Aviosoft-Digital

Aviosoft 1.x Win 7 and XP SP2/SP3 English Buffer Overflow Stack Overflow ToDo: Add Remote ToDo: Test Vulnerable Targets import struct totalsize = 5000 junk = 'A' 872 align = 'B' 136 aslr, dep bypass using pushad technique seh = struct.pack' ebx rop+= struct.pack'L', 0x640203fc ADD EAX,5EC68B64 RE...

WhiteHouse Gov Service - Persistent Web Vulnerabilities

Document Title: =============== WhiteHouse Gov Service - Persistent Web Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/314.wmv View: http://www.youtube.com/watch?v=dsxyQLCPmE Release Date: ============= 2011-11-06 Vulnerability Laboratory ID...

LightNEasy v2.3.3 - Local File Include Vulnerability

Document Title: =============== LightNEasy v2.3.3 - Local File Include Vulnerability References Source: ==================== LightNEasy v2.3.3 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 50 Product & Service Introduction:...

StarMoney Banking Software - Multiple Vulnerabilities [HD]

Document Title: =============== StarMoney Banking Software - Multiple Vulnerabilities HD References: =========== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-31 Vulnerability Laboratory ID...

BitDefender IS2011 - FV Buffer Overflow Vulnerability

Document Title: =============== BitDefender IS2011 - FV Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=147 Release Date: ============= 2011-08-29 Vulnerability Laboratory ID VL-ID: ==================================== 147...

Facebook SmarterMind - SQL Injection Vulnerability

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability Release Date: ============= 2011-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 44 Product & Service Introduction: =============================== This application is currently includ...

Facebook SmarterMind - SQL Injection Vulnerability

Document Title: =============== Facebook SmarterMind - SQL Injection Vulnerability Release Date: ============= 2011-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 44 Product & Service Introduction: =============================== This application is currently includ...

DB S Bahn Muenchen - SQL Injection Vulnerability

Document Title: =============== DB S Bahn Muenchen - SQL Injection Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 167 Product & Service Introduction: =============================== Official Website of Deutsche Bahn...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft MPEG Layer-3 Audio - Stack Overflow (MS10-026) (Metasploit)

$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

This module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory techniqu...

HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass

Document Title: =============== HTC HD2 Mobile Phone - Lock Screen Keyboard Bypass Release Date: ============= 2011-07-19 Vulnerability Laboratory ID VL-ID: ==================================== 185 Product & Service Introduction: =============================== Der HTC HD2 liefert Ihnen ein...

TRUSTe Website - Remote SQL Injection Vulnerability

Document Title: =============== TRUSTe Website - Remote SQL Injection Vulnerability Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 188 Product & Service Introduction: =============================== TRUSTe is a company based in San...

Bank of America Website - Multiple Web Vulnerabilities

Document Title: =============== Bank of America Website - Multiple Web Vulnerabilities Release Date: ============= 2011-07-15 Vulnerability Laboratory ID VL-ID: ==================================== 10 Product & Service Introduction: =============================== Official Website of the Bank of...

Collabtive Management v0.61 - Multiple Web Vulnerabilities

Document Title: =============== Collabtive Management v0.61 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-10 Vulnerability Laboratory ID VL-ID: ==================================== 136 Product & Service Introduction: =============================== Unlimited projects,...

Attackers Exploiting Critical Flash Bug Via Drive-By Download

Attackers have begun actively exploiting the critical Adobe Flash vulnerability that Adobe patched last week, using rigged Web pages and phishing techniques to compromise vulnerable machines. The attack code is being hosted on a number of sites around the Web right now, researchers said. Adobe...

myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique

myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique Software: myBloggie 2.1.6 Severity: High Author: Robin Verton info at robinverton dot de Date: Jun. 12 2011 Vendor: http://mybloggie.mywebland.com/ Software Description: "myBloggie is considered one of the most simple,...

Web Browser - Remote Exploitation Session

Document Title: =============== Web Browser - Remote Exploitation Session References: =========== Download: http://www.vulnerability-lab.com/resources/videos/14.wmv View: http://www.youtube.com/watch?v=zSFJw9PMHU Release Date: ============= 2011-06-18 Vulnerability Laboratory ID VL-ID:...

Remote Procedure Call Service - MSF Buffer Overflow

Document Title: =============== Remote Procedure Call Service - MSF Buffer Overflow References: =========== Download: http://www.vulnerability-lab.com/resources/videos/24.wmv View: http://www.youtube.com/watch?v=VD9-mj6Y5BI Release Date: ============= 2011-06-10 Vulnerability Laboratory ID VL-ID:...

Anonymous Vs Sony : Word By Word Q/A b/w Reporters and Sony during Conference !

Anonymous Vs Sony : Word By Word Q/A b/w Reporters and Sony during Conference ! Q. The accuracy of approximately 10 million credit flow A. There is no firm evidence of leakage. Cannot say wether a leak or not. There is no report so far. Q. prospect of resuming services. A. We want to restart the...