TweakFS 1.0 (FSX Edition) Stack buffer overflow

No description provided by source. Exploit Title : TweakFS 1.0 FSX Edition CVE : CVE-2010-1458 Corelan : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-026 Date : April 7th, 2010 Author : corelanc0d3r Bug found by : TecR0c Software Link : http://tweakfs.com/ Version : 1.0 OS : Windows...

Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution

No description provided by source. CVE : CVE-2010-0805 !-- .text:600058F7 and ebp+pv, 0 .text:600058FE lea eax, ebp+pv .text:60005904 push eax ; unsigned int16 .text:60005905 push dword ptr ebx+10h ; struct IOleClientSite .text:60005908 call GetHostURLIOleClientSite ,ushort .text:6000590D mov eax...

QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit

No description provided by source. !/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version :...

WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...

NotSopureEdit <= 1.4.1 - Remote File Include Vulnerability

No description provided by source. ======================================================== NotSopureEdit = 1.4.1 Remote File Include Vulnerability ======================================================== + NotSopureEdit = 1.4.1 Remote File Include Vulnerability...

PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...

Linux Kernel < 2.6.19 udp_sendmsg Local Root Exploit

No description provided by source. / hoagieudpsendmsg.c LOCAL LINUX KERNEL ROOT EXPLOIT 2.6.19 - CVE-2009-2698 udpsendmsg bug exploit via output callback function used in dstentry / rtable Bug reported by Tavis Ormandy and Julien Tinnes of the Google Security Team Tested with Debian Etch r0 $ cat...

Joomla Component joomlaXplorer <= 1.6.2 - Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = versi...

Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability

No description provided by source. ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Craigslist Gold - SQL Injection Vulnerability

No description provided by source. Exploit Title: Craigslist Clone Gold SQL injection Vulnerability Date: 04/05/2013 Author: Fallaga Team: FaLLaGa Tunisian Hackers Script url: http://www.scriptcopy.com/craigslist-clone-script/Craiglist-Gold-4444.html Version: N/A Tested on: Demo CVE : EXPL0!T...

WCMS 1.0b (news_detail.asp id) Remote SQL Injection Vulnerability

No description provided by source. ======================================================================= WCMS v.1.0b newsdetail.asp id Remote SQL Injection Vulnerability ======================================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

qemu -- denial of service vulnerability in VNC

Prasad J Pandit, Red Hat Product Security Team, reports: Qemu emulator built with the VNC display driver is vulnerable to an infinite loop issue. It could occur while processing a CLIENTCUTTEXT message with specially crafted payload message. A privileged guest user could use this flaw to crash th...

WordPress Easy Banners 1.4 Cross Site Scripting

Exploit Title : Wordpress easy-banners.1.4 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/easy-banners/ Software Link : http://downloads.wordpress.org/plugin/easy-banners.1.4.zip Date : 2014-06-28 Tested on : Windows 7 / Mozilla...

WordPress Custom Banners 1.2.2.2 Cross Site Scripting

Exploit Title : Wordpress custom-banners 1.2.2.2 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/custom-banners/ Software Link : http://downloads.wordpress.org/plugin/custom-banners.zip Date : 2014-06-28 Tested on : Windows 7 /...

WordPress Random Banner 1.1.2.1 Cross Site Scripting

Exploit Title : Wordpress random-banner.1.1.2.1 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/random-banner/ Software Link : http://downloads.wordpress.org/plugin/random-banner.1.1.2.1.zip Date : 2014-06-28 Tested on : Windows ...

Dradis v2.9 - Information Sharing For Security Assessments

Dradis is an open source framework to enable effective information sharing, specially during security assessments. It’s a tool specifically to help in the process of penetration testing. Penetration testing is about information: 1. Information discovery 2. Exploit useful information 3. Report the...

WordPress Construction Mode 1.8 Cross Site Scripting

Exploit Title : Wordpress wp-construction-mode.1.8 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/wp-construction-mode Software Link : http://downloads.wordpress.org/plugin/wp-construction-mode.1.8.zip Date : 2014-06-27 Tested o...

WordPress ml-slider 2.5 Cross Site Scripting

Exploit Title : Wordpress ml-slider 2.5 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/ml-slider Software Link : downloads.wordpress.org/plugin/ml-slider.2.5.zip Date : 2014-06-27 Tested on : Windows 7 / Mozilla Firefox Location...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand...

FIFA World Cup Security Team Accidentally Reveals their Wi-Fi Password

This FIFA World Cup, the security has been really going well and yet no calamitous incident reported so far, other than the security company who is responsible to keep an eye on the event’s security, itself tweeted a photograph of their state-of-the-art monitoring centre that exposed the World Cu...