Microsoft Internet Explorer 11 - WeakMap Integer Divide-by-Zero

var a = new WeakMap; a.pushnew WeakMap; a1.seta0, a1; a0.deletea0; ,1::TryGetValueAndRemove+0x1f: 668756f0 f736 div eax,dword ptr esi ds:002b:04598cc8=00000000 --...

NeginGroup Cross Site Scripting / SQL Injection

Title: Sql Injection / Xss on NeginGroup CMS + Date: 2014/5/29 + Author: Hekt0r + Vendor Homepage: www.NeginGroup.com + Tested on: Windows 7 & Kali Linux + Vulnerable File: /viewpageone.php + Dork : intext:www.NeginGroup.com inurl:/viewpageone.php?v= Exploitation: + Exploit Sql Injection:...

5 on Microsoft patch KB2871997 and KB2928120 exploit analysis-exploit warning-the black bar safety net

5 month, Microsoft in 1 3, released monthly security update, which has KB2871997 and KB2928120 two Knowledge Base articles Knowledgeased and KB2871997 is not even a Security Bulletin to. For either as the attack of the penetration tester or as a defense of the Administrators ignore these two...

WordPress bib2html 0.9.3 Cross Site Scripting Vulnerability

WordPress bib2html plugin version 0.9.3 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress...

WordPress Conversion Ninja Cross Site Scripting Vulnerability

WordPress Conversion Ninja plugin suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. ++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date:...

Web Terra 1.1 - books.cgi Remote Command Execution

Web Terra 1.1 - books.cgi Remote Command Execution + Remote Comand Execution on books.cgi Web Terra v. 1.1 + Date: 21/05/2014 + CWE number: CWE-78 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Tested on: Windows 7 and Linux + Vendor Homepage:...

Web Terra 1.1 - 'books.cgi' Remote Command Execution

Remote Comand Execution on books.cgi Web Terra v. 1.1 + Date: 21/05/2014 + CWE number: CWE-78 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Tested on: Windows 7 and Linux + Vendor Homepage: http://www2.inforyoma.or.jp/terra + Vulnerable File: books.cgi +...

WordPress Conversion Ninja Cross Site Scripting

++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date: 2014-05-22 + + Google Dork : inurl:wp-content/plugins/conversionninja + + Vendor Homepage : http://www.Wordpress.org + + Tested on: Window...

Web Terra 1.1 Remote Command Execution

Remote Comand Execution on books.cgi Web Terra v. 1.1 + Date: 21/05/2014 + CWE number: CWE-78 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Tested on: Windows 7 and Linux + Vendor Homepage: http://www2.inforyoma.or.jp/terra + Vulnerable File: books.cgi +...

WordPress bib2html 0.9.3 Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress bib2html Cross site scripting Vulnerability | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-05-22 | | Vendor Homepage ...

SafeNet Sentinel Directory Traversal

!/usr/bin/python Exploit Title: SafeNet Sentinel Protection Server 7.0 - 7.4 and Sentinel Keys Server 1.0.3 - 1.0.4 Directory Traversal Date: 04/28/2014 Exploit Author: Matt Schmidt Syph0n Vendor Homepage: http://www.safenet-inc.com/ Software Link:...

Easy File Management Web Server Stack Buffer Overflow

Easy File Management Web Server v4.0 and v5.3 contains a stack buffer overflow condition that is triggered as user-supplied input is not properly validated when handling the UserID cookie. This may allow a remote attacker to execute arbitrary code. Module Options msf use...

Internet Bug Bounty: Adobe Flash Player FileReference Use-after-Free Vulnerability

Adobe Flash Player FileReference Use-after-Free Vulnerability ------------------------------------------------------------------ I. Summary Adobe Flash Player is prone to a vulnerability which leads to Use-after-Free. The FileReference Object which is used to access local files, when wrapped insi...

SafeNet Sentinel Protection Server 7.0 7.4 Sentinel Keys Server 1.0.3 1.0.4 - Directory Traversal

SafeNet Sentinel Protection Server 7.0 7.4 Sentinel Keys Server 1.0.3 1.0.4 - Directory Traversal !/usr/bin/python Exploit Title: SafeNet Sentinel Protection Server 7.0 - 7.4 and Sentinel Keys Server 1.0.3 - 1.0.4 Directory Traversal Date: 04/28/2014 Exploit Author: Matt Schmidt Syph0n Vendor...

Mozilla Firefox 29.0 - Null Pointer Dereference Vulnerability

Exploit for multiple platform in category dos / poc Mozilla Firefox Null Pointer Dereference Vulnerability Fun side of life! Details: Title: Mozilla Firefox Null Pointer Dereference Vulnerability Version: Prior to 29.0 Date: 4/30/2014 Discovered By: Mr.XHat E-Mail: Mr.XHat AT GMail.com Tested On:...

Mozilla Firefox 29.0 - Null Pointer Dereference

Mozilla Firefox Null Pointer Dereference Vulnerability Fun side of life! Details: Title: Mozilla Firefox Null Pointer Dereference Vulnerability Version: Prior to 29.0 Date: 4/30/2014 Discovered By: Mr.XHat E-Mail: Mr.XHat AT GMail.com Tested On: Windows 7 x64 EN Disassembly: 01694240 8bc2 mov...

Allplayer 5.9 Memory Corruption

Exploit Title: Allplayer memory corruption in latest Version 5.9 Date: 2014/05/14 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.allplayer.org Software Link:...

Mozilla Firefox 29.0 - Null Pointer Dereference

Mozilla Firefox 29.0 - Null Pointer Dereference Mozilla Firefox Null Pointer Dereference Vulnerability Fun side of life! Details: Title: Mozilla Firefox Null Pointer Dereference Vulnerability Version: Prior to 29.0 Date: 4/30/2014 Discovered By: Mr.XHat E-Mail: Mr.XHat AT GMail.com Tested On:...

WinAMP 5.666 Memory Corruption

Exploit Title: Winamp memory corruption in latest Version v5.666 build 3516 x86 Date: 2014/05/13 Exploit Author: Aryan Bayaninejad Linkedin : https://www.linkedin.com/profile/view?id=276969082 Vendor Homepage: www.winamp.com Software Link:...

RealPlayer - '.3gp' File Processing Memory Corruption

source: https://www.securityfocus.com/bid/67434/info RealPlayer is prone to a memory-corruption vulnerability. An attacker can leverage this issue to crash the affected application, causing a denial-of-service condition. Due to the nature of this issue, arbitrary code execution may be possible bu...