198 matches found
Samsung PC malicious disable the Windows Update“scandal”-vulnerability warning-the black bar safety net
The recent Windows users reflect that their Samsung computer on the Windows Automatic Update program will be randomly disabled, this is for their PC Security a security risk. 禁用 Windows 更新 的 程序 名为 DisableWindowsupdate.exe this app is Samsung SW Update software part. SW Update is typical for the O...
Samsung Disables Windows Update
Samsung PC owners could soon find themselves in an endless carousel of enabling Windows Update with each reboot of their machine after a computing enthusiast discovered that a Samsung feature disables Microsoft’s update mechanism by default. Windows Update is a service that delivers, among other...
New-CMS - Multiple Vulnerability
No description provided by source. Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto fulgur Fontanella Author URL: ictsec.wordpress.com...
VulnCheck KEV: CVE-2013-2094
Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perfsweventenabled array in swperfeventdestroy. Explotation allows for privilege escalation...
IBM WebSphere Application Server z/OS跨站脚本和未明漏洞
IBM WebSphere Application Server WAS是由IBM遵照开放标准,例如Java EE, XML 还有Web Services,开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS存在安全漏洞,允许攻击者进行跨站脚本和其他攻击。 1以JAX-RPC SW-Security装载类时存在WSEC5007E错误。 2传递给WEB消息组件的未明输入在返回用户之前缺少过滤,可导致跨站脚本攻击,可获得敏感信息或劫持用户会话。 0 IBM WebSphere Application Server for z/OS...
Adobe SW Flashplayer - Memory Corruption Vulnerability
Document Title: =============== Adobe SW Flashplayer - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/206.wmv View: http://www.youtube.com/watch?v=619DCE40BVU Release Date: ============= 2011-06-19 Vulnerability Laboratory ID...
Adobe SW Flashplayer - Memory Corruption Vulnerability
Document Title: =============== Adobe SW Flashplayer - Memory Corruption Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/206.wmv View: http://www.youtube.com/watch?v=619DCE40BVU Release Date: ============= 2011-06-19 Vulnerability Laboratory ID...
New-CMS v1.08 Multiple Vulnerability
Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...
HTMLDOC html文件处理栈溢出漏洞
BUGTRAQ ID: 35727 HTMLDOC是用于将HTML文件和网页转换为适合在线查看和打印的索引HTML、PostScript和PDF文件的工具。 HTMLDOC的htmldoc/util.cxx文件中的sscanf和setpagesize函数存在栈溢出漏洞。如果用户受骗打开了包含有特制MEDIA SIZE标注的HTML文档的话,就可以触发这个溢出,导致执行任意指令。 Easy Software Products HTMLDOC 1.8.27 厂商补丁: Easy Software Products ----------------------...
CVE-2009-2240
Cross-site scripting XSS vulnerability in AD2000 free-sw leger aka Web Conference Room Free 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in AD2000 free-sw leger aka Web Conference Room Free 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2240
Cross-site scripting XSS vulnerability in AD2000 free-sw leger aka Web Conference Room Free 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-2240
The CVE-2009-2240 issue affects leger (free edition) from AD2000 (Web Conference Room Free). A cross-site scripting (XSS) vulnerability exists in version 1.6.4 and earlier, allowing an attacker to cause arbitrary script execution in a user’s browser. The vendor addressed this with an update in ve...
SW-HTTPD Denial Of Service
/ SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100 HTTP/1.1 Author: Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org / include "stdio.h" include "unistd.h" include "stdlib.h" include "sys/types.h" include "sys/socket.h" include...
SW-HTTPD Server 0.x Remote Denial of Service Exploit
No description provided by source. / SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100 HTTP/1.1 After server not found all pages. Author: Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org / include "stdio.h" include "unistd.h" include...
SW-HTTPD Server 0.x - Remote Denial of Service
SW-HTTPD Server 0.x - Remote Denial of Service / SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100 HTTP/1.1 After server not found all pages. Author: Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org / include "stdio.h" include "unistd....
SW-HTTPD Server 0.x Remote Denial of Service Exploit
Exploit for multiple platform in category dos / poc ==================================================== SW-HTTPD Server 0.x Remote Denial of Service Exploit ==================================================== / SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100...
SW-HTTPD Server 0.x - Remote Denial of Service
/ SW-HTTPD Server v0.x Denial of Service PoC Multiple Connections with GET /A100 HTTP/1.1 After server not found all pages. Author: Jonathan Salwan Mail : submit AT shell-storm.org Web : http://www.shell-storm.org / include "stdio.h" include "unistd.h" include "stdlib.h" include "sys/types.h"...
IRIX - execve(/bin/sh) Shellcode (43 bytes)
IRIX - execve/bin/sh Shellcode 43 bytes. Shellcode exploit for IRIX platform char shellcode= "\x04\x10\xff\xff" / bltzal $zero, / "\x24\x02\x03\xf3" / li $v0,1011 / "\x23\xff\x02\x14" / addi $ra,$ra,532 / "\x23\xe4\xfe\x08" / addi $a0,$ra,-504 / "\x23\xe5\xfe\x10" / addi $a1,$ra,-496 /...
linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes
No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...