10443 matches found
Huawei eSpace Meeting Service 1.0.0.23 Privilege Escalation
Huawei Technologies eSpace Meeting Service version 1.0.0.23 suffers from a local privilege escalation vulnerability. Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product web page: http://www.huawei.com Affected version:...
Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0300 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing...
LuxCal 3.2.2 Cross Site Request Forgery / SQL Injection
Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
iCAM Workstation Control 4.8.0.0 - Authentication Bypass Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass
Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software solutions. Our staff are focused and committed to offering t...
Huawei Technologies eSpace Meeting Service 1.0.0.23 Local Privilege Escalation
Summary Huawei's eSpace Meeting solution fully meets the needs of enterprise customers for an integrated daily collaboration system by integrating the conference server, conference video terminal, conference user authorization, and teleconference. Description The application is vulnerable to an...
SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write Exploit
Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'SolidWorks Workgroup PDM 2014 pdmwService.exe Arbitrary File Write', 'Description' = %q This module exploits a remote arbitrary file write vulnerability in SolidWorks Workgroup PDM 2014 SP2 and prior. F...
iCAM Workstation Control 4.8.0.0 Authentication Bypass
Exploit Title: iCAM Workstation Control Software Local Authentication Bypass Google Dork: Vendor: Insight Media Internet Limited is based in the North West of England, and has 10 years experience in developing both internet and software solutions. Our staff are focused and committed to offering t...
LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities
LuxCal v3.2.2 suffers from a CSRF and Blind SQL Injection Vulnerabilities. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor:...
ALLPlayer M3U Buffer Overflow
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ALLPlayer M3U Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in ALLPlayer 2.8....
ALLPlayer 2.8.1 - (.m3u file) Buffer Overflow (SEH)
This Metasploit module exploits a stack-based buffer overflow vulnerability in ALLPlayer 2.8.1, caused by a long string in a playlist entry. By persuading the victim to open a specially-crafted .M3U file, a remote attacker could execute arbitrary code on the system or cause the application to...
ALLPlayer - '.m3u' Local Buffer Overflow (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'ALLPlayer M3U Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in ALLPlayer 2.8....
[WirelessKeyView] Recover lost wireless network key
WirelessKeyView recovers all wireless network security keys/passwords WEP/WPA stored in your computer by the 'Wireless Zero Configuration' service of Windows XP or by the 'WLAN AutoConfig' service of Windows Vista, Windows 7, Windows 8, and Windows Server 2008. It allows you to easily save all ke...
ALLPlayer 5.8.1 - .m3u Local Buffer Overflow (SEH)
ALLPlayer 5.8.1 - .m3u Local Buffer Overflow SEH ----------------------------------------------------------------------------- Exploit Title: ALLPlayer 5.8.1 - .m3u Buffer Overflow SEH Date: Mar 1 2014 Exploit Author: Gabor Seljan Software Link: http://www.allplayer.org/download/allplayer Version...
Eventy Plus Cross Site Request Forgery
Author: TUNISIAN CYBER + Exploit Title: Eventy Plus Cross-Site Request Forgery Add Admin Vulnerability + Date: 03-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352 + Vendor: http://calendarscripts.info/ + Friendly Sites: na3il.com,th3-creative.com + Twitter: @TCYB3R...
ALLPlayer 5.8.1 - (.m3u file) Buffer Overflow (SEH)
Exploit for windows platform in category local exploits ----------------------------------------------------------------------------- Exploit Title: ALLPlayer 5.8.1 - .m3u Buffer Overflow SEH Date: Mar 1 2014 Exploit Author: Gabor Seljan Software Link: http://www.allplayer.org/download/allplayer...
ALLPlayer 5.8.1 Buffer Overflow
----------------------------------------------------------------------------- Exploit Title: ALLPlayer 5.8.1 - .m3u Buffer Overflow SEH Date: Mar 1 2014 Exploit Author: Gabor Seljan Software Link: http://www.allplayer.org/download/allplayer Version: 5.8.1 Tested on: Windows 7 SP1...
ALLPlayer 5.8.1 - '.m3u' Local Buffer Overflow (SEH)
----------------------------------------------------------------------------- Exploit Title: ALLPlayer 5.8.1 - .m3u Buffer Overflow SEH Date: Mar 1 2014 Exploit Author: Gabor Seljan Software Link: http://www.allplayer.org/download/allplayer Version: 5.8.1 Tested on: Windows 7 SP1...
On the use of Adobe 0day – CVE-2 0 1 4-0 5 0 2 attack behavior analysis-vulnerability warning-the black bar safety net
The other day FireEye released a use AdobeFlash new 0day attack report, and Adobe has been based on vulnerabilities released a security update. According to FireEye report, many sites will redirect visitors to the following contain a Trojan the malicious Server: Peterson Institute for...
VCDGEAR 3.50 Stack Buffer Overflow
Author: Provensec www.provensec.com Tested on XP SP3 / Windows 7 Description: VCDGEAR 3.50 is prone to a stack-based buffer overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied input. An attacker can exploit this issue to execute arbitrary code...