KenWard's Zipper 1.400 - Buffer Overflow - Method 2

No description provided by source. !/usr/bin/python KenWard's Zipper v1.400 File Name Buffer Overflow Coded by sinn3r x90.sinneratgmaild0tcom Tested on: Windows XP SP3 ENG Reference: http://www.exploit-db.com/exploits/11834 Big thanks to mrme, and corelanc0d3r. greetz to all the friends at Corela...

SourceForge <= 1.0.4 (database.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl SourceForge-1.0.4 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://lbdpc15.epfl.ch/ibd/IBD2000/SourceForge-1.0.4.tgz Exploit: http://site.com/path/include/database.php?sysdbtype=EvilScript coded and f0und3d by...

Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit

No description provided by source. !/usr/bin/perl Monster Top List = 1.4.2 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.monstertoplist.com Exploit: http://site.com/path/sources/functions.php?rootpath=EvilScript coded and f0und3d by fluffybunny Romania...

Joomla_1.6.0-Alpha2 XSS Vulnerabilities

No description provided by source. Title:Joomla1.6.0-Alpha2 XSS Vulnerabilities Date: 2010-05-02 Author: mega-itec.com Software Link: http://joomlacode.org/gf/download/frsrelease/11322/45252/Joomla1.6.0-Alpha2-Full-Package.zip Version: 1.6.0-alpha2 Tested on: relevant os CVE : Code :...

Webkit (Apple Safari < 4.1.2/5.0.2 & Google Chrome < 5.0.375.125) - Memory Corruption

No description provided by source. TITLE: WEBKIT APPLE SAFARI 4.1.2/5.0.2 & GOOGLE CHROME 5.0.375.125 MEMORY CORRUPTION VULNERABILITY TESTED OS: WINDOWS XP SP3 SEVERITY: HIGH CVE-NUMBER: CVE-2010-1813 DISCOVERED DATE: 2010-06-29 FIXED DATE: GOOGLE CHROME 2010-07-26 & APPLE SAFARI 2010-09-08 FIXED...

Woodall Creative SQL Injection Vulnerability

No description provided by source. ========================================================= Woodall Creative SQL Injection Vulnerability ========================================================= Name: Woodall Creative SQL Injection Vulnerability Date: 2010-05-11 vendor:...

Free Advertisment cms (user_info.php) SQL Injection Vulnerability

No description provided by source. ========================================================= Free Advertisment cms userinfo.php SQL Injection Vulnerability ========================================================= Name: Free Advertisment cms userinfo.php SQL Injection Vulnerability Date: 2010-05-...

PHP Forge <= 3 beta 2 (cfg_racine) Remote File Inclusion Vulnerability

No description provided by source. \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ phpforge3b2cfgracine Remote File Inclusion Vulnerability ------------------------ Virangar Security Team www.virangar.org public www.virangar.net priv8 -------- Discoverd By : Snake...

ORACLE Business Process Management (Process Administrator) 5.7-6.0-10.3 - XSS

No description provided by source. |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | |...

Linux Kernel 2.6 < 2.6.19 - (32bit) ip_append_data() ring0 Root Exploit

No description provided by source. / 0x82-CVE-2009-2698 Linux kernel 2.6 2.6.19 32bit ipappenddata local ring0 root exploit Tested White Box 42.6.9-5.ELsmp, CentOS 4.42.6.9-42.ELsmp, CentOS 4.52.6.9-55.ELsmp, Fedora Core 42.6.11-1.1369FC4smp, Fedora Core 52.6.15-1.2054FC5, Fedora Core...

Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit

No description provided by source. / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT 2.6.19 - CVE-2009-2698 udpsendmsg bug exploit via output callback function used in dstentry / rtable Bug reported by Tavis Ormandy and Julien Tinnes of the Google Security Team Tested with Debian Etch r0 $ cat...

Linux Kernel 2.4/2.6 - sock_sendpage() ring0 Root Exploit (Simple Version)

No description provided by source. / 0x82-CVE-2009-2692 Linux kernel 2.4/2.6 32bit socksendpage local ring0 root exploit simple ver Tested RedHat Linux 9.0, Fedora core 411, Whitebox 4, CentOS 4.x. -- Discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team. spender and venglin's...

Flussonic Media Server 4.1.25 < 4.3.3 - Arbitrary File Disclosure

Document Title: ============ Flussonic Media Server 4.3.3 Multiple Vulnerabilities Release Date: =========== June 29, 2014 Product & Service Introduction: ======================== Flussonic is a mutli-protocol streaming server with support for many protocols, including HDS, HLS, RTMP, RTSP, HTTP,...

qemu -- denial of service vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver is vulnerable to an infinite loop issue. It could occur while processing a CLIENTCUTTEXT message with specially crafted payload message. A privileged guest user could use this flaw to crash th...

WordPress Easy Banners 1.4 Cross Site Scripting

Exploit Title : Wordpress easy-banners.1.4 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/easy-banners/ Software Link : http://downloads.wordpress.org/plugin/easy-banners.1.4.zip Date : 2014-06-28 Tested on : Windows 7 / Mozilla...

WordPress Custom Banners 1.2.2.2 Cross Site Scripting

Exploit Title : Wordpress custom-banners 1.2.2.2 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/custom-banners/ Software Link : http://downloads.wordpress.org/plugin/custom-banners.zip Date : 2014-06-28 Tested on : Windows 7 /...

WordPress Random Banner 1.1.2.1 Cross Site Scripting

Exploit Title : Wordpress random-banner.1.1.2.1 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/random-banner/ Software Link : http://downloads.wordpress.org/plugin/random-banner.1.1.2.1.zip Date : 2014-06-28 Tested on : Windows ...

WordPress Construction Mode 1.8 Cross Site Scripting

Exploit Title : Wordpress wp-construction-mode.1.8 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/wp-construction-mode Software Link : http://downloads.wordpress.org/plugin/wp-construction-mode.1.8.zip Date : 2014-06-27 Tested o...

WordPress ml-slider 2.5 Cross Site Scripting

Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...

FIFA World Cup Security Team Accidentally Reveals their Wi-Fi Password

This FIFA World Cup, the security has been really going well and yet no calamitous incident reported so far, other than the security company who is responsible to keep an eye on the event’s security, itself tweeted a photograph of their state-of-the-art monitoring centre that exposed the World Cu...