Investintech Products Version Detection

This script finds the installed version of Investintech products. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

Code injection

Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...

CVE-2011-4221

Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted document...

Soda PDF Professional 1.2.155 PDF/WWF File Handling DoS

Exploit for windows platform in category dos / poc !/usr/bin/perl Soda PDF Professional 1.2.155 PDF/WWF File Handling Restriction of Service RoS Vendor: LULU software Product web page: http://www.sodapdf.com Affected version: 1.2.155.1729 Professional with OCR Summary: Increase your efficiency wi...

Chi youdao professional travel system v1. 6. 5 vulnerability-vulnerability warning-the black bar safety net

Title: wisdom and the Word of the professional tour system v1. 6. 5 vulnerability Time: 2011-10-30 Team:makebugs Author: fate Injection article: http://t.qq.com/MakeBug http://hi.baidu.com/micropoor '\inc\incsql. asp % dim sqlleach,sqlleach0,SqlDATA,SQLGet,SqlPost sqlleach =...

OSSAMS - Open Source Security Assessment Management System

OSSAMS - Open Source Security Assessment Management System As information security professionals, we conduct security assessments for companies. One of the biggest problems we have is after all the data is collected, how can we correlate the data accurately. So we decided to start a project to...

Cyclope Internet Filtering Proxy 4.0 Denial Of Service

!/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 2011 Tested on: Windows XP SP3...

Analysis: Duqu Targets Certificate Authorities

With virus researchers scrambling to decode a new piece of malware that is based on the code of the Stuxnet worm, an analyst at McAfee is speculating that the new worm, Duqu, may have been created to target certificate authorities. Writing on McAfee’s research blog, Guilherme Venere and Peter Szo...

Reality Based Cyber Crime Novella Explores Aftermath of Stuxnet Attack On Iran

Reality Based Cyber Crime Novella Explores Aftermath of Stuxnet Attack On Iran GRAND RAPIDS – Cyber Styletto is a new novella by a journalist, a writer, and a security expert who have pooled their talents to create an enthralling good read that is future forward and predictive. The facts are base...

Dziobas Rar Player Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/env python 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local,...

KnFTP 1.0.0 Server - Multiple Buffer Overflows (PoC) (SEH)

KnFTP 1.0.0 Server - Multiple Buffer Overflows PoC SEH !/usr/bin/python Title: KnFTP Server Buffer Overflow Exploit DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret kinda Bug that made me fuzz this app by Blake: http://www.exploit-db.com/exploits/17819/...

Web Professional SQL Injection

========================================================== Web Professional default.php SQL Injection Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Web Professional - 'default.php' SQL Injection

source: https://www.securityfocus.com/bid/49399/info Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Web Professional - default.php SQL Injection

Web Professional - default.php SQL Injection source: https://www.securityfocus.com/bid/49399/info Web Professional is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker...

Un-HappyMeal: Complaint Alleges McDonald's WiFi was Platform for Devastating Pharma Hack

Suppose you’re a IT professional who has an axe to grind against your employer, and knowledge of the company’s network and access necessary to really do some damage. You might consider launching said attack from a free, public Wi-fi hotspot, like the ones offered at chains like McDonald’s. That...

MP3 CD Converter Professional 5.3.0 Overflow

!/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack from...

MP3 CD Converter Professional 5.3.0 Universal DEP Bypass Exploit

Exploit for windows platform in category local exploits !/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3...

MP3 CD Converter Professional 5.3.0 - Universal DEP Bypass

!/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack from...

Richard Thieme Got Dark

Richard Thieme, the Obi-Wan Kenobi of the security community holds forth during his Black Hat talk: “Staring into the Abyss: The Dark Side of Security and Professional Intelligence.” Thieme, an IT security consultant and published author, had a tough message, telling them that the world is “grey...