Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities

Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities Document Title: =============== Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1153 Release Date: ============= 2013-12-02...

Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1153 Release Date: ============= 2013-12-02 Vulnerability Laboratory ID VL-ID: ==================================...

Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer Wifi 1.4.4 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1153 Release Date: ============= 2013-12-01 Vulnerability Laboratory ID VL-ID: ==================================...

MIUI-V5 pattern lock/shortcut key switch design flaw could lead to bypass-vulnerability warning-the black bar safety net

Brief description: Today the third to grab the Red rice, or did not grab, depressed and... It seems 9 months of the millet 3 is simply grab the rhythm of Ah, find F-Code, Xiaomi 3 or red rice can be. Don't know why, before submitting a no show.,,, a Detailed description: 1 require F Code. 2 is in...

Metasploit Registrar Duped by Social Engineering, Not Fax

The registrar for the Metasploit and Rapid7 websites, both of which were victims of a DNS hijacking attack on Friday, was not duped by a spoofed change request sent via fax as it originally reported. Instead, a Register.com employee likely fell victim to a social engineering scam that resulted in...

Anya Web Solutions SQL Injection Bypass

Exploit Title : Anya Web Solutions Login Page Bypass Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://www.anyawebsolutions.com Google Dork : intext:"Powered by Anya Web Solutions" inurl:asp Date: 2013/10/14 Tested on: Windows 7 , Linux...

Beetel Connection Manager PCW_BTLINDV1.0.0B04 - Local Buffer Overflow (SEH)

!/usr/bin/python from struct import pack Exploit Title:Beetel Connection Manager SEH Buffer Overflow Software for usb wireless Homepage:http://www.beetel.in/business-solutions/international-business/3g-products/g31-3g-data-card Version:PCWBTLINDV1.0.0B04 Software...

Phony Fax Leads to Metasploit, Rapid7 DNS Hijacking

A pro-Palestine hacker collective went old-school in its takedown of the Metasploit and Rapid7 websites today. Metasploit creator and HD Moore confirmed via Twitter that Metasploit.com was hacked via a spoofed DNS change request sent via fax to its registrar, Register.com. “Hacking like it’s 1964...

Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS

Opolis.eu suffers from cross site request forgery, cross site scripting, denial of service, and remote blind SQL injection vulnerabilities. The vendor has not responded to the researchers reports of these issues...

shopex register any user-defined pre-Deposit of balance or integration-vulnerability warning-the black bar safety net

Brief description: shopex in the registered user is present when the validation is not strict, leading to the time of registration can be freely defined the pre-Deposit balances or credits such as the contents of the field Detailed description: 在 文件 \core\shop\controller\ctl.passport.php if !$ in...

HylaFAX+ 5.5.3 Buffer Overflow

Details =========================================================== Application: "HylaFAX+" Version: 5.2.4 April, 2008 through 5.5.3 August 6, 2013 Type: Daemon that manages a fax server via an FTP-like protocol. Vendor / Maintainer: Lee Howard faxguy at howardsilvan.com Project Homepage:...

Shylock/Caphaw Banking Malware Infections on the Rise

Two dozen major U.S. and European banks are in the crosshairs of the Shylock, or Caphaw, financial malware of late, and victims who trade with one of the 24 financial institutions are at risk of giving up their credentials and losing assets in their accounts. Malware researchers have noticed a ri...

CVE-2013-2788

The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service unhandled exception and process crash via unspecified vectors...

CVE-2013-2788

The DNP3 Slave service in SUBNET Solutions SubSTATION Server 2.7.0033 and 2.8.0106 allows remote attackers to cause a denial of service unhandled exception and process crash via unspecified vectors...

CVE-2013-2788

CVE-2013-2788 affects SUBNET Solutions SubSTATION Server, specifically the DNP3 Slave service in versions 2.7.0033 and 2.8.0106. The root cause is improper input validation (CWE-20), allowing remote attackers to trigger an unhandled exception and cause a denial of service (process crash). Public ...

IPIX Solutions Shell Upload

Exploit Title : IPIX Solutions FCKEditor File Upload Vulnerability Author : DevilScreaM Date : 14/09/2013 Category : Web Applications Vendor : http://ipixsolutions.com Dork intext:Powered By Ipix Solutions intext:Powered By:IPIX SOLUTIONS intext:Website Design @ IPIX Solutions. Vulnerability :...

phpcms multiple versions of the background holding shell vulnerability-vulnerability warning-the black bar safety net

Brief description: phpcms multiple versions of the background holding shell vulnerability. Detailed description: url rules with generated static can get the shell. Vulnerability proof: 1, the landing in the background." Extension"—"the URL rule Management"—"Add a rule" ! 2,“URL rule name”must be...

phpwind background getshell-a vulnerability warning-the black bar safety net

Background upload plugin, you can upload one that contains the php Trojan phpwind standard format plug-in installation package, and getshell. 1. First make an installation package, you need to include a manifest. xml file and a php word此处 文件 名为 php.php a. the manifest. the xml is as follows: ? xm...

AjaXplorer 5.0.2 Shell Upload / Traversal

Trustwave SpiderLabs Security Advisory TWSL2013-027: Multiple Vulnerabilities in AjaXplorer Published: 09/05/13 Version: 1.0 Vendor: AjaXplorer http://ajaxplorer.info Product: AjaXplorer Version affected: 5.0.2 and prior Product description: AjaXplorer is an open source file sharing platform whic...

CiscoWorks Common Services Installed

CiscoWorks Common Services, the foundation of application infrastructure for CiscoWorks network management solutions, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69468; scriptversion"1.9";...