eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

LDF (Default.asp) Sql Injection Vulnerability

Product : LDF vendor : www.ldf.22.cn Vulnerable Versions : All Default.asp Page has an issue on validating "Page" parameter , It could be exploited by attacker & attacker can inject arbitrary Sql Commands http://www.example.com/ldf path/default.asp?page=SQL COMMAND...

Vox blog Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =========================================== Vox blog Cross Site Scripting Vulnerability =========================================== Exploit Title: Vox blog Cross Site Scripting Vulnerability Author: Phenom Software Link: Version: Tested on...

Vito CMS - SQL Injection

.:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Vito CMS .:. Info link: http://kameleon-lab.com/vito-cms.php .:. Versions: ALL .:. Bug Type : Sql Injection .:. Risk: High .:. Tested on : Windows & Linux === Exploit === ....

Arab Network Tech CMS SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : Arab Network Tech. ANT CMS SQL Injection Author : Tr0y-x Script Site : www.antpage.com Version : All Versions Tested on : Windows & Linux Dork : inurl:apages.php My home : WwW.SeC-WaR.CoM...

Shout! CMS SQL Injection

Shout! content.php Blind Sql Injection Vulnerability ======================================================= .:. Author : Zero Cold [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Shout! Script .:. Donwload Script: http://www.mediashaker.com/index.php .:...

eWebeditor - Directory Traversal

eWebeditor - Directory Traversal Application Info: Name: eWebeditor Version: all version Vulnerability Info: Type: Directory Traversal Risk: Medium Vulnerability: http://site.com/admin/ewebeditor/admin/upload.asp?id=16&dviewmode=&dir =./...

eWebeditor - Directory Traversal

Application Info: Name: eWebeditor Version: all version Vulnerability Info: Type: Directory Traversal Risk: Medium Vulnerability: http://site.com/admin/ewebeditor/admin/upload.asp?id=16&dviewmode=&dir =./...

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution

Microsoft Internet Explorer - wshom.ocx ActiveX Control Remote Code Execution IE ActiveX remote bof remote code excution version: all versions Author: germayax & D3V!L FUCKER special thanx: for my best friend his0k4. Geetz 2 :Sarbot511 ,thrid-devil. tested on : windows 7 , windows vista ,windows ...

GOM Audio - Local Crash (PoC)

GOM Audio - Local Crash PoC Exploit Title: GOM Audio Local crash poc Date: 2010.01.05 Author: [email protected] Version: all versions Tested on: xp sp3 !usr/bin/perl $file="poc.cda"; $boom="A" x 10; openmyfile,"$file"; print myfile $boom; closemyfile;...

Persits XUpload ActiveX MakeHttpRequest Directory Traversal

$Id: persitsxuploadtraversal.rb 7760 2009-12-08 21:24:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Calendar Express 2.0 SQL Injection

Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.biz Exploit: POST...

Nuke Remote SQL Injection

=-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

Ez Poll Hoster XSS / XSRF

----------------------------------------------------------------------------------------------- Title: Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability

ZDI-09-095: Hewlett-Packard OpenView NNM Snmp.exe Oid Variable Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-095 December 9, 2009 -- CVE ID: CVE-2009-3849 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...

IRAN N.E.T E-commerce Group SQL Injection Vulnerability

No description provided by source. ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! IRAN N.E.T E-commerce Group SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://iranmc.org + script : IRAN N.E.T E-commerce...

CA BrightStor HSM Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'CA BrightStor HSM...

GoodTech Telnet Server <= 5.0.6 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'GoodTech...

Symantec Alert Management System Intel Alert Originator Service Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Symantec Alert...

Icarus 2.0 - .pgn Universal Local Buffer Overflow Exploit SEH

Icarus 2.0 .pgn File Universal Local Buffer Overflow Exploit SEH. Local exploit for windows platform !/user/bin/perl Icarus 2.0 .PGn FileUniversal Local BOF SEH tested on win SP2 Author: germayax & D3v!LFUCK3R Download :http://www.randomsoftware.com/pub/icarus.exe GreTz 2 :his0k4 , EddyBAck0o , T...