Generic Payload Handler

This module is a stub that provides all of the features of the Metasploit payload system to exploits that have been launched outside of the framework. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Havij 1.10 Cross Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Software Link: http://itsecteam.com/files/Havij%201.10.rar Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By :...

Adobe Flash Player Embedded Image Integer Overflow (APSB10-14; CVE-2010-2170)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient sanitization by the Adobe Flash Player. A remote attacker might exploit thi...

AspTR EXtended - Cross-Site Request Forgery

Target site : Password : E-Mail : Secret question : Reply : Name : Last Name : Dont Changing : Adana Profession : Msn : Web : Sex : Bay Bay Bayan Avatar : Crew : IMHATIMI.ORG MecTruy Dr.Ly0n Noxy FreWaL...

OpenOffice EMF File EMR Record Parsing Integer Overflow (CVE-2008-2238)

An integer overflow vulnerability exists in the OpenOffice software suite. The vulnerability is due to the way OpenOffice parses EMF images. A remote attacker could exploit this vulnerability by persuading a user to open a malicious EMF file, potentially causing arbitrary code to be injected and...

E-Book Store - SQL Injection

E-Book Store - SQL Injection :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = E-Book Store SQL Injection Vulnerability Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...

The Economics of Targeted Attacks

CAMBRIDGE–Researchers and security vendors have been telling us for years now that attackers have developed sophisticated, targeted attacks designed to separate victims from their money as quickly and cleanly as possible. If that’s so, why aren’t all of us being compromised on a regular basis? A...

Mac OS X EvoCam web servers 3.6.6 and 3.6.7 remote buffer overflow

No description provided by source. !/usr/bin/python Exploit Title: OS X EvoCam Web Server Buffer Overflow Exploit 3.6.6 and 3.6.7 Date: 1st June 2010 Author: d1dn0t didnot A-T me.com Software Link: http://www.pizza.org/evocam.dmg Version: EvoCam 3.6.6 and 3.6.7 Tested on: OS X 10.5.8 Intel import...

K9 Kreativity Design - 'pages.php' SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

CentOS 5 : scsi-target-utils (CESA-2010:0362)

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

grboard v186 Remote File Include Vulnerability

Exploit for php platform in category web applications ============================================== grboard v186 Remote File Include Vulnerability ============================================== Author : untouch Location : jakarta - Indonesia Situs : antijasakomdotorg, autosaveddotwordpressdotcom...

scsi security update

CentOS Errata and Security Advisory CESA-2010:0362 An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring Syste...

Parlic Design Cross Site Scripting / SQL Injection

======================================================================= parlic Design SQL/XSS/HTML Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Spaceacre - SQL Injection Cross-Site Scripting HTML Injection

Spaceacre - SQL Injection Cross-Site Scripting HTML Injection ========================================================= Spaceacre SQL/XSS/HTML Injection Vulnerabilities ========================================================= Name: Spaceacre SQL/XSS/HTML Injection Vulnerabilities Vendor:...

Facebook Now Trending As Phishing Target

Between January and March 2010, Facebook was the first social networking site to have made it into the list of top targets for phishing attacks. With 5.7% of all phishing attacks, Facebook took fourth place behind the traditional phishing targets PayPal, eBay and international bank HSBC, said...

HP OpenView Storage Data Protector Stack Buffer Overflow (CVE-2007-2280)

HP OpenView Storage Data Protector is a cross-platform backup solution for Windows, Unix and Linux operating systems. The Data Protector environment consists of various components and processes: Cell Manager, OmniInet, backup agents, and backup device servers. A buffer overflow vulnerability has...

724CMS Enterprise Version 4.59 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== 724CMS Enterprise Version 4.59 SQL Injection Vulnerability ========================================================== 724CMS Enterprise Version 4.59 SQL Injection Vulnerability Homepag...

portaLx SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== portaLx SQL Injection Vulnerability =================================== ALLH AKBAR Exploit Title: portaLx SQL Injecti0n Vulnerability -::DESCRIPTION Date: 5 de mayo de 2010 -::DATE Author: JM511 EmaiL :...

Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35

No description provided by source. !/usr/bin/php ?php / Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35newist as of release Vendor's Website:http://phpnuke.org/ Secuirty Researcher: Michael Brooks https://sitewat.ch Original Advisory:...

PHP-Nuke 7.0 / 8.1 / 8.1.35 Wormable Remote Code Execution

!/usr/bin/php ?php / Wormable Remote Code Execution in PHP-Nuke 7.0/8.1/8.1.35newist as of release Vendor's Website:http://phpnuke.org/ Secuirty Researcher: Michael Brooks https://sitewat.ch Original Advisory: http://blog.sitewat.ch/2010/05/vulnerabilities-in-php-nuke.html Google hack: "Francisco...