1 Click Audio Converter v2.3.6 - Activex Buffer Overflow

Document Title: =============== 1 Click Audio Converter v2.3.6 - Activex Buffer Overflow References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1505 View Video: https://www.youtube.com/watch?v=Ad0wHlHz0KU Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1504 Releas...

Using Toys to Open a Fixed-Code Garage Door in 10 Seconds

It may be time to upgrade your garage door opener. Security researcher Samy Kamkar has developed a new technique that enables him to open almost any garage door that uses a fixed code–and he implemented it on a $12 child’s toy. The attack Kamkar devised, known as OpenSesame, reduces the amount of...

Apache Jackrabbit WebDAV XXE Exploit

Exploit for java platform in category web applications !/usr/bin/env python """ Exploit Title: Jackrabbit WebDAV XXE Date: 25-05-2015 Software Link: http://jackrabbit.apache.org/jcr/ Exploit Author: Mikhail Egorov Contact: 0ang3el gmail com Website: http://0ang3el.blogspot.com CVE: CVE-2015-1833...

APT Group Embeds C&C Data on TechNet Pages

The so-called Deputy Dog APT group has surfaced again with a means of keeping its command and control servers under wraps that involves Microsoft’s TechNet online resources. New research published last week by Microsoft and FireEye revealed targeted attacks against organizations have been...

iClassSchedule 1.6 Script Insertion

Document Title: =============== iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1494 Release Date: ============= 2015-05-13 Vulnerability Laboratory ID VL-ID:...

Web India Solutions CMS 2015 - SQL Injection Vulnerability

Document Title: =============== Web India Solutions CMS 2015 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1495 Release Date: ============= 2015-05-13 Vulnerability Laboratory ID VL-ID: ====================================...

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-11 Vulnerability Laboratory ID VL-ID:...

PDF Converter & Editor 2.1 iOS - File Include Vulnerability

Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability Laboratory ID VL-ID: ===================================...

PDF Converter & Editor 2.1 iOS - Local File Inclusion

Document Title: =============== PDF Converter & Editor 2.1 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1480 Release Date: ============= 2015-05-06 Vulnerability Laboratory ID VL-ID: ===================================...

Dyre Banking Trojan Avoids Sandbox Detection

A number of unidentified commercial and freely available sandboxes fail to detect a new version of the Dyre banking Trojan, which was recently blamed for more than $1 million in losses to financial institutions and enterprises. The new strain of Dyre, also known as Dyreza, uses a fairly new...

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities

Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...

Shopify: Content Spoofing

Hi, Content Spoofing almost all in the myshopify admin account. Content Spoofing an attack technique used to trick a user into thinking that fake web site content is legitimate data. https://YOURSHOP.myshopify.com/admin?error=CONTENT SPOOFING...

SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities

Document Title: =============== SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1314 Release Date: ============= 2015-03-23 Vulnerability Laboratory ID VL-ID: ==================================== 1314...

Huawei SEQ Analyst XXE Injection

Document Title: ============ Huawei SEQ Analyst - XML External Entity Injection XXE Release Date: =========== 15 Apr 2015 CVE-ID: ======= CVE-2015-2346 Product & Service Introduction: ======================= SEQ Analyst is a platform for business quality monitoring and management by individual us...

Windows Gather Local SQL Server Hash Dump

This module extracts the usernames and password hashes from an MSSQL server and stores them as loot. It uses the same technique in mssqllocalauthbypass. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

Hacking Air-Gapped Computers Using Heat

An air-gapped computer system isolated from the Internet and other computers that are connected to external networks believes to be the most secure computers on the planet -- Yeah?? You need to think again before calling them 'safe'. A group of Israeli security researchers at the Cyber Security...

Microsoft released for the FREAK vulnerability and Stuxnet virus update-vulnerability warning-the black bar safety net

On Tuesday, Microsoft released for the FREAK vulnerability and Stuxnet（earthquake network virus security update. FREAK harm widely The FREAK vulnerability is not only present in the windows, A days ago Apple has also released IOS and OSX on the FREAK updates. Back in March three, Google has also...

Photo Manager Pro v4.4.0 iOS - File Include Vulnerability

Document Title: =============== Photo Manager Pro v4.4.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1445 Release Date: ============= 2015-03-12 Vulnerability Laboratory ID VL-ID: ====================================...

Domain Shadowing Latest Angler Exploit Kit Evasion Technique

The Angler Exploit Kit continues to evolve at an alarming rate, seamlessly adding not only zero-day exploits as they become available, but also a host of evasion techniques that have elevated it to the ranks of the more formidable hacker toolkits available. Researchers at Cisco’s Talos intelligen...

Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability

Document Title: =============== Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1441 Release Date: ============= 2015-02-27 Vulnerability Laboratory ID VL-ID: ==================================...