Apache Struts includeParams Remote Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

SunShop <= 4.1.4 (id) Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research August 18, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : SunShop = 4.1.4 Risk : SQL Injection Description: SunShop shopping cart is a full featured ecommerce solution written in php that allows for...

ACDSee PRO 5.1 RLE Image Processing Heap Overflow

No description provided by source. Application: ACDSee PRO RLE Image Processing Heap Overflow Platforms: Windows Secunia: SA48804 PRL: 2012-22 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

Cool PDF Reader 3.0.2.256 Buffer Overflow

No description provided by source. Exploit Title: Cool PDF Reader 3.0.2.256 buffer overflow Vulnerability Disclosed to US-CERT by Chris Gabriel: 11-20-2012 Emailed vendor: 12-4-2012 Francis Provencher discovered vulnerability and reported to Secunia: 12-19-2012 Vulnerability Discovery: Francis...

ezContents CMS 2.0.3 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported:...

modx cms 0.9.6.1 - Multiple Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: MODx CMS Vulnerabilities Vendor: http://modxcms.com Bugs: Source code disclosure, local file inclusion Vulnerable Version: 0.9.6.1 prior versions also may be affected Exploitation: Remote with browser Fix...

Adobe Photoshop 12.1 Tiff Parsing Use-After-Free

No description provided by source. Application: Adobe Photoshop 12.1 Tiff Parsing Use-After-Free Platforms: Windows PRL: 2012-07 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3 Technical detail...

XML-RPC Library <= 1.3.0 (xmlrpc.php) Remote Code Injection Exploit

No description provided by source. tested and working /str0ke !/usr/bin/perl ilo-- This program is no GPL or has nothing to do with FSF, but some code was ripped from romansoft.. sorry, too lazy! xmlrpc bug by James from GulfTech Security Research. http://pear.php.net/bugs/bug.php?id=4692 xmlrpc...

Microsoft Office XP Remote code Execution

No description provided by source. Application: Microsoft Office XP Remote code Execution Platforms: Windows Vista Exploitation: Remote code execution CVE Number: Microsoft Bulletin: PRL: 2011-07 Author: Francis Provencher Protek Research Lab's WebSite: http://www.protekresearchlab.com/ Twitter:...

w3blabor CMS 3.0.5 - Arbitrary File Upload & LFI Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research...

Remote File Manager 1.0 - Denial of Service Exploit

No description provided by source. / Server Remote File Manager DoS Exploit ------------------------------------------- INFGP - Hacking&security Research + Attacking localhost.. + Build DOS string + Buffer size = 300 byte + Sending bad format.. + localhost : Disconected! Greats: Infam0us...

PostNuke Module v4bJournal - Remote SQL Injection Vulnerability

No description provided by source. ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz F...

MyServer 0.4.3 DoS

No description provided by source. / MyServer 0.4.3 DoS vendor: http://myserverweb.sourceforge.net Written and found by badpack3t at security-protocols.com For SP Research Labs 09/08/2003 usage: sp-myserv targetip targetport default is 80 / include stdafx.h include winsock2.h include stdio.h prag...

CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, r...

Flaw Lets Attackers Bypass PayPal Two-Factor Authentication

There’s a vulnerability in the way that PayPal handles certain requests from mobile clients that can allow an attacker to bypass the two-factor authentication mechanism for the service and transfer money from a victim’s account to any recipient he chooses. The flaw lies in the way that the PayPal...

Storesprite 7 Cross Site Scripting

Advisory ID: HTB23215 Product: Storesprite Vendor: Lamp Design Limited Vulnerable Versions: 7 and probably prior Tested Version: 7 Advisory Publication: May 14, 2014 without technical details Vendor Notification: May 14, 2014 Vendor Patch: June 19, 2014 Public Disclosure: June 25, 2014...

VMTurbo Operations Manager vmtadmin.cgi Remote Command Execution

VMTurbo Operations Manager 4.6 and prior are vulnerable to unauthenticated OS Command injection in the web interface. Use reverse payloads for the most reliable results. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the cmd generic...

Microsoft Internet Explorer 8910 - CInput Use-After-Free Crash (PoC) (MS14-035)

Microsoft Internet Explorer 8910 - CInput Use-After-Free Crash PoC MS14-035 MS14-035 Internet Explorer CInput Use-after-free POC Test check var startfl=false; function changer // Call of changer function will happen inside mshtml!CFormElement::DoReset call, after execution of this function crash ...

Dolphin 7.1.4 SQL Injection Vulnerability

Dolphin version 7.1.4 suffers from a remote SQL injection vulnerability. Product: Dolphin Vendor: BoonEx Vulnerable Versions: 7.1.4 and probably prior Tested Version: 7.1.4 Advisory Publication: May 21, 2014 without technical details Vendor Notification: May 21, 2014 Vendor Patch: June 17, 2014...

Researchers Dissect Spammers' Economic Ecosystem

A profitable spam campaign has three key elements—a reliable email list, filter-busting content, and a botnet for distribution—and each has been individually dissected and understood. But in order to adequately protect users from spam, which thrives in an established economic ecosystem, researche...