TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection Vulnerability

TP-LINK Cloud Cameras including products NC260 and NC450 suffer from a command injection vulnerability. The issue is located in the httpSetEncryptKeyRpm method handler for /setEncryptKey.fcgi of the ipcamera binary, where the user-controlled EncryptKey parameter is used directly as part of a...

TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection

Vulnerability title: TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection Author: Pietro Oliva CVE: CVE-2020-12111 Vendor: TP-LINK Product: NC260, NC450 Affected version: NC260 %s/%08X" 0x00491734 lw a1, EncryptKeyparam ; Attacker controlled string 0x00491738 lw a2, -0x7fd4gp 0x0049173c no...

Wordpress plugin Pods <= 2.4.3 XSS and CSRF vulnerabilities

Vulnerability title: Wordpress plugin Pods = 2.4.3 XSS and CSRF vulnerabilities vulnerabilities Author: Pietro Oliva CVE: CVE-2014-7956, CVE-2014-7957 Product: pods Affected version: pods = 2.4.3 Vulnerabilities fixed in version: 2.5 XSS vulnerability CVE-2014-7956, authentication is needed:...

WordPress Pods 2.4.3 CSRF / Cross Site Scripting

Vulnerability title: Wordpress plugin Pods alert'xss' target="http://localhost"; for i=0; i'; CSRF 2 delete pods plugin data: CSRF 3 deactivate pods and delete data: CSRF 4 enable "roles and capab...

Gnome Panel <= 2.28.0 - Denial of Service PoC (0day)

No description provided by source. Tested on: ubuntu 9.10 CVE : Code : / Gnome panel = 2.28.0 denial of service poc 0-day by Pietro Oliva [email protected] http://olivapietro.altervista.org After executing this poc a backup file will be created You can restore it by typing ./paneldos restore...

WordPress Buddypress 1.9.1 Cross Site Scripting

Vulnerability: Wordpress plugin Buddypress = 1.9.1 stored xss Date: 13/02/2014 Author: Pietro Oliva Vendor Homepage: http://buddypress.org Software Link: http://downloads.wordpress.org/plugin/buddypress.1.9.1.zip Version: 1.9.1 CVE : CVE-2014-1888 Responsibly disclosed and patched in version 1.9....

WordPress Buddypress 1.9.1 Privilege Escalation

Vulnerability: Wordpress plugin Buddypress 2 Visit the url http://example.com/groups/create/step/group-details/ 3 Enjoy the power -Pietro Oliva-...

mplayer 4.4.1 - Null Pointer Dereference (PoC)

mplayer 4.4.1 - Null Pointer Dereference PoC Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull...

mplayer 4.4.1 - Null Pointer Dereference (PoC)

Exploit Title: mplayer : push %ebp 0x081176d1 : mov %esp,%ebp 0x081176d3 : fld1 0x081176d5 : mov 0x8%ebp,%eax 0x081176d8 : mov %eax,%eax == mplayer tries to dereference eax, which is a NULL pointer!!! 0x081176da : lea 0x0%esi,%esi 0x081176e0 : fmull 0x28%eax 0x081176e3 : mov 0x18%eax,%eax...

Gnome Panel 2.28.0 Denial Of Service

Exploit Title: Gnome panel After executing this poc a backup file will be created You can restore it by typing ./paneldos restore Using option restart gnome-panel will restart continuously Using option totalblock you will need to remove the battery After execution click application in the panel,...

Gnome Panel 2.28.0 - Denial of Service (PoC)

Gnome Panel 2.28.0 - Denial of Service PoC Tested on: ubuntu 9.10 CVE : Code : / Gnome panel http://olivapietro.altervista.org After executing this poc a backup file will be created You can restore it by typing ./paneldos restore Using option restart gnome-panel will restart continuously Using...

Gnome Panel <= 2.28.0 Denial of Service PoC 0-day

Exploit for unknown platform in category dos / poc ================================================= Gnome Panel include int mainint argc, char argv FILE f; unsigned long i; printf"%s","Gnome panel = 2.28.0 denial of service by Pietro Oliva poc 0-day\n\n"; if!f=fopen".gtk-bookmarks","r"...