Joomla Youtube Gallery Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh email protected Vendor Homepage:...

Joomla Youtube Gallery 4.1.7 SQL Injection

Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh [email protected] Vendor Homepage: http://www.joomlaboat.com/youtube-gallery Software Link:...

Updated libxfont packages fix security vulnerabilities

Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges CVE-2014-0209. Ilja van Sprundel discovered that libXfont incorrectly handled...

Soritong 1.0 - Universal BOF (Python)

No description provided by source. Soritong MP3 Player 1.0 Universal BOF ! Greetz to Peter Van Eeckhoutte and Corelanc0d3r team ;- Discovered by : Stack Written by : Jacky I searched for a Python Edition for this Vulnerability but i haven't found any Python written exploit So i decided to give it...

WORK System E-Commerce <= 3.0.1 - Remote Include Vulnerability

No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...

Unreal Tournament Remote Buffer Overflow Exploit (SEH)

No description provided by source. Unreal Tournament Remote Buffer Overflow Exploit SEH Windows Discovered by: Luigi Auriemma http://aluigi.altervista.org/adv/unsecure-adv.txt Coded By: Fulcrum 08/02/2011 Patch: http://www.unrealadmin.org/forums/showthread.php?t=15616 Vulnerable: all ut99 servers...

Joomla Joaktree Component 1.0 - SQL Injection Vulnerability

No description provided by source. / ! Joomla! Joaktree component SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information +...

Joomla Component JPad 1.0 - SQL Injection Vulnerability (postauth)

No description provided by source. Joomla Component JPad Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4atgmail.com Greetz : All friends & muslims HaCkeRs : ScriptName: Joomla ComponentName: JPad DORK: allinurl:comjpad P.O.C:...

Mini-stream Ripper 3.0.1.1 - (.pls) Universal BOF (Perl)

No description provided by source. Mini-Stream Ripper v3.0.1.1 Universal BOF !!! Discovered by mrme !!! Coded and Written by Jacky Greetz to Peter Van Eeckhoutte and all Corelanc0d3r team :D This time i exploited the program and i used as RET address a Universal one from MSRcodec00.dll And i...

RM Downloader .m3u BOF (SEH)

No description provided by source. !/usr/bin/perl -w Author: Jacky Version: 3.0.2.1 Tested on: Windows XP SP2 RM Downloader m3u Buffer Overflow SEH Perl Edition Discovered by :: Peter Van Eeckhoutte VERY BIG GREETZ TO HIM ;- Written by Jacky All Greetz for Peter Van Eeckhoutte and Corelan Team !!...

Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2211-1 advisory. Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to...

Sercomm TCP/32674 - Backdoor Reactivation

/ PoC to reactivate Sercomm TCP/32674 backdoor See http://www.synacktiv.com/ressources/TCP32764backdooragain.pdf Eloi Vanderbeken - Synacktiv THIS SOFTWARE IS PROVIDED BY SYNACKTIV ''AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF...

Captcha Bypass in extension "powermail" (powermail)

It has been discovered that the extension "powermail" powermail is susceptible to Captcha Bypass Release Date: April 10, 2014 Bulletin update: September 18, 2014 added CVE Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions:...

Ubuntu: Security Advisory (USN-1862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass

This module will allow you to add Time-based One-time Password Algorithm also called "Two Step Authentication" or "Multi-Factor Authentication" support to user logins. It works with Google's Authenticator app system and support most if not all OATH based HOTP/TOTP systems. Accidental removal of...

SAP SOAP RFC - SXPG_COMMAND_EXECUTE Remote Command Execution (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ This module is based on, inspired by, or is a port of a...

SA-CORE-2012-004 - Drupal core - Multiple vulnerabilities

Multiple vulnerabilities were fixed in the supported Drupal core versions 6 and 7. Access bypass User module search - Drupal 6 and 7 A vulnerability was identified that allows blocked users to appear in user search results, even when the search results are viewed by unprivileged users. This...

SAP /sap/bc/soap/rfc SOAP Service TH_SAPREL Function Information Disclosure

This module attempts to identify software, OS and DB versions through the SAP function THSAPREL using the /sap/bc/soap/rfc SOAP service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspire...

SAP SOAP Service RFC_PING Login Brute Forcer

This module attempts to brute force SAP username and passwords through the /sap/bc/soap/rfc SOAP service, using RFCPING function. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, o...

SA-CONTRIB-2012-138 - Exposed Filter Data - Cross Site Scripting (XSS)

The Exposed Filter Data facilitates displaying data posted to Views via an exposed filter. The module does not properly sanitize user-supplied data prior to output, leading to a Cross-Site Scripting XSS vulnerability. CVE: Requested Versions affected Exposed Filter Data 6.x-1.x versions prior to...