CVE-2015-4604

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...

UBUNTU-CVE-2015-4604

The mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly maintain a certain pointer relationship, which allows remote attackers to cause a denial of service application crash or possibly...

php: denial of service when processing a crafted file with Fileinfo

The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service application crash or possibly execute...

IBM Security AppScan Standard 9.0.2 - OLE Automation Array Remote Code Execution

!/usr/bin/python import BaseHTTPServer, socket IBM Security AppScan Standard OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 1 June 2015 Version: function runmumaa On Error Resume Next set...

ZOC SSH Client 7.03.0 Buffer Overflow

Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev Farhi Details: -------- Create a new connection, run t...

ZOC SSH Client Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category dos / poc """ Exploit title: ZOC SSH Client v.7.03.0 Buffer overflow vulnerability SEH Date: 20-5-2015 Vendor homepage: www.emtec.com Software Link: http://www.emtec.com/cgi-local/download.cgi?what=ZOC7%20Windows&link=zoc/zoc7030.exe&ext=html Author: Dolev...

Phoenix Contact ILC 150 ETH PLC Remote Control

! /usr/bin/env python ''' Exploit Title: Phoenix Contact ILC 150 ETH PLC Remote Control script Date: 2015-05-19 Exploit Author: Photubias - tijldotdeneutathowestdotbe Vendor Homepage: https://www.phoenixcontact.com/online/portal/us?urile=pxc-oc-itemdetail:pid=2985330 Version: ALL FW VERSIONS Test...

New Utility Decrypts Files Lost to TeslaCrypt Ransomware

Crypto-ransomware variants have enterprises on edge because of the threat of irreversibly damaged files. Some organizations, including most recently the Tewksbury, Ma., police department have gone as far as to pay hundreds of dollars in ransom for the recovery key. Some technology companies are...

Linux custom execve-shellcode Encoder/Decoder

Linux custom execve-shellcode Encoder/Decoder. Shellcode exploit for linx86 platform / Followtheleader custom execve-shellcode Encoder/Decoder - Linux Intel/x86 Author: Konstantinos Alexiou /...

linux/x86 Typewriter Shellcode Generator

!/usr/bin/env python Typewriter Shellcode Generator Paw Petersen, SLAE-656 https://www.pawpetersen.dk/typewriter-shellcode-generator-linux-x86/ import sys,struct string = sys.argv1 length = struct.pack"= lenstring: if lenchunk 4: asmstringchunk =...

Linux x86 - Typewriter Shellcode Generator

Linux x86 - Typewriter Shellcode Generator. Shellcode exploit for linx86 platform !/usr/bin/env python Typewriter Shellcode Generator Paw Petersen, SLAE-656 https://www.pawpetersen.dk/typewriter-shellcode-generator-linux-x86/ import sys,struct string = sys.argv1 length = struct.pack"= lenstring: ...

Acunetix OLE Automation Array Remote Code Execution Exploit

Acunetix versions 9.5 and below OLE automation array remote code execution exploit. !/usr/bin/python import BaseHTTPServer, sys, socket Acunetix OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 27 Mar 2015 Version...

Acunetix 9.5 OLE Automation Array Remote Code Execution

!/usr/bin/python import BaseHTTPServer, sys, socket Acunetix OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 27 Mar 2015 Version: acunetix.exe Video: https://vid.me/SRCb class...

Acunetix 9.5 - OLE Automation Array Remote Code Execution

!/usr/bin/python import BaseHTTPServer, sys, socket Acunetix OLE Automation Array Remote Code Execution Author: Naser Farhadi Linkedin: http://ir.linkedin.com/pub/naser-farhadi/85/b3b/909 Date: 27 Mar 2015 Version: acunetix.exe Video: https://vid.me/SRCb class...

WordPress Marketplace 2.4.0 Add Administrator

!/usr/bin/python Exploit Name: WP Marketplace 2.4.0 Remote Command Execution Vulnerability discovered by Kacper Szurek http://security.szurek.pl Exploit written by Claudio Viviani -------------------------------------------------------------------- The vulnerable function is located on...

[SECURITY] Fedora 21 Update: rdiff-backup-1.2.8-14.fc21

rdiff-backup is a script, written in Python, that backs up one directory to another and is intended to be run periodically nightly from cron for instance. The target directory ends up a copy of the source directory, but extra reverse diffs are stored in the target directory, so you can still...

[SECURITY] Fedora 22 Update: rdiff-backup-1.2.8-14.fc22

rdiff-backup is a script, written in Python, that backs up one directory to another and is intended to be run periodically nightly from cron for instance. The target directory ends up a copy of the source directory, but extra reverse diffs are stored in the target directory, so you can still...

Vulnerability Exposes Thousands of GoPRO Users' Wireless Passwords

GoPro, the popular wearable high-definition camera manufacturer, has vulnerability in its official website that exposes usernames and passwords of thousand of its customers’ wireless network. Action camera maker GoPro manufactures cameras which are compact, lightweight, rugged, and are wearable o...

Seagate Business NAS Firmware Vulnerabilities Disclosed

Firmware running on certain Seagate network-attached storage devices that are popular with small businesses and home offices, are vulnerable to remote attacks. Researchers at Beyond Binary, a security consulting firm in Australia, on Sunday went public with their disclosure after a nearly...

Seagate NAS appears remote code execution vulnerability-vulnerability warning-the black bar safety net

Foreign security researcher OJ Reeves found the Seagate NAS one remote code execution vulnerability, and in the last year of the 1 0-month 7 Report to the official, but 1 3 0 days past the official still does not fix the vulnerability, so today he released the vulnerability details. ! Overview...