what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Brian Dowling

WowWee Rovio Insufficient Access Controls

Posted Jan 15, 2009

Authored by Brian Dowling | Site simplicity.net

WowWee Rovio suffers from insufficient access control vulnerabilities that allow for snooping.

tags | exploit, vulnerability

SHA-256 | 7717e09060d2782859b3fb4ceecaf9c5e847e585570e53a710199dd78a6562a7

Download | Favorite | View

installshield-exec.txt

Posted Sep 16, 2008

Authored by Brian Dowling | Site simplicity.net

The InstallShield Update Agent uses insecure methods of retrieving operational script code from unauthenticated, unverified external sources over HTTP. Arbitrary remote code execution is possible on all known product versions.

tags | advisory, remote, web, arbitrary, code execution

advisories | CVE-2008-1093

SHA-256 | 1caa2ebe74269b4c59aec52aa22dd6110a144d0f811fc378edf727096abb151f

Download | Favorite | View