Showing 1 - 9 of 9

Files from Kestutis Gudinavicius

First Active	2012-05-16
Last Active	2015-12-11

Skybox Platform 7.0.611 XSS / SQL Injection / Code Execution: Posted Dec 11, 2015; Authored by Kestutis Gudinavicius, M. Heinzl, C. Schwarz | Site sec-consult.com; Skybox Platform versions 7.0.611 and below suffer from code execution, remote SQL injection, cross site scripting, and directory traversal vulnerabilities.; tags | exploit, remote, vulnerability, code execution, xss, sql injection; SHA-256 | d2a34290d02d3f2013ecd41c823081fe86b61aaf79b73808107e70eb70589040; Download | Favorite | View

Shopizer 1.1.5 Authorization Bypass / Hardcoded Key: Posted Jul 11, 2014; Authored by Kestutis Gudinavicius | Site sec-consult.com; Shopizer version 1.1.5 suffers from authentication and authorization bypass vulnerabilities and also has a hardcoded default encryption key.; tags | exploit, vulnerability; SHA-256 | 3151b133fe3a990ab5b4430efd7f97f3a1ea24619f03afeb2acc81fee40ad78c; Download | Favorite | View

Oracle WebCenter / Fatwire Header Injection: Posted Apr 17, 2013; Authored by Kestutis Gudinavicius | Site sec-consult.com; Oracle WebCenter Sites Satellite Server versions 7.6.0 Patch1, 7.6.2, 11.1.1.6.0, and 11.1.1.6.1 suffer from HTTP header injection and cache poisoning vulnerabilities.; tags | exploit, web, vulnerability; advisories | CVE-2013-1509; SHA-256 | b211d5ba79c2e4506fc8c437bbb356031d7bc5df5b5dceb6705801d00369973b; Download | Favorite | View

ELBA 5 5.5.0 SQL Injection / Default Credentials: Posted Dec 20, 2012; Authored by Kestutis Gudinavicius | Site sec-consult.com; ELBA 5 version 5.5.0 R00006 build 0796 suffers from remote SQL injection, unencrypted password storage, default credential use, and buffer overflow vulnerabilities.; tags | exploit, remote, overflow, vulnerability, sql injection; SHA-256 | c54c52eb248b249e3839005d54ed6fc24cfcb0ceb545a988aa2b640cf7a7f90c; Download | Favorite | View

Unirgy uStoreLocator Magento Extension SQL Injection: Posted Oct 17, 2012; Authored by Kestutis Gudinavicius | Site sec-consult.com; Unirgy uStoreLocator Magento extension versions 2.0.0 and below suffer from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; SHA-256 | 6e4abf5adbbbb92200ba426805348f157961e9a3deb1da91504764ab97eddb22; Download | Favorite | View

Magento eCommerce Platform XXE Injection: Posted Jul 13, 2012; Authored by Kestutis Gudinavicius | Site sec-consult.com; Magento eCommerce platform uses a vulnerable version of Zend framework which is prone to XML eXternal Entity Injection attacks. The SimpleXMLElement class of Zend framework (SimpleXML PHP extension) is used in an insecure way to parse XML data. External entities can be specified by adding a specific DOCTYPE element to XML-RPC requests. By exploiting this vulnerability an application may be coerced to open arbitrary files and/or TCP connections.; tags | exploit, arbitrary, php, tcp, xxe; SHA-256 | 89d448f5823f6c330e5a4b53e23014a5b1fe003dd4087081ff3c078b9e4d3271; Download | Favorite | View

Zend Framework XXE Injection: Posted Jun 26, 2012; Authored by Kestutis Gudinavicius | Site sec-consult.com; Zend Framework versions 1.11.11, 1.12.0 RC1, and 2.0.0 beta4 suffer from remote file disclosure via an XXE injection vulnerability.; tags | exploit, remote, xxe; SHA-256 | c3bbf3eadcb973470c3821625d1d343feeac92ba6e51810c867cb80422569cac; Download | Favorite | View

libwpd WPXContentListener::_closeTableRow() Memory Overwrite: Posted May 18, 2012; Authored by Kestutis Gudinavicius | Site sec-consult.com; OpenOffice.org includes the customized libwpd version 0.8.8 library for parsing WordPerfect documents. The used version of the libwpd library suffers from a memory overwrite vulnerability when reading a specially crafted WPD file. Successful exploitation of this vulnerability could result in an arbitrary code execution within the OpenOffice.org software suite.; tags | advisory, arbitrary, code execution; advisories | CVE-2012-2149; SHA-256 | c0fbf3513a8c6f3a2d74cceeb3b60aa04aa8253399451b37f5db876426268ecb; Download | Favorite | View

OpenOffice.org Memory Overwrite: Posted May 16, 2012; Authored by Kestutis Gudinavicius; OpenOffice.org versions 3.3 and 3.4 Beta suffer from a memory overwrite vulnerability.; tags | advisory; advisories | CVE-2012-2149; SHA-256 | 8835dab05febe30ee3df1bb4c48de2c02504156f840dc2d1d9c1e0014179f8ce; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days