270 matches found
Ubuntu aeration local elevation of privilege vulnerability, CVE-2 0 1 5-1 3 2 8）, The impact of multiple versions-vulnerability warning-the black bar safety net
Due to the particular case when the file is created the permissions check bug, the Ubuntu operating system exposure to local privilege escalation vulnerabilities affect Ubuntu 12.04 and 14.04, and 14.10, and 15.04 version. The current Ubuntu official has been fixed the vulnerability. The...
Oracle blind injection combined with XXE vulnerability remote data acquisition-vulnerability warning-the black bar safety net
Presumably everyone onSQL injectionhas been familiar for XML entity injection, or XXE, is also. This paper mainly discussed the method in the presence of the ORACLE the blind the case of remote access to the data. In fact, and UTLHTTP Remote Access Method of the same, but the principle is...
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection
WordPress Plugin Ajax Store Locator 1.2 - SQL Injection Exploit Title : Wordpress Ajax Store Locator = 5.0.12 AND time-based blind SELECT' injectable for the remaining tests, do you want to include all tests for 'MySQ...
Mac OS X rootpipe Local Privilege Escalation Exploit
Mac OS X rootpipe local proof of concept privilege escalation exploit. PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from Cocoa...
Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation
Apple Mac OSX 10.7.510.8.210.9.510.10.2 - Rootpipe Local Privilege Escalation PoC exploit code for rootpipe CVE-2015-1130 Created by Emil Kvarnhammar, TrueSec Tested on OS X 10.7.5, 10.8.2, 10.9.5 and 10.10.2 import os import sys import platform import re import ctypes import objc import sys from...
Exim ESMTP GHOST Denial Of Service Exploit
Exim ESTMP denial of service exploit that leverages the GHOST glibc gethostbyname buffer overflow. The below script is a PoC exploit for the GHOST vulnerability affecting Exim SMTP servers resulting in a service crash. !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST...
Exim ESMTP GHOST Denial Of Service
The below script is a PoC exploit for the GHOST vulnerability affecting Exim SMTP servers resulting in a service crash. !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST glibc gethostbyname buffer overflow http://crowdshield.com USAGE: python ghost-smtp-dos.py Escape...
Exim ESMTP 4.80 - glibc gethostbyname Denial of Service
Exploit Title: Exim ESMTP GHOST DoS PoC Exploit Date: 1/29/2015 Exploit Author: 1N3 Vendor Homepage: www.exim.org Version: 4.80 or less Tested on: debian-7-7-64b CVE : 2015-0235 !/usr/bin/python Exim ESMTP DoS Exploit by 1N3 v20150128 CVE-2015-0235 GHOST glibc gethostbyname buffer overflow...
CoreGraphics CCITT Memory Corruption - CVE-2014-4481
Apple CoreGraphics framework fails to validate the input when parsing CCITT group 3 encoded data resulting in a heap overflow condition. A small heap memory allocation can be overflowed with controlled data from the input resulting in arbitrary code execution in the context of Mobile Safari. Usin...
Google reveals 3 Apple OS X Zero-day Vulnerabilities
After exposing three critical zero-day vulnerabilities in Microsoft's Windows operating systems, Google's Project Zero vulnerability research program has revealed the existence of three more zero-day vulnerabilities, but this time, on Apple's OS X platform. The team has published three zero-day...
WordPress Download Manager Arbitrary File Download
WordPress Download Manager Plugin - Arbitrary File Download CWE: CWE-98 Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 25/10/2014 Vendor Homepage: https://wordpress.org/plugins/download-manager/ Tested on: Windows 7 and Gnu/Linux Google Dork:...
Joomla Mac Gallery 1.5 - Arbitrary File Download
No description provided by source. Exploit Title : Joomla Mac Gallery = 1.5 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/18 Dork Google: inurl:option=commacgallery Dat...
CoreGraphics Information Disclosure - CVE-2014-4378
This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...
Joomla Spider Form Maker <= 4.3 SQL Injection Vulnerability
Joomla Spider Form Maker versions 4.3 and below suffer from a remote SQL injection vulnerability. Exploit Title : Joomla Spider Form Maker = 4.3 SQLInjection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/products/joomla-form.html...
Joomla Spider Calendar 3.2.6 SQL Injection
!/usr/bin/env python Exploit Title : Joomla Spider Calendar = 3.2.6 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/22329 Dork Google:...
Total Commander 6.x - (unacev2.dll) Buffer Overflow PoC Exploit
No description provided by source. / -- /\ / Total Commander unacev2.dll Buffer Overflow PoC Exploit /\ by Darkeagle of Unl0ck Research Team / http://unl0ck.net /\ / when file will be created, try to open archive in TotalCmd and then unpack it ; /\ / -- / include string.h include stdio.h...
Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST PoC Exploit
No description provided by source. !/usr/bin/ruby Copyright c Lance M. Havok lmh at info-pull.com Kevin Finisterre kflists at digitalmunition.com Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || localho...
Joomla com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------- joomla component comfooblasuggestions ideaid SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...
Pointter PHP Micro-Blogging Social Network Unauthorized Privilege Escalation
No description provided by source. 'Pointter PHP Micro-Blogging Social Network' Unauthorized Privilege Escalation CVE-2010-4333 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Pointter PHP Micro-Blogging Social Networ...
RhinoSoft Serv-U FTP Server 3/4/5 MDTM Command Time Argument Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9751/info Serv-U FTP Server has been reported prone to a remote stack based buffer overflow vulnerability when handling time zone arguments passed to the MDTM FTP command. The problem exists due to insufficient bounds...