RealPlayer 15.0.6.14(.3g2) - WriteAV Crash (PoC)

RealPlayer 15.0.6.14.3g2 - WriteAV Crash PoC Title : RealPlayer 15.0.6.14.3g2 WriteAV Vulnerability Version : 15.0.6.14 Date : 2012-10-29 Vendor : http://www.real.com/ crash : http://img543.imageshack.us/img543/9130/pocm.jpg Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh...

UMPlayer 0.98 DLL Hijacking

/ Exploit Title: UMPlayer 0.98 DLL Hijacking Exploit wintab32.dll Date: 31/10/2012 Author: Metropolis Url: http://metropolis.fr.cr Software info: UMPlayer is the media player that fills all your needs. With dozens of advanced features and built-in codecs it can handle any media format. Software...

iimage - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: web design iimage - SQL Injection Vulnerability Date: 01-11-2012 Author: ShinoBi-Dz E-mail : email protected Facebook : https://www.facebook.com/shinobi.DZz Category: webapps Google dork: "web design iimage"...

RealPlayer 15.0.6.14(.3g2) WriteAV Vulnerability

context-dependent Successful exploits can allow attackers to execute arbitrary code Title : RealPlayer 15.0.6.14.3g2 WriteAV Vulnerability Version : 15.0.6.14 Date : 2012-10-29 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows ...

Arora 0.10.0 Windows Qt 4.5.3 DLL Hijack

/ Exploit Title: Arora 0.10.0 Windows Qt 4.5.3 DLL Hijacking Exploit wintab32.dll Date: 27/10/2012 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://code.google.com/p/arora/downloads/detail?name=Arora%200.10.0-1%20Installer.exe&can=2&q= Version: 0.10.0 Tested on: Windows 7...

Aladdin Knowledge System Ltd. Active-X Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO:...

VUPEN Security Research - Microsoft Internet Explorer "scrollIntoView" Use-After-Free Vulnerability (MS12-063)

VUPEN Security Research - Microsoft Internet Explorer "scrollIntoView" Use-After-Free Vulnerability MS12-063 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as...

Aladdin Knowledge System Ltd PrivAgent ActiveX Control 2.0 Multiple Vulnerabilities

Exploit for windows platform in category dos / poc ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Huawei Technologies - SEH Based Buffer Overflow

Document Title: =============== Huawei Technologies - SEH Based Buffer Overflow References: =========== View: http://www.youtube.com/watch?v=pkOaPQJPQbE Release Date: ============= 2012-10-24 Vulnerability Laboratory ID VL-ID: ==================================== 731 Common Vulnerability Scoring...

WordPress Plugin FireStorm Professional Real Estate 2.06.01 - SQL Injection

Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability Google Dork: inurl:"/fs-real-estate-plugin/xml/markerlistings.xml?id=" Exploit Author: Ashiyane Digital Security Team Software Link: http://www.firestormplugins.com/plugins/real-estate/ Category: Web...

WordPress Plugin FireStorm Professional Real Estate 2.06.01 - SQL Injection

WordPress Plugin FireStorm Professional Real Estate 2.06.01 - SQL Injection Exploit Title: Wordpress FireStorm Professional Real Estate 2.06.01 SQL Injection Vulnerability Google Dork: inurl:"/fs-real-estate-plugin/xml/markerlistings.xml?id=" Exploit Author: Ashiyane Digital Security Team Softwar...

Cartweaver 3 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8...

Cartweaver 3 - Local File Inclusion

Cartweaver 3 - Local File Inclusion Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the...

Huawei Technologies Internet Mobile Unicode SEH Exploit

Exploit for windows platform in category local exploits !/usr/bin/perl Souhail Hammou - Independant Security Researcher & Penetration Tester . Facebook : www.facebook.com/dark.puzzle.sec E-mail : email protected Greetings to all moroccan researchers and white hats . Vulnerable : Etisalat , Vodafo...

Cartweaver 3 - Local File Inclusion

Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the Help Documents located in...

CVE-2012-5378

Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\TD\bin directory, which is added to the PATH system environment variable, as demonstrate...

CVE-2012-5380

Untrusted search path vulnerability in the installation functionality in Ruby 1.9.3-p194, when installed in the top-level C:\ directory, might allow local users to gain privileges via a Trojan horse DLL in the C:\Ruby193\bin directory, which may be added to the PATH system environment variable by...

Design/Logic Flaw

Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the top-level C:\ directory, allows local users to gain privileges via a Trojan horse DLL in the C:\Perl\Site\bin directory, which is added to the PATH system environment variable, a...