DoS vulnerability in Adobe Flash Player (BSOD)

Hello 3APA3A! At beginning of this year I informed you about DoS vulnerability in Adobe Flash. Look at advisory http://seclists.org/fulldisclosure/2013/Apr/9 with exploit and video demonstration http://www.youtube.com/watch?v=xi29KZ3LD80 of previous DoS in Flash. Adobe hiddenly fixed it in the...

vBulletin 5 - 'index.php/ajax/api/reputation/vote?nodeid' SQL Injection (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection', 'Description' = %q This module exploits a SQL injection...

vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection

Exploit for php platform in category remote exploits require 'msf/core' class Metasploit3 'vBulletin index.php/ajax/api/reputation/vote nodeid Parameter SQL Injection', 'Description' = %q This module exploits a SQL injection vulnerability found in vBulletin 5 that has been used in the wild since...

UBUNTU-CVE-2013-4788

The PTRMANGLE implementation in the GNU C Library aka glibc or libc6 2.4, 2.17, and earlier, and Embedded GLIBC EGLIBC does not initialize the random value for the pointer guard, which makes it easier for context-dependent attackers to control execution flow by leveraging a buffer-overflow...

UBUNTU-CVE-2013-2899

drivers/hid/hid-picolcdcore.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDPICOLCD is enabled, allows physically proximate attackers to cause a denial of service NULL pointer dereference and OOPS via a crafted device...

CVE-2013-2162

Race condition in the post-installation script mysql-server-5.5.postinst for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive...

CVE-2013-2162

Race condition in the post-installation script mysql-server-5.5.postinst for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive...

Ubuntu 12.04 LTS : linux vulnerability (USN-1914-1)

Kees Cook discovered a format string vulnerability in the Broadcom B43 wireless driver for the Linux kernel. A local user could exploit this flaw to gain administrative privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CVE-2013-2162

Race condition in the post-installation script mysql-server-5.5.postinst for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and obtain sensitive...

Ubuntu 12.04 LTS : linux vulnerability (USN-1741-1)

Suleiman Souhlal, Salman Qazi, Aaron Durbin and Michael Davidson discovered a race condition in the Linux kernel's ptrace syscall. An unprivileged local attacker could exploit this flaw to run programs as an administrator. Note that Tenable Network Security has extracted the preceding description...

phpMyRecipes 1.2.2 SQL Injection

phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if ! $result = mysqlquery"SELECT...

phpMyRecipes 1.2.2 SQL Injection Vulnerability

phpMyRecipes version 1.2.2 remote SQL injection exploit. phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php...

PHPMyRecipes 1.2.2 - viewrecipe.php?r_id SQL Injection

PHPMyRecipes 1.2.2 - viewrecipe.php?rid SQL Injection phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid...

PHPMyRecipes 1.2.2 - 'viewrecipe.php?r_id' SQL Injection

phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if ! $result = mysqlquery"SELECT...

miniBB 3.x Addon preview Remote File Include Vulnerability

Exploit for php platform in category web applications Exploit Title: miniBB 3.x Addon preview Remote File Include Vulnerability Date: 2013-01-27 Author: bd0rk Vendor or Software Link: http://www.minibb.com/download.php?file=minibbpluginpreview Version: for miniBB 3.x Category:: web applications...

Wordpress Dynamic Font Replacement 1.3 plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Dynamic Font Replacement 1.3 plugin SQL Injection Vulnerability Date: 2013-01-27 Author: bd0rk Software Link: http://downloads.wordpress.org/plugin/dynamic-font-replacement-4wp.zip Version: 1.3 EN Category:: web...

counterSen 1.1.0 Admin Bypass Vulnerability

Exploit for php platform in category web applications = counterSen 1.1.0 Admin Bypass Vulnerability = Discovered by: bd0rk = Contact: bd0rkathackermail.com = Greetz: exploit-db.com, zone-h.org, Mandy, rgod, 1930 = Affected Software: counterSen 1.1.0 = Vendor: http://www.sensiebels.de/ = DownloaD:...

Ubuntu Update for linux USN-1683-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN16831.nasl 8542 2018-01-26 06:57:28Z teissa $ Ubuntu Update for linux USN-1683-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

tinymcpuk xss vulnerability

================================================================= tinymcpuk xss vulnerability ================================================================= Exploit Title: tinymcpuk xss vulnerability Google Dork: n/a Date: 1/12/2012 GMT+7 Exploit Author: eidelweiss @randyarios Vendor Homepage:...

Ubuntu Linux is a spyware ?

Creator of the GNU Project & Free Software Foundation's Leader Richard Stallman has called out Ubuntu as being "spyware". Why ? Because the operating system sends data to Ubuntu maker Canonical when a user searches the desktop. How ? Due to the Amazon search capabilities that have been integrated...