WordPress LivePHP Cross Site Scripting

Exploit Title: Wordpress wp-livephp plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link: http://wordpress.org/extend/plugins/wp-livephp/ Version: All Version...

jPORTAL 2 SQL Injection

Exploit Title: jPORTAL 2 SQL Injection Vulnerabilitiy Google Dork: "powered by jPORTAL 2" Date: 8/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://jportal2.com/ Version: All Version Security Risk::High Tested on: GNU/Linux Ubuntu -...

Apple Safari Webkit libxslt Arbitrary File Creation (CVE-2011-1774)

An arbitrary file creation vulnerability exists in Apple Safari. The vulnerability is due to insufficient restriction of the Webkit by Safari while performing an XSL transformation. A remote attacker may exploit this vulnerability by enticing a user to open a specially crafted web page with an...

FreeBSD Telnet Service Encryption Key ID Buffer Overflow

This module exploits a buffer overflow in the encryption option handler of the FreeBSD telnet service. Module Options msf use exploit/freebsd/telnet/telnet/encryptkeyid msf undefinedencryptkeyid show actions ...actions... msf undefinedencryptkeyid set ACTION msf undefinedencryptkeyid show options...

IBM Lotus Domino Server Controller Authentication Bypass Vulnerability

No description provided by source. Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versio...

Adobe Flash Player Layered Animation Object Buffer Overflow (APSB11-28; CVE-2011-2460)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a buffer overrun while processing 3D coordinates in objects within layered animations. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an...

Adobe Flash Player Overlapping Records Memory Corruption (APSB11-28; CVE-2011-2453)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient validation of the parsed data's length. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file. Successfu...

Adobe Flash Player ATF Data Buffer Overflow (APSB11-28; CVE-2011-2456)

A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient bounds checking of user supplied input while loading Adobe Texture Format ATF data. A remote attacker could exploit this vulnerability by enticing a user to open a web page...

Adobe Flash Player ActionScript2 Stack Buffer Overflow (APSB11-28; CVE-2011-2457)

A stack buffer overflow vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a memory allocation issue while handling malformed ShockWave files SWF. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded...

Windows Gather Wireless Current Connection Info

This module gathers information about the current connection on each wireless lan interface on the target machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Wireless Curren...

Adobe Flash Player Embedded Flash Object Code Execution (APSB11-28; CVE-2011-2459)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to null pointer dereference in the Flash plugin while handling string values. A remote attacker could exploit this vulnerability by enticing a user to open an HTML document containing an embedd...

Internet Explorer Unsafe Scripting Misconfiguration Code Execution

A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to improper configuration of the way Internet Explorer handles ActiveX controls. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted web page...

Windows Gather Windows Host File Enumeration

This module returns a list of entries in the target system's hosts file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Windows Host File Enumeration', 'Description' = %q This...

Federal Trojan's Got A "Big Brother"

About two weeks ago, the German Chaos Computer Club CCC has published an analysis report of a backdoor trojan that they claim had been used by German police during investigations in order to capture VoIP and IM communication on a suspect’s PC. Our friends over at F-Secure published a blog post la...

More than 10,000 Facebook account hacked by TeamSwaSTika

More than 10,000 Facebook account hacked by TeamSwaSTika Another group of Hackers, self titled Team Swastika, have caused panic amongst Facebook users after releasing the details of 10,000 accounts onto popular text sharing site, Pastebin. Pastebin, usually used to share source code, has frequent...

“Nvram” File is Missing on Target Replica Location

When a replication job starts, it fails right away with the following error message: External FIB refers to non-existing file. FIB: VMname.nvram...

Adobe Reader Compound Glyphs Array Indexing Error Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Adobe Reade...

BuzzyWall 1.3.2 File Disclosure

BuzzyWall 1.3.2 resolute.php Local File Disclosure Exploit Found by cr4wl3r @hackb0x d0rk: no d0rk f0r kiddi0ts Script: http://sourceforge.net/projects/buzzywall/files/buzzywall/ err0r c0de resolute.php ?PHP header "Content-type: image/jpeg"; $img = $GET'img'; header'Content-Disposition:...

Apache Struts ParametersInterceptor Remote Code Execution

This module exploits a remote command execution vulnerability in Apache Struts versions use exploit/multi/http/struts/codeexecparameters msf undefinedcodeexecparameters show actions ...actions... msf undefinedcodeexecparameters set ACTION msf undefinedcodeexecparameters show options ...show and s...

Sabadkharid SQL Injection

Exploit Title: sabadkharid SQLinjection Vulnerabilities Google Dork: Powered by Parsp.com - Date: 2011-sep-22 Author: s1nahack3r E-Mail ; [email protected] £££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££££ / Sql Injection: http://Target/cart.php?shoppingcart&add2cart=1...