BSQLinjector - Blind SQL Injection Exploitation Tool

BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: --file Mandatory - File containing valid HTTP request and SQL injection point SQLINJECT...

The vulnerability of the Mac OS X operating system, which allows a hacker to bypass the sandbox protection mechanism

The vulnerability of the File Bookmark component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the sandbox protection mechanisms by assigning a special catalog name to...

HP StoreOnce Backup System Arbitrary Code Execution Vulnerability

HP StoreOnce Backup System is a disk-based backup system. A security vulnerability exists in the HP StoreOnce Backup System that could be exploited by remote attackers to submit a special request to execute arbitrary code...

win32k Clipboard Bitmap - Use-After-Free

Source: https://code.google.com/p/google-security-research/issues/detail?id=533 This PoC triggers a crash on Windows 7 32-bit with Special Pool enabled on win32k.sys. The kernel crashes due to a use-after-free condition with bitmaps in the clipboard. --- Note that multiple PoC executions and...

win32k Clipboard Bitmap - Use-After-Free

win32k Clipboard Bitmap - Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=533 This PoC triggers a crash on Windows 7 32-bit with Special Pool enabled on win32k.sys. The kernel crashes due to a use-after-free condition with bitmaps in the clipboard. ---...

特种设备安全平台 infoAction.do SQL注入

No description provided by source...

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of Google V8 JavaScript engine platform. A security vulnerability in Joyent Node.js allows remote attackers to conduct denial of service attacks by submitting special requests...

Huawei VCN500 Denial of Service Vulnerability

Huawei VCN500 is an all-in-one intelligent video surveillance product from Huawei, China. The Huawei VCN500 suffers from a security vulnerability that allows remote attackers to submit special requests for denial-of-service attacks...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08230)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory error referencing arbitrary code execution vulnerability exists in Adobe Flas...

[SECURITY] Fedora 23 Update: ImageMagick-6.9.2.7-1.fc23

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

McAfee Enterprise Security Manager Security Mechanism Bypass Vulnerability

McAfee Enterprise Security ManagerA security management product from the U.S.-based McAfee that calculates real-time baseline activity on all information collected and provides prioritized alerts on potential threats before they occur. A security mechanism bypass vulnerability exists in McAfee...

Microsoft Windows Kernel - Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)

Microsoft Windows Kernel - Device Contexts and NtGdiSelectBitmap Use-After-Free MS15-115 Source: https://code.google.com/p/google-security-research/issues/detail?id=505 The attached testcase triggers a use-after-free condition in win32k. The attached debugger output was triggered on Windows 7 wit...

Microsoft Windows - ndis.sys IOCTL 0x170034 (ndis!ndisNsiGetIfNameForIfIndex) Pool Buffer Overflow (MS15-117)

Microsoft Windows - ndis.sys IOCTL 0x170034 ndis!ndisNsiGetIfNameForIfIndex Pool Buffer Overflow MS15-117 Source: https://code.google.com/p/google-security-research/issues/detail?id=516 The attached testcase crashes Windows 7 32-bit due to a pool buffer overflow in an ioctl handler. Enabling...

Microsoft Windows Kernel - Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)

Source: https://code.google.com/p/google-security-research/issues/detail?id=505 The attached testcase triggers a use-after-free condition in win32k. The attached debugger output was triggered on Windows 7 with Special Pool enabled on win32k.sys. --- Proof of Concept:...

Microsoft Windows - Race Condition DestroySMWP Use-After-Free (MS15-115)

Source: https://code.google.com/p/google-security-research/issues/detail?id=509 The attached testcase crashes Window 7 32-bit with Special Pool enabled on win32k.sys due to a use-after-free condition. The bug appears to be a race condition between two threads and multiple runs on the PoC might be...

wpa_supplicant denial of service vulnerability

wpasupplicant is a set of daemons that run in the background to support WEP, WPA/WPA2 and WAPI wireless protocols and encrypted authentication. A denial of service vulnerability exists in wpasupplicant, which allows remote attackers to conduct denial of service attacks by submitting special...

Moodle Denial of Service Vulnerability (CNVD-2015-07725)

Moodle is a free, open source e-learning software platform. Moodle suffers from a security vulnerability that allows remote attackers to submit special requests for denial-of-service attacks...

Network name cannot contains the following symbols: ~`!@#$%^&*+=;'><|?*:"

Challenge When attempting to assign an Isolated Network name, the following error occurs: Network name cannot contains the following symbols: !@$%^&+=;'|?:" To allow a specific symbol, remove that symbol from the va...

IBM WebSphere Portal Memory Consumption Denial of Service Vulnerability

IBM WebSphere Portal provides a framework for combining application or business mashups and provides a high-level tool to construct flexible, SOA-based solutions. A security vulnerability exists in IBM WebSphere Portal that could be exploited by a remote attacker to submit a special request that...

Cisco Videoscape Distribution Suite Service Manager REST API Information Disclosure Vulnerability

Cisco Videoscape Distribution Suite Service Manager is an extended and enhanced service manager for content distribution network components. Cisco Videoscape Distribution Suite Service Manager fails to properly handle the target REST API, allowing remote attackers to exploit the vulnerability to...