2732 matches found
Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions
Microsoft Source Code Analyzer for SQL Injection 1.3 - Improper Permissions Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQ...
Free Screen To Video V1.2 DLL Hijacking Exploit (iacenc.dll)
Exploit for windows platform in category local exploits / Exploit Title: Free Screen To Video V1.2 DLL Hijacking Exploit iacenc.dll Date: 15/03/2011 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://www.koyotesoft.com/appli/SetupFreeScreenVideo.exe Version: V1.2 Tested on:...
Former employee held for hacking server of BPO unit in Hyderabad !
A former software professional on Saturday was arrested for allegedly hacking the server of a city-based BPO company, where he previously worked, police said. The hacker identified as Shaik Mahammad Ghouse Bhasa allegedly secured unauthorised access to the computer systems of M/s IVOICE Network...
Free THA Webinar – Penetration Testing Reporting !
Another Free THA live webinar is around the corner – next week, to be exact ! This time around, Mike will be discussing Penetration Testing Reporting. Let us just say – we've had OVERWHELMING requests for us to cover this topic – and as always, THA is more than happy to oblige. Mike will cover th...
Ethical hacker (CEH) training now in syllabus of Riphah International University,Pakistan !
Islamabad: The first-ever 'Ethical Hacking and Countermeasures CEH' training course organised by the Riphah International University, in collaboration with internationally renowned information security certification body, EC-Council, concluded here on Wednesday. Riphah International University is...
Readmore Systems Script - SQL Injection
Readmore Systems Script - SQL Injection Exploit Title: Sql injextion Google Dork: Website Powered By ReadMore Systems, Incorporated Date: 02/03/2011 Author: Mohammed FathivBzone,Zooka, El3arby Egyption Hacker's Software Link: http://readmoresystems.com Version: All Tested on: Windows XP...
The Lesson of Stuxnet and Aurora: Get Back to Basics or Get Owned
SAN FRANCISCO–It’s often said that after decades of work and technological advances, the security industry hasn’t actually solved any problems or made things any better. But that’s not entirely true. The industry has in fact perfected the art of exploiting the scare ’em and snare ’em,...
Common Security Mistakes Can Lead to Major Compromises
SAN FRANCISCO–Security is hard and getting it right all the time is nearly impossible. But many of the mistakes that people make are simple, avoidable ones that can lead to serious intrusions and major network compromises. “Maintaining network defenses by hand is difficult,” Mike Lloyd, chief...
ASPR #2011-02-11-1: Remote Binary Planting in Adobe Reader
=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-1 ------------------------------------------------------------------------- ASPR 2011-02-11-1: Remote Binary Planting in Adobe Reader...
HITB MagazineVolume 1, Issue 5 Download !
Contents of HITB Magazine Issue 005: Linux Security: Investigating Kernel Return Codes with the Linux Audit System Network Security: Secure Shell Attack Measurement and Mitigation and ARP Spoofing Attacks & Methods for Detection and Prevention: Exploiting Web Virtual Hosting –Malware Infections...
Microsoft Windows Kernel Integer Truncation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may cause a...
Local Training Center, Hacker University, 8 in the USA Participate in Global Launch of Certified Ethical Hacker version 7
450 Global Training Centers Nominated, 25 Selected Worldwide, 8 in the USA, 1 in St. Louis February 2, 2011 St. Louis, MO – Hacker University is pleased to announce it has been asked by EC-Council, the leading international certification body in information security, to participate in the Global...
AOL Desktop 9.6 .rtx Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE :...
AOL Desktop 9.6 - .rtx Local Buffer Overflow
AOL Desktop 9.6 - .rtx Local Buffer Overflow !/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011...
AOL Desktop 9.6 - '.rtx' Local Buffer Overflow
!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ kudos to sup3r: http://www.exploit-db.com/exploits/16085/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off...
AOL Desktop 9.6 Buffer Overflow
!/usr/bin/python Vulnerable app: AOL Desktop 9.6 Author: sickness Download : http://daol.aol.com/software/aoldesktop96/ Tested : Windows XP Professional SP3 EN latest updates DATE : 02/02/2011 NOTE: If exploit doesn't work turn AOL off CTRL+ALT+DELETE and turn all AOL processes off then try again...
WM Downloader 3.1.2.2 2010.04.15 - .m3u File Buffer Overflow (DEP Bypass)
WM Downloader 3.1.2.2 2010.04.15 - .m3u File Buffer Overflow DEP Bypass !/usr/bin/env python WM Downloader 3.1.2.2 2010.04.15 .m3u Buffer Overflow + DEP Bypass Author: sickness Download : http://mini-stream.net/wm-downloader/ Tested : Windows XP Professional SP3 EN latest updates with IE8 and IE7...
CVE-2011-0678
Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable file via the UploadDirectory and Accepted Extensions fields in the getImagefile component of EasyEdit.cfm...
CVE-2011-0678
CVE-2011-0678 affects Lomtec ActiveWeb Professional 3.0, via the EasyEdit module. The Unrestricted file upload vulnerability exists in the getImagefile component (EasyEdit.cfm), allowing an attacker to upload an executable file through UploadDirectory and Accepted Extensions fields to achieve rem...
Lomtec ActiveWeb Professional 3.0 CMS Allows Arbitrary File Upload and Execution as SYSTEM in ColdFusion (2010-WEB-002) (CERT VU#528212)
------------------------------------------------------------------------------------- www.ExploitDevelopment.com 2010-WEB-002 CERT VU870532 Security Focus BID 45985 ------------------------------------------------------------------------------------- TITLE: Lomtec ActiveWeb Professional 3.0 CMS...