20944 matches found
Oracle RDBMS 10.2.0.3/11.1.0.6 - TNS Listener PoC
No description provided by source. TNS Listener Oracle RDBMS exploit, cause trap in Listener process more precisely: in function memcpy called from ncrfintn function which is located in oranro11.dll Successfully working with Oracle RDBMS Win32 11.1.0.6.0 and Oracle RDBMS Win32 10.2.0.3 with lates...
pointcomma <= 3.8b2 - Remote File Inclusion Vulnerability
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg PointComma = 3.8b2 Remote File Include Vulnerability Download Script : http://nchc.dl.sourceforge.net/project/pointcomma/pointcomma/ Dork : dieHacking attempt; :D Vuln :...
TemaTres 1.0.3 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
ntop 3.3.10 HTTP Basic Authentication NULL Pointer Dereference Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36074/info The 'ntop' tool is prone to a denial-of-service vulnerability because of a NULL-pointer dereference that occurs when crafted HTTP Basic Authentication credentials are received by the embedded webserver. An...
Achievo <= 1.3.4 - SQL Injection
No description provided by source. Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in Achievo 1. Advisory Information Title: SQL Injection in Achievo Advisory ID: BONSAI-2009-0102 Advisory URL:...
PhpLinkExchange 1.02 - XSS/Upload Vulerability
No description provided by source. PhpLinkExchange v1.02 - XSS/Upload Vulerability Discovered by : Stink' Date : 2009-12-16 Dork : PhpLinkExchange v1.02 Website Publisher : http://www.idevspot.com/PhpLinkExchange.php -- XSS in URL -- http://server/links/PhpLinkExchange/index.php?page=home&catid=X...
OpenSSL < 0.9.8i DTLS ChangeCipherSpec Remote DoS Exploit
No description provided by source. / cve-2009-1386.c OpenSSL 0.9.8i DTLS ChangeCipherSpec Remote DoS Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1386 OpenSSL would SegFault if the DTLS server receives a...
Linux Kernel 2.x - sock_sendpage() Local Root Exploit (Android Edition)
No description provided by source. Source for exploiting CVE-2009-2692 on Android; Hole is closed in Android kernels released August 2009 or later. orig: http://zenthought.org/content/file/android-root-2009-08-16-source back: http://www.exploit-db.com/sploits/android-root-20090816.tar.gz...
FretsWeb 1.2 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
AdaptCMS_Lite_1.5 2009-07-07
No description provided by source. =========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download :...
CA eTrust PestPatrol ActiveX Control Buffer Overflow
No description provided by source. $Id: etrustpestscan.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
SeaMonkey 1.1.8 - Remote Array Overrun
No description provided by source. From Full Disclosure: http://seclists.org/fulldisclosure/2009/Nov/221 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SeaMonkey 1.1.8 Remote Array Overrun Arbitrary code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - - Dis.:...
my-gesuad 0.9.14 (ab/sql/xss) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
Fat Player 0.6b - WAV File Processing Buffer Overflow (SEH)
No description provided by source. Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference:...
Orbit Downloader Connecting Log Creation Buffer Overflow
No description provided by source. $Id: orbitconnecting.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...
phptraverse <= 0.8.0 - Remote File Inclusion Vulnerability
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg phptraverse = 0.8.0 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/phptraverse/files/ Dork : dieHacking attempt; :D Vuln : ./phptraverse-0.8.0/assets/plugins/mp3id/mp3id.php li...
photo-rigma.biz 30 - (sql/xss) Multiple Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...
Sunbird 0.9 - Array Overrun (code execution) 0day
No description provided by source. full disclosure: http://seclists.org/fulldisclosure/2009/Dec/253 Sunbird 0.9 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-199 Risk: High...
ISC DHCP dhclient < 3.1.2p1 Remote Buffer Overflow PoC
No description provided by source. / cve-2009-0692.c ISC DHCP dhclient 3.1.2p1 Remote Exploit Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in...
F3Site 2009 mod/new.php GLOBALS[nlang] Parameter Traversal Local File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...