2435 matches found
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ipa-server-2.2.0 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the accessibility of protected information
The net-snmp-5.3.2.2 package of the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
53KF某处一个注入点
简要描述： 某处的一个注入 详细说明： 存在注入的地址: http://www10.53kf.com/zdydbgg2.php?styleid=106098168&companyid=72067196&dbggtype=2 sqlmap identified the following injection points with a total of 0 HTTPs requests: --- Place: GET Parameter: styleid Type: boolean-based blind Title: AND boolean-based blind - WHERE or...
Apple Mac OSX 10.10 - BlueTooth DispatchHCICreateConnection Crash (PoC)
Apple Mac OSX 10.10 - BlueTooth DispatchHCICreateConnection Crash PoC / crash-issue1.c: Written for Mac OS X Yosemite 10.10 by @rpaleari and @joystick. Exploits a missing check in IOBluetoothHCIUserClient::DispatchHCICreateConnection causing a panic. gcc -Wall -o crash-issue1,.c -framework IOKit ...
Apple Mac OSX 10.9.x - sysmond XPC Privilege Escalation
/ Source: https://code.google.com/p/google-security-research/issues/detail?id=121 / / tested on OS X 10.9.5 - uses some hard-coded offsets which will have to be fixed-up for other versions! this poc uses liblorgnette to resolve some private symbols; grab the code from github: git clone...
Winamp-5.572---Local-BoF
Exploit Title: Winamp v5.572 Local BoF Exploit Win7 ASLR and DEP Bypass Date: June 26, 2010 Author: Node Software Link: http://download.nullsoft.com/winamp/client/winamp5572fullemusic-7plusen-us.exe Badchars: \x00\xff\x5c\x2f\x0a\x0d\x20 version = "Winamp 5.572" rop = "A" 540 Offset rop +=...
Free-MP3-CD-Ripper-1.1
Exploit Title : Free MP3 CD Ripper 1.1 Local Buffer Overflow Software : http://www.brothersoft.com/free-mp3-cd-ripper-84543.html Version : 1.1 Tested on : Windows xp sp3 en Date : 27/08/2011 Author : X-h4ck Website : http://www.pirate.al , http://theflashcrew.blogspot.com Email : [email protected]...
大米CMS某处SQL盲注2
简要描述： 大米CMS某处SQL盲注第二发，可直接拖库 详细说明： 文件/Web/Lib/Action/ApiAction.class.php //万能获取数据接口 function ajaxarclist $prefix = !empty$REQUEST'prefix'?bool$REQUEST'prefix':true; //表过滤防止泄露信息,只允许的表 if!inarray$REQUEST'model',array'article','type','ad','label','link'exit; if!empty$REQUEST'model' if$prefix == true...
VoIP Penetration Testing Kit: Viproy
Viproy Voip Pen-Test Kit provides penetration testing modules for VoIP networks. It supports signalling analysis for SIP and Skinny protocols, IP phone services and network infrastructure. Viproy 2.0 is released at Blackhat Arsenal USA 2014 with TCP/TLS support for SIP, vendor extentions support,...
Django: CSRF protection bypass on any Django powered site via Google Analytics
I shall explain all the steps to create the final PoC in order to be more clear. Part 1. Cookie Injection via Google Analytics --------------------- Reported to Google, rewarded, still working Google Analytics sets the cookie to track user source:...
CVE-2014-2227
creationtimestamp| type| source ---|---|--- 2014-07-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39268...
PhpWebGallery 1.3.4/1.5.1 comments.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15837/info PhpWebGallery is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attack...
lftp <= 2.6.9 - Remote Stack based Overflow Exploit
No description provided by source. / lftp remote stack-based overflow exploit by Li0n7 voila fr Vulnerability discovered by Ulf Harnhammar Ulf.Harnhammar.9485 student uu se Lftp versions later than 2.6.10 are prone to a remotly exploitable stack-based overflow in trynetscapeproxy and trysquideplf...
OpenDocMan 1.2.5 user.php XSS
No description provided by source. source: http://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...
PHP <= 5.3.5 socket_connect() Buffer Overflow Vulnerability
No description provided by source. ?php // Credit: Mateusz Kocielski, Marek Kroemeke and Filip Palian // Affected Versions: 5.3.3-5.3.6 echo + CVE-2011-1938; echo + there we go...\n; define'EVILSPACEADDR', \xff\xff\xee\xb3; define'EVILSPACESIZE', 102410248; $SHELLCODE =...
Embedthis Goahead 3.1.3-0 Denial Of Service
Title: Embedthis Goahead Webserver multiple DoS vulnerabilities. Author: 0in Maksymilian Motyl Date: 18.02.2014 Version: 3.1.3-0 Software Link: http://embedthis.com/products/goahead/ Download: https://github.com/embedthis/goahead Tested on: Linux x32 Description: "GoAhead is embedded in hundreds ...
CVE-2014-1214
creationtimestamp| type| source ---|---|--- 2013-12-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39088 2024-02-13 13:31:19+00:00| seen| https://t.me/ctinow/183802...
JBoss AS Attacks Up Since Exploit Code Disclosed
Attackers are exploiting a two-year-old vulnerability in JBoss Application Servers that enables a hacker to remotely get a shell on a vulnerable webserver. The number of infections has surged since exploit code called pwn.jsp was publicly disclosed Oct. 4. Researchers at Imperva said that a numbe...