:: Deepquest ::

>> [webapps] – vOlk Botnet Framework v4.0 Multiple Vulnerabilities

USER: deepcore // 2012-10-11 // 0 CMT

vOlk Botnet Framework v4.0 Multiple Vulnerabilities

>> [remote] – Apple iOS MobileSafari LibTIFF Buffer Overflow

USER: deepcore // 2012-10-11 // 0 CMT

Apple iOS MobileSafari LibTIFF Buffer Overflow

>> [remote] – Apple iOS MobileMail LibTIFF Buffer Overflow

USER: deepcore // 2012-10-11 // 0 CMT

Apple iOS MobileMail LibTIFF Buffer Overflow

>> [local] – PHP 5.3.4 Win Com Module Com_sink Exploit

USER: deepcore // 2012-10-11 // 0 CMT

PHP 5.3.4 Win Com Module Com_sink Exploit

>> [remote] – KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability

USER: deepcore // 2012-10-11 // 0 CMT

KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability

>> [dos] – VLC Player <= 2.0.3 ReadAV Crash PoC

USER: deepcore // 2012-10-11 // 0 CMT

VLC Player

>> [webapps] – Omnistar Document Manager v8.0 Multiple Vulnerabilities

USER: deepcore // 2012-10-11 // 0 CMT

Omnistar Document Manager v8.0 Multiple Vulnerabilities

>> [local] – FileBound 6.2 Privilege Escalation Vulnerability

USER: deepcore // 2012-10-11 // 0 CMT

FileBound 6.2 Privilege Escalation Vulnerability

>> http://www.tase.go.th/tase/images/deface.html

USER: deepcore // 2012-10-10 // 0 CMT

http://www.tase.go.th/tase/images/deface.html notified by Ashiyane Digital Security Team

>> Apple iOS Default SSH Password

USER: deepcore // 2012-10-10 // 0 CMT

This Metasploit module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the ‘root’ and ‘mobile’ users have not been changed.