NTR ActiveX Control Check() Method Buffer Overflow

This module exploits a vulnerability found in NTR ActiveX 1.1.8. The vulnerability exists in the Check method, due to the insecure usage of strcat to build a URL using the bstrParams parameter contents note: this is also the reason why the module won't allow you to modify the URIPATH, which leads...

DIY-CMS blog mod SQL Injection

Exploit for php platform in category web applications Exploit Title: DIY-CMS blog mod SQL Injection Author: snup Contact: email protected Site: http://e-o-u.org SQL Injection: DORK: inurl:"mod.php?mod=blog" intext:"powered by DIY-CMS" inurl:"mod.php?mod=blog" BUG:...

TelnetD encrypt_keyid - Function Pointer Overwrite

TelnetD encryptkeyid - Function Pointer Overwrite / telnetd-encryptkeyid.c Mon Dec 26 20:37:05 CET 2011 Copyright 2011 Jaime Penalba Estebanez NighterMan Copyright 2011 Gonzalo J. Carracedo BatchDrake [email protected] - [email protected] [email protected] - [email protected] / / /...

TelnetD encrypt_keyid - Function Pointer Overwrite

/ telnetd-encryptkeyid.c Mon Dec 26 20:37:05 CET 2011 Copyright 2011 Jaime Penalba Estebanez NighterMan Copyright 2011 Gonzalo J. Carracedo BatchDrake [email protected] - [email protected] [email protected] - [email protected] / / // / / / // /\ \ / / / / / \ / / / / / / // / / / /...

Telnetd encrypt_keyid: Remote Root function pointer overwrite

Exploit for linux platform in category remote exploits / telnetd-encryptkeyid.c Mon Dec 26 20:37:05 CET 2011 Copyright 2011 Jaime Penalba Estebanez NighterMan email protected - email protected Credits to batchdrake as always / / // / / / // /\ \ / / / / / \ / / / / / / // / / / / // / / / //,///...

BF, XSS, IAA и CSRF уязвимости в poMMo

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Brute Force, Cross-Site Scripting, Insufficient Anti-automation и Cross-Site Request Forgery уязвимостях в poMMo. Brute Force WASC-11: http://site/pommo/index.php XSS WASC-08:...

Nagios XI Cross Site Scripting

================ Cross-Site Scripting vulnerabilities in Nagios XI alert"0a29" Tested against 2011R1.8, dated October 28, 2011. Fixes detailed in http://assets.nagios.com/downloads/nagiosxi/CHANGES-2011.TXT 2011R1.9 - 12/07/2011 ================ Timeline: ================ 16 November 2011 -...

Oracle Linux 6 kernel security, bug fix and enhancement update

2.6.32-220.el6 - drm i915: fix unmap race condition introduced with VT-d fix Dave Airlie 750583 - scsi iscsi: revert lockless queuecommand dispatch Rob Evers 751426 2.6.32-219.el6 - kernel KEYS: Fix a NULL pointer deref in the user-defined key type David Howells 751190 CVE-2011-4110 - scsi fc...

Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Traq %q This modu...

Facebook FitnessGrade - SQL Injection Vulnerability

Document Title: =============== Facebook FitnessGrade - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=332 Release Date: ============= 2011-12-13 Vulnerability Laboratory ID VL-ID: ==================================== 332...

Xi3 Corporate Design SQL Injection

Exploit Title: Xi3 Corporation Design Author: Th4 MasK Date : 10.12.2011 // 16:21 Platform : Php Demos Site : http://www.xi3.org/news.php?id=267 SQL http://www.havanahouse.co.uk/subproduct.php?ID=1052 SQL Land of uncertainty Contact:[email protected] Greetz:http://www.turkhackteam.net...

CoDeSys SCADA 2.3 - Remote Buffer Overflow

CoDeSys SCADA 2.3 - Remote Buffer Overflow / See Also: http://aluigi.altervista.org/adv/codesys1-adv.txt CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP S...

Schok Creative SQL Injection

. . | / / || | / |/ \ / \ / \ / \ \ | \ / // | / // | | Y \ \ |/|| /\ / /|| || / / /// /==A|B|H== ================================================================ Exploit Title : schokcreative SQL inj: vulnerable Google Dork : "Site by Schok." Date : 30-11-2011 Author : nGa Sa Lu GaNgst3r...

126cms background log injection vulnerability and fix-vulnerability warning-the black bar safety net

To see the code. 0 1...... A number of...... 0 2 if !$ postdb"userid" || !$ postdb"pwd" 0 3 0 4 echo "div align="center" class="style1""; 0 5 echo "your input user name or password mistake!!!"; 0 6 echo "/div"; 0 7 exit; 0 8 0 9 www.2cto.com 1 0 $postdb"pwd"=md5$postdb"pwd"; 1 1 1 2 1 3...

CVE-2010-5050

Affected software: ManageEngine ADManager Plus 4.4.0. Vulnerability location: JSP page jsp/admin/tools/remote_share.jsp, vulnerability in the input handling of the computerName parameter. Root cause / impact: Cross-site scripting (XSS) that allows an attacker to inject arbitrary web script or HTM...

Google Chrome < 15.0.874.120 Multiple Vulnerabilities

Binary data 800938.prm...

Thunder kankan player(迅雷看看) Stack overflow/DOS Exploit

No description provided by source. !/usr/bin/env python print """ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /\ /\ \ /\ /\ /\ \ /\ 0 0 /:/ / /::\ \ /:/ / /:/ / /::\ \ /:/ / 1 1 /:// /:/:\ \ /:/ / /:/ / /:/:\ \ /:// 0 0 /::\ \ /::\:\ \ /:/ / /:/ / /:/...

Patches Released for BIND Denial-of-service Vulnerability

Patches Released for BIND Denial-of-service Vulnerability There's a new vulnerability in the popular BIND name server software that is causing various versions of the application to crash unexpectedly after logging a certain kind of error. The Internet Systems Consortium ISC, an organization that...

[pdf] Attacking with HTML5

Attacking with HTML5 December 16, 2010 Presentation White paper...

procps 3.2.* vmstat argument stack overflow

Exploit for windows platform in category local exploits / 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...