HITB2011KUL - Attacking Privacy of Social Network Users

Document Title: =============== HITB2011KUL - Attacking Privacy of Social Network Users References: =========== Download: http://www.vulnerability-lab.com/resources/videos/425.wmv View: http://www.youtube.com/watch?v=xGuV0Om67n8 Release Date: ============= 2012-02-05 Vulnerability Laboratory ID...

OSCommerce v3.0.2 - Persistent Cross Site Vulnerability

Document Title: =============== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020057 ID: CNNVD-201202-057 Release Date: ============= 2012-02-01 Vulnerability Laboratory ID VL-ID:...

Tracker Software pdfSaver ActiveX 3.60 (pdfxctrl.dll) Stack Buffer Overflow (SEH)

Summary PDF-Saver Technology is a unique new feature of PDF-XChange software which allows printing jobs to be combined prior to the final PDF file being generated - e.g. to join 3 pages of Excel spreadsheet, 5 slides of PowerPoint presentation and 10 pages of Word document into one PDF document...

MS12-004 midiOutPlayNextPolyEvent Heap Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

HP OpenView Network Node Manager - 'ov.dll' _OVBuildPath Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HEAD', :uri =...

appRain CMF 0.1.5 - 'Uploadify.php' Unrestricted Arbitrary File Upload

?php / --------------------------------------------------------------------- appRain CMF = 0.1.5 uploadify.php Unrestricted File Upload Exploit --------------------------------------------------------------------- author............: Egidio Romano aka EgiX mail..............: n0b0d13satgmaildotco...

Warm up the keyboard, Its time for February The Hacker News Magazine !

Warm up the keyboard, Its time for February The Hacker News Magazine ! Warm up the keyboard, hack into the internet security of your mind and help us fill the February The Hacker News Magazine with fun, interesting and educational web security info. Our readers love to see what you are up to and...

Apache Struts 2 Developer Mode OGNL Execution

This module exploits a remote command execution vulnerability in Apache Struts 2. The problem exists on applications running in developer mode, where the DebuggingInterceptor allows evaluation and execution of OGNL expressions, which allows remote attackers to execute arbitrary Java code. This...

Infoproject Business Hero Multiple Vulnerabilities

Exploit for php platform in category web applications Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first...

Ipswitch TFTP Server Directory Traversal Vulnerability

No description provided by source. Title : Ipswitch TFTP Server Directory Traversal Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.whatsupgold.com/index.aspx Advisory : http://secpod.org/blog/?p=424...

Barracuda Web Filter 910 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Web Filter 910 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=29 CNNVD-201112-010 Release Date: ============= 2011-12-02 Vulnerability Laboratory ID VL-ID:...

Manx 1.0.1 Cross Site Scripting

Manx cms.xml 1.0.1 ajaxgetfilelisting.php Multiple XSS Vulnerabilities Vendor: Paul Jova Product web page: http://manx.jovascript.com Affected version: 1.0.1 Summary: Manx is a Content Management System that uses xml text files to store the page contents, instead of a mysql database. Desc: Input...

FreeWebShop 2.2.9 R2 - 'ajax_save_name.php' Remote Code Execution

get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45. $selectedDocuments$key = $POST'value'; 46. $sessionAction-set$selectedDocuments; 47. 48. 49...

PT-2011-38: URL redirector abuse in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an URL redirector abuse in Citrix XenServer Virtual Switch Controller. URL redirector GET parameter lastpage of the login page allows forwarding to an arbitrary location. It allows an attacker to conduct a phishing attack. How to fix Update your software up...

aidiCMS 3.55 - 'ajax_create_folder.php' Remote Code Execution

?php / -------------------------------------------------------------------- aidiCMS v3.55 ajaxcreatefolder.php Remote Code Execution Exploit -------------------------------------------------------------------- author............: Egidio Romano aka EgiX mail..............: n0b0d13satgmaildotcom...

PHPMyFAQ 2.7.0 - ajax_create_folder.php Remote Code Execution

PHPMyFAQ 2.7.0 - ajaxcreatefolder.php Remote Code Execution ?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------...

ZenPhoto 1.4.1.4 - 'ajax_create_folder.php' Remote Code Execution

?php / -------------------------------------------------------------------------- Zenphoto = 1.4.1.4 ajaxcreatefolder.php Remote Code Execution Exploit -------------------------------------------------------------------------- author............: Egidio Romano aka EgiX mail..............:...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...