 Universal Buffer Overflow Exploit (meta)
Exploit for unknown platform in category local exploits ==================================================== gAlan 0.2.1 Universal Buffer Overflow Exploit meta ==================================================== Title: gAlan 0.2.1 Universal Buffer Overflow Exploit meta CVE-ID: OSVDB-ID: Author:...
Sun Java JDK 1.x - Multiple Vulnerabilities
Sun Java JDK 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary...
Sun Java JDK 1.x - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/24004/info Sun JDK is prone to a multiple vulnerabilities. An attacker can exploit these issues to crash the affected application, effectively denying service. The attacker may also be able to execute arbitrary code, which may facilitate a compromise of t...
[CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability
Title: CAID 35145: CA eTrust Admin Privilege Escalation Vulnerability CA Vuln ID CAID: 35145 CA Advisory Date: 2007-03-08 Impact: Attackers can gain escalated privileges. Summary: The CA eTrust Admin GINA component contains a privilege escalation vulnerability within the reset password interface...
[CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities
Title: CAID 34818: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities CA Vuln ID CAID: 34818 CA Advisory Date: 2007-01-22 Discovered By: Reverse Mode Impact: Local attacker can gain escalated privileges. Summary: Multiple vulnerabilities have been discovered in CA Personal Firewal...
[CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability
Title: CAID 34661: CA Unicenter WSDM File System Read Access Vulnerability CA Vulnerability ID CAID: 34661 CA Advisory Date: 2006-10-03 Discovered By: Oliver Karow, Symantec Security Consultant oliverkarow at symantec dot com Richard Sammet, Symantec Security Consultant richardsammet at symantec...
[Full-disclosure] [EEYEB-20050329] Windows Metafile Multiple Heap Overflows
Windows Metafile Multiple Heap Overflows Release Date: November 8, 2005 Date Reported: March 29, 2005 Severity: High Code Execution Vendor: Microsoft Systems Affected: Windows 2000 Windows Server 2003 Overview: eEye Digital Security has discovered a heap overflow vulnerability in the way the...