T-dah Webmail 3.2.0 Cross Site Scripting

!/usr/bin/python ''' Exploit Title: T-dah Webmail Multiple Stored XSS issues. Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://tdah.us/ Software Link:...

globalSCAPE CuteZIP Stack Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex/zip' class Metasploit3 'globalSCAPE CuteZIP...

Small nose article management system vulnerability and shell-vulnerability warning-the black bar safety net

From the A5 site on just under an asp of built Station system, “small nose article management system” Open later discover to do good. Addresses in the background/admin/login. asp default tried universal password ‘or’='or’ found turned out to go in. Take a look at the source code ① Login. asp file...

Small nose article management system vulnerability-vulnerability warning-the black bar safety net

From the A5 site on just under an asp of built Station system, “small nose article management system” Open later discover to do good. Addresses in the background/admin/login. asp default tried universal password 'or'='or' found turned out to go in. Take a look at the source code ① Login. asp file...

AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'AdminStudio LaunchHelp.dll ActiveX...

UBUNTU-CVE-2012-3400

Heap-based buffer overflow in the udfloadlogicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service system crash or possibly have unspecified other impact via a crafted UDF filesystem...

Irfanview JPEG2000 4.3.2.0 jp2 Stack Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Irfanview JPEG2000 %q This modul...

The integrity of the enterprise 2. 0 backend login universal password vulnerability-vulnerability warning-the black bar safety net

Background/ ManageAdmin/ManageLogin. asp The vulnerability can be used universal password login 'or'='or' 'or'='or' Get a webshell directly on in the picture there, you know. Google keywords: inurl:/Product/Product. asp? CateID Actual URL: http://www.hnvalve.com/ManageAdmin/AdminManage.asp...

libvirt: address bus= device= when identicle vendor ID/product IDs usb devices attached are ignored

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices...

DEBIAN-CVE-2012-2693

libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local users to access unintended USB devices...

TFM MMPlayer - '.m3u' / '.ppl' Local Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'TFM MMPlayer...

Immunity Canvas: JAVA_ATOMICREFERENCEARRAY

Name| javaAtomicReferenceArray ---|--- CVE| CVE-2012-0507 Exploit Pack| CANVAS Description| Java AtomicReferenceArray Type Confusion Sandbox Bypass Notes| CVE Name: CVE-2012-0507 VENDOR: Sun Notes: There is a Type Confusion vulnerability in java.util.concurrent.atomic.AtomicReferenceArray class...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

DEBIAN-CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

Design/Logic Flaw

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

PYSEC-2012-14

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

PYSEC-2012-14

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

CVE-2012-2921

Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...

CVE-2012-2921

Universal Feed Parser (python-feedparser) vulnerable to memory‑based DoS via a crafted non‑ASCII XML ENTITY declaration in documents; affected versions before 5.1.2. Root cause is parsing/expansion of a malicious XML ENTITY, enabling remote attacker to exhaust memory. Public references note the i...