exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Fernando Munoz

TimeDoctor Pro 1.4.72.3 Insecure Transport

Posted Jul 1, 2015

Authored by Fernando Munoz

TimeDoctor autoupdate feature downloads and executes files over plain HTTP and doesn't perform any check with the files. An attacker with MITM capabilities (i.e., when user connects to a public wifi) could override the Timedoctor subdomain and then execute custom binaries on the machine where the application is running.

tags | advisory, web

advisories | CVE-2015-4674

SHA-256 | cf5cbb9e12db32d37835bd9deea463c5dc52c32a82f8ba56eb0159a2d82fdd01

Download | Favorite | View

X7 Chat 2.0.5 lib/message.php preg_replace() PHP Code Execution

Posted Nov 5, 2014

Authored by Fernando Munoz, Juan Escobar | Site metasploit.com

This Metasploit module exploits a post-auth vulnerability found in X7 Chat versions 2.0.0 up to 2.0.5.1. The vulnerable code exists on lib/message.php, which uses preg_replace() function with the /e modifier. This allows a remote authenticated attacker to execute arbitrary PHP code in the remote machine.

tags | exploit, remote, arbitrary, php

SHA-256 | a2b589b509418491b055a24abe22347f72177b3719a6768da42a90f3ad84e5e0

Download | Favorite | View