Microsoft Windows win32k - Using SetClassLong to Switch Between CS_CLASSDC...
EDB-ID: 43446Author: Google Security ResearchPublished: 2018-01-05CVE: CVE-2018-0744 Type: DosPlatform: WindowsAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A Windows maintains a DC cache...
View ArticleGespage 7.4.8 - SQL Injection
EDB-ID: 43447Author: SysdreamPublished: 2018-01-05CVE: CVE-2017-7997 Type: WebappsPlatform: JSPAliases: N/AAdvisory/Source: N/ATags: SQL Injection (SQLi)Vulnerable App: N/A ## Description Gespage is a...
View ArticleVMware Workstation - ALSA Config File Local Privilege Escalation (Metasploit)
EDB-ID: 43449Author: MetasploitPublished: 2018-01-05CVE: N/A Type: LocalPlatform: LinuxAliases: N/AAdvisory/Source: LinkTags: Metasploit Framework (MSF)Vulnerable App: N/A # This module requires...
View ArticleCisco IOS - Remote Code Execution
EDB-ID: 43450Author: Artem KondratenkoPublished: 2018-01-05CVE: CVE-2017-6736 Type: RemotePlatform: HardwareAliases: N/AAdvisory/Source: LinkTags: N/AVulnerable App: N/A if False: ''' CVE-2017-6736 /...
View ArticleUser Login And Management PHP Script 1.0 Cross Site Scripting
User Login and Management PHP script version 1.0 suffers from a cross site scripting vulnerability.MD5 | 9f3805e263066c1dcd3932c12974fdaeDownload# Exploit Title: User Login and Management PHP Script -...
View Articlegps-server.net GPS Tracking Software 3.0 Code Injection / Password Reset
gps-server.net GPS Tracking Software versions 3.0 and below suffer from remote code injection and password reset vulnerabilities.MD5 | 19354bce4944164c91ae74cc84818b24Download# Exploit Title:...
View ArticleVideoDuo 3.1 Cross Site Scripting
VideoDuo Video Search Engine PHP script version 3.1 suffers from a cross site scripting vulnerability.MD5 | e2d8339c00f2cea48ab6ead24eb86774Download# Exploit Title: VideoDuo - Video Search Engine PHP...
View ArticleJoomla CMS Real Estate 1.5 SQL Injection
Joomla CMS Real Estate extension version 1.5 suffers from a remote SQL injection vulnerability.MD5 | 58842c6ee20e31d938ec0e9a8aded815Download#################################################Title:...
View ArticleJoomla vRestaurant 1.9.4 SQL Injection
Joomla vRestaurant extension version 1.9.4 suffers from a remote SQL injection vulnerability.MD5 | cf5a4debabfd32f2851a9c95cb300d1dDownload#################################################Title:...
View ArticleJoomla VMap 1.9.2 SQL Injection
Joomla VMap extension version 1.9.2 suffers from a remote SQL injection vulnerability.MD5 | 1d0a647f38d27d05f5c99f155514375cDownload#################################################Title: Joomla! VMap...
View ArticleLinux x86 chmod 777 /etc/sudoers Shellcode
36 bytes small Linux x86 chmod 777 /etc/sudoers shellcode.MD5 | ca0f278a45ecc842e202e2b69af7095cDownload/*################## Description ####################; Title : chmod 777 /etc/sudoers -...
View ArticleLinux x86 Reverse Shell Shellcode
69 bytes small Linux x86 reverse TCP /bin/sh shell null-free shellcode that connects to 127.1.1.1:8888.MD5 | 6d533f25a7d4621fb39f38d138aedb06Download/*Title: Linux/x86 - Reverse TCP Shell (/bin/sh)...
View ArticleGetGo Download Manager 5.3.0.2712 Proxy Buffer Overflow
GetGo Download Manager version 5.3.0.2712 'proxy' buffer overflow exploit.MD5 | 0110727c77d676ffa69253a4704d6cd9Download# Exploit Title: Buffer overflow vulnerability in GetGo Download Manager proxy...
View ArticleAMD PSP fTPM Remote Code Execution
AMD PSP suffers from an fTPM remote code execution vulnerability that can be performed through a crafted EK certificate.MD5 | 49627edce894ee302ff8f2fcf54e0f53DownloadIntroduction============AMD PSP [1]...
View ArticleCommuniGatePro 6.2 Missing XIMSS Tag Validation
CommunigatePro XML Interface to Messaging, Scheduling, and Signaling protocol ("XIMSS") version 6.2 suffers from a missing XIMSS protocol validation vulnerability that can lead to an email spoofing...
View ArticleSonicWall SonicOS NSA Web Firewall Cross Site Scripting
SonicWall SonicOS NSA Web Firewall is susceptible to cross site scripting attacks due to a filter bypass vulnerability.MD5 | e60fdb119e38a2aa6639b763600c6a00DownloadDocument...
View ArticleCisco IOS SNMP Remote Code Execution
Cisco IOS SNMP service remote code execution exploit.MD5 | 5f3951091331dd74f24502404f32ca06Download#!/usr/bin/env pythonif False: '''CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code...
View ArticlephpRegister 1.0 Cross Site Scripting
phpRegister version 1.0 suffers from a cross site scripting vulnerability.MD5 | 2656f9749ee4b76aaff3893b05328dfeDownload# Exploit Title: phpRegister - PHP Login And User Management Script - xss# Google...
View ArticleMicrosoft Windows Win32k DC Cache Corruption
A Microsoft Windows win32k vulnerability has been discovered where using SetClassLong to switch between CS_CLASSDC and CS_OWNDC corrupts DC cache.MD5 |...
View ArticleEMC Avamar Server / NetWorker Virtual Edition / Integrated Data Protection...
Multiple EMC products suffers from authentication bypass, file upload, and path traversal vulnerabilities. Affected includes EMC Avamar Server versions 7.1.x, 7.2.x, 7.3.x, 7.4.x, and 7.5.0, EMC...
View Article