kernel: iscsi-target: heap buffer overflow on large key error

Heap-based buffer overflow in the iscsiaddnotunderstoodresponse function in drivers/target/iscsi/iscsitargetparameters.c in the iSCSI target subsystem in the Linux kernel through 3.9.4 allows remote attackers to cause a denial of service memory corruption and OOPS or possibly execute arbitrary co...

Target Longlife Media Player 2.0.2.0 - '.wav' Crash (PoC)

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

CIS Manager SQL Injection

Exploit Title : CIS Manager SQL Injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.construtiva.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CIS Manager" Date: 2013/09/10...

Target Longlife Media Player 2.0.2.0 Crash Proof Of Concept

Exploit Title : Target Longlife Media Player Version 2.0.2.0 - .wav - Crash POC Date : 11-09-2013 Exploit Author : gunslinger - http://www.cr0security.com Software Link : http://download.cnet.com/Target-Longlife-Media-Player/3000-21394-10417975.html Version : 2.0.2.0 Probably old version of...

Infoideias Cross Site Scripting / SQL Injection

Exploit Title : Infoideias Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://www.infoideias.com.br Tested on: Windows 7 , Linux Google Dork : intext:"Powered by Infoideias" Date: 2013/09/10...

Interalp Touristik SQL Injection

Exploit Title : Interalp Touristik Sql injection Vulnerabilites Exploit Author : Ashiyane Digital Security Team Software Link : http://interalp-touristik.com Tested on: Windows 7 , Linux Google Dork : intext:"powered by Interalp Touristik" Date: 2013/09/10...

Microsoft Windows SMB Response Handling Buffer Overflow (CVE-2005-0045)

A remote code execution vulnerability has been reported in the Microsoft Windows Server Message Block SMB client component. A remote attacker can exploit this vulnerability by sending a specially crafted message to an affected system. Successful exploitation would allow an attacker to take comple...

CommonMan SQL Injection

Exploit Title : CommonMan Sql injection Vulnerabilites Software link : http://www.cmiti.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Site Powered by CommonMan Technologies" Date: 2013/09/07...

dBlog CMS SQL Injection

Exploit Title : dBlog CMS Sql injection vulnerability + Software link : www.dblog.it + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"powered by dBlog CMS" + Date: 2013/09/01...

PK-CMS SQL Injection

Exploit Title : PK-CMS Sql injection vulnerability + Software link : www.passoft-webdev.nl + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Powered by PK-CMS" + Date: 2013/09/01...

Flo CMS SQL Injection

Exploit Title : Flo cms Sql injection vulnerability + Software link : http://www.flocms.ie + Designer link : http://www.flowebdesign.ie + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"Design by Flo Web Design & powered by Flo CMS" + Date:...

Researchers Reverse Engineer Dropbox

Researchers have cracked open cloud storage service Dropbox, reverse engineering the encryption protecting the client in order to open it up to further security analysis. The engineers, Dhiru Kholia of Openwall and Przemyslaw Wegrzyn of CodePainters, also managed to demonstrate how to use...

CyberBizia Cross Site Scripting / SQL Injection

Exploit Title : CyberBizia Multiple Vulnerabilites Software link : http://www.cyberbizia.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CyberBizia" Date: 2013/08/30...

Blakord Portal Cross Site Scripting

Exploit Title : Blakord Portal Cross site scripting vulnerability Software link : http://www.cdv3k.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Power by Blakord Portal" Date: 2013/08/28...

WordPress silverOrchid Cross Site Scripting

Exploit Title : wordpress silverOrchid theme Cross site scripting Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by WordPress and theme by gazpo.com" Date: 2013/08/27 --------------------------------------------------------------------...

New Jigsaw Hacking Tool Spotted in Attacks

If you’ve run an internal phishing exercise, chances are you may have used Jigsaw, an open source penetration testing tool that enables security teams to automatically generate email address combinations from a minimal amount of public information. As with other open source security and networkin...

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5...

http-default-accounts NSE Script

Tests for access with default credentials used by a variety of web applications and devices. It works similar to http-enum, we detect applications by matching known paths and launching a login routine using default credentials when found. This script depends on a fingerprint file containing the...

Joomla Unauthorized File Upload Remote Code Execution

A remote code execution vulnerability has been reported in Joomla. The vulnerability is due to improper validation of an uploaded file's extension. A remote attacker may exploit this issue by uploading a specially crafted php file. Successful exploitation would allow an attacker to execute...

File Checksums

Checks the checksums MD5 or SHA1of specified files. The SSH protocol is used to log in and to gather the needed information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...