«
Expand/Collapse
97 items tagged "url"
Related tags:
wordpress [+],
com [+],
wptouch [+],
urls [+],
spoof [+],
firefox [+],
shortener [+],
open [+],
based buffer overflow [+],
sop [+],
short [+],
open url [+],
inclusion [+],
cross site scripting [+],
bugtraq [+],
zynga [+],
xss [+],
windows versions [+],
windows [+],
vulnerabilities [+],
tugux [+],
spoofing [+],
script version [+],
script [+],
safari for windows [+],
safari [+],
request parameters [+],
qtweb [+],
python script [+],
pseudo [+],
plesk [+],
parallels [+],
orbit downloader [+],
orbit [+],
obfuscation [+],
myst [+],
mybb [+],
java [+],
internet browser version [+],
information leakage [+],
gentle [+],
forgery [+],
dword [+],
downloader [+],
code execution [+],
cms [+],
bug [+],
buffer overflow vulnerability [+],
buffer [+],
blogsite [+],
authentication server [+],
attacker [+],
ascii string [+],
arcot [+],
vulnerability [+],
vmware [+],
validation checks [+],
url parameter [+],
uri redirection [+],
squid [+],
redirect [+],
quicktime [+],
phpmyadmin [+],
parameter [+],
overflow [+],
linux security [+],
html [+],
google [+],
gnu wget [+],
filtering [+],
filename [+],
domino web [+],
dokuwiki [+],
destination filename [+],
day [+],
cubecart [+],
apple quicktime [+],
zero day [+],
zdi [+],
webaccess [+],
web [+],
vmdirect [+],
view [+],
url url [+],
url scanner [+],
url forwarding [+],
url data [+],
txt [+],
trend micro [+],
trend [+],
system [+],
stack buffer [+],
sqlmap [+],
sql [+],
spammers [+],
site url [+],
site [+],
short url [+],
shibboleth [+],
shellexecute [+],
server [+],
scanner [+],
safer use [+],
removal tool [+],
redirecting [+],
read [+],
public url [+],
preview thumbnail [+],
post [+],
piwik [+],
php [+],
novell iprint [+],
novell [+],
netcat [+],
ms internet [+],
mozilla [+],
microsoft windows system [+],
microsoft windows [+],
microsoft [+],
micro [+],
messenger [+],
memory addresses [+],
manager version [+],
malformed url [+],
major flaw [+],
local [+],
link manager [+],
link [+],
lineacms [+],
kconsulting [+],
joomla [+],
iprint [+],
internet explorer versions [+],
internet [+],
installation [+],
injection [+],
hunter [+],
hijacking [+],
handling [+],
form [+],
failure [+],
facebook [+],
f king [+],
extractor [+],
external server [+],
explorer [+],
exploits [+],
evuln [+],
download [+],
denial of service [+],
decode [+],
cross [+],
buffer overflow condition [+],
buffer overflow [+],
authentication credentials [+],
arbitrary code execution [+],
apple quicktime player [+],
apple [+],
activex control [+],
Public [+],
Fixes [+],
ExploitsVulnerabilities [+],
url redirection [+],
redirection [+]
-
-
22:11
»
Packet Storm Security Exploits
This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.
-
22:11
»
Packet Storm Security Recent Files
This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.
-
22:11
»
Packet Storm Security Misc. Files
This Metasploit module exploits a stack-based buffer overflow in Orbit Downloader. The vulnerability is due to Orbit converting an URL ascii string to unicode in a insecure way with MultiByteToWideChar. The vulnerability is exploited with a specially crafted metalink file that should be opened with Orbit through the "File->Add Metalink..." option.
-
-
15:29
»
SecuriTeam
This vulnerability allows remote attackers to potentially disclose memory addresses on vulnerable installations of Apple QuickTime Player.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
8:13
»
Packet Storm Security Exploits
Tugux CMS version 1.2 suffers from cross site scripting, local file inclusion, url redirection, and remote SQL injection vulnerabilities.
-
-
11:22
»
Packet Storm Security Advisories
CA Technologies support is alerting customers to multiple security risks with CA Arcot WebFort Versatile Authentication Server. Two vulnerabilities exist that can allow a remote attacker to potentially compromise web user security. The first set of vulnerabilities occur due to insufficient handling of request parameters sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can potentially conduct cross-site scripting attacks. The second vulnerability occurs due to insufficient filtering of a request parameter sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can use redirection to potentially carry out additional web based attacks.
-
11:22
»
Packet Storm Security Recent Files
CA Technologies support is alerting customers to multiple security risks with CA Arcot WebFort Versatile Authentication Server. Two vulnerabilities exist that can allow a remote attacker to potentially compromise web user security. The first set of vulnerabilities occur due to insufficient handling of request parameters sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can potentially conduct cross-site scripting attacks. The second vulnerability occurs due to insufficient filtering of a request parameter sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can use redirection to potentially carry out additional web based attacks.
-
11:22
»
Packet Storm Security Misc. Files
CA Technologies support is alerting customers to multiple security risks with CA Arcot WebFort Versatile Authentication Server. Two vulnerabilities exist that can allow a remote attacker to potentially compromise web user security. The first set of vulnerabilities occur due to insufficient handling of request parameters sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can potentially conduct cross-site scripting attacks. The second vulnerability occurs due to insufficient filtering of a request parameter sent to the Arcot Administrative Console. An attacker, who can convince a user to follow a URL or view a webpage, can use redirection to potentially carry out additional web based attacks.
-
-
5:29
»
Carnal0wnage
Notes for sqlmap and POST requests since every f**king tutorial only covers GETs
options you'll want to use
-u URL, --url=URL
--method=METHOD
--data=DATA
-p TESTPARAMETER
--prefix=PREFIX
--postfix=POSTFIX
--dbms=DBMS
*--dbms= if sqlmap is sucking
we'll assume we have a simple post request
user@ubuntu:~/pentest/sqlmap-dev$ python sqlmap.py -u "http://192.168.1.100/fancyshmancy/login.aspx" --method POST --data "usernameTxt=blah&passwordTxt=blah&submitBtn=Log+On" -p "usernameTxt" --prefix="')" --dbms=mssql -v 2
--method to pass the POST option
--data to pass the paramaters that are required for the POST
-p to pass the injectable field, so in this case the username field (usernameTxt)
--prefix to pass what needs to be passed before we can inject. we had to issue a tick ( ' ) and right parenthesis ( ) ) to close out the query
--dbms to tell it the backend was mssql
this yields us an sqlmap query like so:
Place: POST
Parameter: usernameTxt
Type: stacked queries
Title: Microsoft SQL Server/Sybase stacked queries
Payload: usernameTxt=blah'); WAITFOR DELAY '0:0:5';-- AND ('yTwo'='yTwo&passwordTxt=blah&submitBtn=Log+On
---
-
9:12
»
Packet Storm Security Advisories
Firefox version 3.6.13 fixes an interesting bug in their same-origin policy logic for pseudo-URLs that do not have any inherent origin associated with them.
-
9:12
»
Packet Storm Security Recent Files
Firefox version 3.6.13 fixes an interesting bug in their same-origin policy logic for pseudo-URLs that do not have any inherent origin associated with them.
-
9:12
»
Packet Storm Security Misc. Files
Firefox version 3.6.13 fixes an interesting bug in their same-origin policy logic for pseudo-URLs that do not have any inherent origin associated with them.
-
-
22:01
»
Packet Storm Security Recent Files
Mandriva Linux Security Advisory 2010-170 - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a.wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
-
22:01
»
Packet Storm Security Advisories
Mandriva Linux Security Advisory 2010-170 - GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary files via a 3xx redirect to a URL with a.wgetrc filename followed by a 3xx redirect to a URL with a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.
-
-
19:02
»
Packet Storm Security Advisories
A buffer overflow condition can be triggered on the D-Link DAP-1160 by setting URL filtering for an overly long URL, leading to possible arbitrary code execution or denial of service. Successful authentication is required in order to exploit the vulnerability, but attackers can leverage other vulnerabilities for achieving unauthenticated remote exploitation.
-
-
22:01
»
SecuriTeam
A flaw exists with the handling of malformed URL's passed through the ShellExeute() API.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:00
»
Packet Storm Security Advisories
The Struts-based web application uses the server-side session sattribute context_vmdirect to store various settings, including the URL to the XML web service backend. By default, the URL is http://localhost/sdk, but the web service URL can be manually set from a client browser in several locations. If wsUrl is changed to point at an external server, all SOAP calls for that session are sent to the specified server. This includes plaintext authentication credentials. An attacker could exploit this by tricking a user into following a link to /ui/vmDirect.do, with an attacker-controlled server passed in the view parameter.
-
-
19:00
»
Packet Storm Security Recent Files
iDefense Security Advisory 03.02.10 - Remote exploitation of a stack-based buffer overflow vulnerability in IBM Corp.'s Lotus Domino Web Access ActiveX control could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerable function takes an attacker-controlled URL, and copies it into a fixed-size stack buffer. No validation checks are performed on the length of the URL. By passing in a long URL string, it is possible to trigger a stack-based buffer overflow, resulting in the execution of arbitrary code.
-
19:00
»
Packet Storm Security Advisories
iDefense Security Advisory 03.02.10 - Remote exploitation of a stack-based buffer overflow vulnerability in IBM Corp.'s Lotus Domino Web Access ActiveX control could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerable function takes an attacker-controlled URL, and copies it into a fixed-size stack buffer. No validation checks are performed on the length of the URL. By passing in a long URL string, it is possible to trigger a stack-based buffer overflow, resulting in the execution of arbitrary code.
-
-
17:00
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 10-016 - This vulnerability allows remote attackers to force a Microsoft Windows system to execute a given local executable. User interaction is required in that the target must access a malicious URL. The specific flaw exists within the ShellExecute API. Using a specially formatted URL an attacker can bypass sanitization checks within this function and force the calling application into running an executable of their choice. Successful exploitation requires a useful binary to exist in a predictable location on the remote system.