Samsung SmartViewer BackupToAvi 3.0 Remote Code Execution

var payloadlength = 15000; var arg1=1; var arg2=1; var arg3=1; //blank strings var junk = ""; var buf1 = ""; var buf2 = ""; //offset to SE is 156, initial analysis using metasploit cyclic pattern for i=0; i...

win32/7 x64 ultimate Add Admin ALI/ALI & Enable RDP Obfuscated Shellcode - 1218 bytes

Title: Obfuscated Shellcode Windows x64 1218 Bytes Add Administrator User/Pass ALI/ALI & Add ALI to RDP Group & Enable RDP From Registery & STOP Firewall & Auto Start terminal service length: 1218 bytes Date: 13 January 2015 Author: Ali Razmjoo tested On: Windows 7 x64 ultimate WinExec = 0x769e2c...

ALLMediaServer-0.8-SEH

Exploit Title: seh exploit, BOF Date: 04/07/2012 Exploit Author: motaz reda Software Link: http://allmediaserver.org/ Version: ALLMediaServer 0.8 Tested On: Windows 7 ultimate...

K7 Ultimate Security Detection (Windows SMB Login)

Detects the installed version of K7 Ultimate Security. The script logs in via smb, searches for K7 Ultimate Security in the registry and gets the version from SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

ProjectSend r561 Ultimate Cross Site Scripting / Path Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: ProjectSend - Cross Site Scripting & Full Path Disclosure Vulnerability's Date: 19/12/2014 Url Vendor: http://www.projectsend.org/ Vendor Name:...

ProjectSend r561 - Multiple Vulnerabilities

ProjectSend r561 - Multiple Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: ProjectSend r561 - Cross Site Scripting & Full Path Disclosure Vulnerability's Date: 19/12/2014 Url...

JourneyMap 5.0.0RC2 Ultimate Edition - DoS

Exploit for multiple platform in category dos / poc Exploit Title: JourneyMap Disk-space consumption exploit Date: 23Nov2014 Exploit Author: CovertCodes Vendor Homepage: http://journeymap.techbrew.net/ Software Link: http://journeymap.techbrew.net/download/ Version: 5.0.0RC2 Ultimate Edition Test...

xEpan 1.0.4 - Multiple Vulnerability

Exploit for php platform in category web applications Exploit Title: Multiple Vulnerability xEpan 1.0.4 Google Dork: not yet Date: 2014-11-27 Exploit Author: Parikesit , Kurawa In Disorder Vendor Homepage: http://xepan.org Software Link: http://www.xepan.org/index.php?subpage=download Version:...

Information disclosure

The Ultimate Christian Radios aka com.ngg.ultimatechristianradios application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7716

CVE-2014-7716 affects the Android app “The Ultimate Christian Radios” (package com.ngg.ultimatechristianradios) version 1.0.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a cra...

CVE-2014-6737

The CVE-2014-6737 entry concerns the Android app “The Ultimate Target-Armored Sniper” (aka air.wood.liame.ultimatetarget), version 1.0.1. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and exfiltrate se...

CVE-2014-6737

The Ultimate Target-Armored Sniper aka air.wood.liame.ultimatetarget application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

TinyMCE 3.5 - swfupload Cross-Site Scripting

The Ultimate TinyMCE WordPress plugin was affected by a swfupload Cross-Site Scripting security vulnerability...

WP Ultimate Email Marketer - Multiple Vulnerabilities

The wp-ultimate-email-marketer WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Ultimate Auction 1.0 - Cross-Site Request Forgery (CSRF)

The Ultimate WordPress Auction Plugin WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

百度浏览器海外版（Spark Browser） v26.5.9999.3511 - Remote Stack Overflow Vulnerability (DoS)

Vendor: Baidu, Inc. Product web page: http://www.baidu.com Affected version: 26.5.9999.3511 Summary: Spark Browser is a free Internet browser with very sharp UIs and cool utilities. It's based on the Chromium technology platform, giving it fast browsing capabilities. Desc: Spark Browser version...

CVE-2014-4600

Multiple cross-site scripting XSS vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 listname or 2 contact parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in contact/edit.php in the WP Ultimate Email Marketer plugin 1.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 listname or 2 contact parameter...

CVE-2014-4600

Summary: The WP Ultimate Email Marketer WordPress plugin (

Ultimate Bulletin Board 6.0/6.2 UBBER Cookie HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been reported that a remote...