Sikkim Manipal University / Calcutta University Vulnerabilities

Topic: a Sikkim Manipal University portal is vulnerable to SQL Injection attack. b Calcutta University website is spreading malware via iframe code insertion. Details: a About the university: Sikkim Manipal is one of the largest private University in India. The Institute attracts students from al...

PHP-Fusion Remote Command Execution Vulnerability

Exploit for php platform in category web applications ================================================= PHP-Fusion Remote Command Execution Vulnerability ================================================= Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViR...

PHP-Fusion Remote Command Execution

Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...

PHP-Fusion - Remote Command Execution

Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...

Golf Club SQL Injection

Exploit Title: Golf Club SQL injection Vulnerability Date: 30/06/2010 Author: JaMbA Script url: http://www.internetdm.co.uk/site/pages.php?fid=0,1,362 Version: N/A Tested on: Windows CVE : EXPL0!T http://server/path/pages.php?fid=0,13&ppid=38SQL Greetz to : Alnjm33-virus-pal -g3n1ux -...

Allulu Uploader Files Shell Upload

Exploit Title: Allulu Uploader Files Remote Shell Upload Vulnerability Date: 27/06/2010 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script url: http://www.allulu.org/vb/showthread.php?t=1395 Tested on: Windows Team hacker:ViRuS Qalaa-HaCkEr aRaR-ViRu...

Unfixed XSS vulnerability at www.baquia.com

Security researcher Virus Root, has submitted on 28/06/2010 a cross-site-scripting XSS vulnerability affecting www.baquia.com, which at the time of submission ranked 57346 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is...

Allulu Uploader Files Remote Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================================= Allulu Uploader Files Remote Shell Upload Vulnerability ======================================================= Exploit Title: Allulu Uploader Files Remote Shell Upload Vulnerability Date...

Speedy 1.0 - Arbitrary File Upload

Speedy 1.0 - Arbitrary File Upload Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM :::::::::::::::::::::::::...

Speedy 1.0 - Arbitrary File Upload

Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.speedy-up.com/ Tested on: Windows Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSAX-MaN HaCk3r TeaM ::::::::::::::::::::::::: =================Exploit================= DorK:No DorK ...

AbleDating script - SQL Injection

AbleDating script - SQL Injection Exploit Title: AbleDating script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...

Malware Found on Lenovo Driver Download

The driver download portal of hardware manufacturer Lenovo temporarily deployed malicious code. Various virus scanners issued alerts about a Java-based Trojan downloader or dropper. Read the full article. The H Security...

Multiple Vendor AV Gateway Virus Detection Bypass (CVE-2005-0218)

A virus detection bypass vulnerability has been found in multiple Anti-virus Gateway products. The anti-virus scanning mechanisms of affected products encoded data embedded in an HTML document using the data: scheme. An attacker can exploit this flaw to deliver malicious content in HTML documents...

Sophos Anti-Virus NtQueryAttributesFile()系统调用本地权限提升漏洞

BUGTRAQ ID: 40715 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos杀毒软件所使用的savonaccessfilter.sys过滤器驱动没有正确地处理NtQueryAttributesFile系统调用参数参数，本地用户可以通过提交特制的IOCTL请求以ring 0权限执行任意代码。 Sophos Anti-Virus 7.6.20 厂商补丁： Sophos ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-2308

Unspecified vulnerability in the filter driver savonaccessfilter.sys in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function...

Design/Logic Flaw

Unspecified vulnerability in the filter driver savonaccessfilter.sys in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function...

CVE-2010-2308

CVE-2010-2308 : A local privilege-escalation in Sophos Anti‑Virus affects the filter driver savonaccessfilter.sys prior to version 7.6.20. The root cause is an unspecified flaw that lets local users gain kernel/privilege level access by passing crafted arguments to NtQueryAttributesFile. Affected...

CVE-2010-2308

Unspecified vulnerability in the filter driver savonaccessfilter.sys in Sophos Anti-Virus before 7.6.20 allows local users to gain privileges via crafted arguments to the NtQueryAttributesFile function...

Sophos Anti-Virus privilege escalation

Memory corruptio on system calls processing...

TPTI-10-03: Sophos Anti-Virus SAVOnAccessFilter Local Privilege Escalation Vulnerability

TPTI-10-03: Sophos Anti-Virus SAVOnAccessFilter Local Privilege Escalation Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-03 June 9, 2010 -- Affected Vendors: Sophos -- Affected Products: Sophos Sophos Anti-Virus -- Vulnerability Details: This vulnerability allows local attackers t...