Origami PDF Exploit Creator 1.0.0
origami is a Ruby framework designed to parse, analyze, edit, manipulate, forge, exploit PDF files. This is NOT a PDF rendering library. It aims at providing a scripting tool to generate and/or analyze...
View ArticleJoomla Recerca SQL Injection
The Joomla Recerca component suffers from a remote SQL injection vulnerability.
View ArticleBulletProof FTP Client Buffer Overflow
BulletProof FTP Client version 2.63 build 56 buffer overflow exploit that creates a malicious .bps file.
View ArticleHP Security Bulletin HPSBPI02463 SSRT090061
HP Security Bulletin - Potential security vulnerabilities have been identified with certain HP LaserJet printers, HP Color LaserJet printers and HP Digital Senders. The vulnerabilities could be...
View ArticleAIOCP 1.4.001 Remote File Inclusion
Aiocp version 1.4.001 suffers from additional remote file inclusion vulnerabilities.
View ArticleMandriva Linux Security Advisory 2009-258
Mandriva Linux Security Advisory 2009-258 - A regression was found with the self signed certificate signatures checking after applying the fix for CVE-2009-2409. An upstream patch has been applied to...
View ArticleAda Image Server 0.6.6 SEH Overwrite
Ada Image Server version 0.6.6 SEH overwrite exploit. Written in python. Binds a shell to port 4444.
View ArticleDebian Linux Security Advisory 1903-1
Debian Linux Security Advisory 1903-1 - Several vulnerabilities have been discovered in graphicsmagick, a collection of image processing tool, which can lead to the execution of arbitrary code,...
View ArticleiDEFENSE Security Advisory 2009-10-07.1
iDefense Security Advisory 10.07.09 - Remote exploitation of a stack based buffer overflow vulnerability in IBM Corp.'s AIX could allow an attacker to execute arbitrary code with the privileges of the...
View ArticleHP LaserJet Cross Site Scripting
Multiple security vulnerabilities have been identified with certain HP LaserJet printers, HP Color LaserJet printers and HP Digital Senders. The vulnerabilities could be exploited remotely by Cross...
View ArticleSAP GUI VSFlexGrid Active-X Buffer Overflow
The VSFLEXGrid component of the SAP GUI is susceptible to a buffer overflow vulnerability.
View ArticleRiorey RIOS Hardocded Password
Riorey DDoS mitigation appliances suffer from a very poor design vulnerability where they have a hardcoded root login and password for automation. Fail!
View ArticleMandriva Linux Security Advisory 2009-259
Mandriva Linux Security Advisory 2009-259 - preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote...
View ArticleFree WMA MP3 Converter 1.1 Buffer Overflow
Free WMA MP3 Converter version 1.1 local buffer overflow exploit that creates a malicious .wav file and executes a reverse shell.
View ArticleDreamPoll 3.1 SQL Injection / XSS
DreamPoll version 3.1 suffers from remote SQL injection and cross site scripting vulnerabilities.
View Articlehttpdx 1.4 Buffer Overflow Exploit
httpdx web server version 1.4 if vulnerable to a remote buffer overflow vulnerable when supplied a long GET request. Exploit is written for httpdx 1.4 on Windows XP SP3 and binds a shell to port 58821.
View ArticleBMW inventory.php SQL Injection
The BMW inventory.php script suffers from a remote SQL injection vulnerability.
View ArticleUbuntu Security Notice 844-1
Ubuntu Security Notice 844-1 - Chris Evans discovered that mimeTeX incorrectly handled certain long tags. An attacker could exploit this with a crafted mimeTeX expression and cause a denial of service...
View ArticleUbuntu Security Notice 845-1
Ubuntu Security Notice 845-1 - Pavel Polischouk discovered that Pan incorrectly handled certain data structures. If a user were tricked into viewing malicious nntp data, a remote attacker could cause a...
View ArticleMandriva Linux Security Advisory 2009-217
Mandriva Linux Security Advisory 2009-217 - A number of security vulnerabilities have been discovered in Mozilla Thunderbird.
View ArticleFreeBSD 6.4 pipeclose()/knlist_cleardel() Race Condition
FreeBSD version 6.4 pipeclose()/knlist_cleardel() race condition exploit that results in a NULL pointer dereference and runs code in kernel mode giving a root shell and escaping from jail.
View ArticleFreeBSD 7.2 devfs Race Condition
FreeBSD version 7.2 VFS/devfs race condition local root exploit.
View ArticleMandriva Linux Security Advisory 2009-217
Mandriva Linux Security Advisory 2009-217-2 - A number of security vulnerabilities have been discovered in Mozilla Thunderbird. The previous mozilla-thunderbird-moztraybiff packages had the wrong...
View Article
