Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash (PoC)

Microsoft Windows Media Player 10 - .avi Integer Division By Zero Crash PoC !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : [email protected] Greetings to all moroccan researchers and white hats . Title ...

WordPress Wp-TopBar 4.02 CSRF / XSS

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...

WordPress Plugin wp-topbar 4.02 - Multiple Vulnerabilities

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

Barracuda SSL VPN - Input Filter Bypass Vulnerability

Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...

Barracuda SSL VPN - Input Filter Bypass Vulnerability

Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...

Trivial Password Flaw Leaves MySQL Databases Exposed

There is a trivially exploitable vulnerability in MySQL that enables an attacker to gain root access to the database server. The bug, which recently was patched, stems from an error in the way that MySQL and MariaDB handle passwords, giving an attacker a chance of getting root access by supplying...

IBM Rational AppScan企业平台验证代码执行漏洞

Bugtraq ID: 53247 CVE ID：CVE-2012-0736 IBM Rational AppScan是一款Web应用的安全测试工具，可以在开发生命周期中进行自动化动态和静态安全漏洞扫描。 IBM Rational AppScan企业版在某些配置下创建扫描作业时存在错误，允许远程攻击者执行任意代码。诱使用户扫描恶意WEB站，可在目标用户系统上执行任意代码。 0 IBM Rational Policy Tester 8.5 IBM Rational AppScan Reporting Console 8.0.1.1 IBM Rational AppScan Reportin...

CRUNCH TV SHOW - Live Stream & Security Videos

Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...

HITB2011KUL - Skype Vulnerabilities 0Day Exploitation

Document Title: =============== HITB2011KUL - Skype Vulnerabilities 0Day Exploitation References: =========== Download: http://www.vulnerability-lab.com/resources/videos/394.wmv View: http://www.youtube.com/watch?v=K4g86hVQ1wk Release Date: ============= 2012-03-30 Vulnerability Laboratory ID...

CoffeeCup Mail Testing Authentication Bypass

Exploit Title: CoffeeCup Mail Tester Bypass Authentication Date: 23-feb-2012 Author: Benjamin Oviedo aka-- H4CKULT1M4T3 mail: [email protected] Software Link: http://www.coffeecup.com Version: Tested on: php Product Description: / CC Mail Tester Written by: CoffeeCup Software's David R. A sma...

Penetration Tester Productivity Tool: MagicTree

MagicTree is a penetration tester productivity tool. It is designed to allow easy and straightforward data consolidation, querying, external command execution and yeah! report generation. In case you wonder, “Tree” is because all the data is stored in a tree structure, and “Magic” is because it i...

Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

Mambo N-Gallery SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-gallery SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-gallery Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Namskeid Cross Site Scripting

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-namskeid XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-namskeid Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Myndir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Skyrslur Cross Site Scripting

------------------------------------------------------------------------------------------------------------------------------- Exploit Title: Mambo Component comn-skyrslur XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-skyrslur Date: 01/09/2011 Author: CoBRa21...

Mambo N-Press SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-press SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-press Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo AHS Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comahsshop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comahsshop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-shop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-shop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...