9394 matches found
CVE-2014-5186: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...
CVE-2012-6653: Undefined Security Weakness
Unspecified vulnerability in the All Video Gallery all-video-gallery plugin before 1.2.0 for WordPress has unspecified impact and attack vectors...
All in One Adsense YPN 2.0.1 - all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation
The all-in-one-adsense-and-ypn WordPress plugin was affected by an all-in-one-adsense-&-ypn.php Direct Request AdSense Account Manipulation security vulnerability...
Joomla Component Card View JX XSS Vulnerabilities
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...
PEiD <= 0.92 Malformed PE File Universal Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl PEiD = 0.92 Buffer Overflow Universal Exploit Exploit by SkD [email protected] ---------------------------------------------- An old vulnerability but no existing exploit for it, so here it is. Of course, I had to make it universal because of...
MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit
No description provided by source. !/usr/bin/perl MemHT Portal = 4.0.1 pvtmsg Delete All Private Messages Exploit by yeat - stakerathotmaildotit Details; Note: 1- works regardless of php.ini settings. 2- blind sql injection benchmark method is possible. 3- don't add me on msn messenger. 4- Thanks...
Tainos Webdesign (All Scripts) SQL/XSS/HTML Injection Vulnerability
No description provided by source...
A-PDF All to MP3 2.3.0 - Universal DEP Bypass Exploit
No description provided by source...
Scorched 3D <= 39.1 - Multiple Vulnerabilities (All-in-One) (PoC)
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...
PhotoADay Pad_selected Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11009/info It is reported that PhotoADay is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remot...
Web@all <= 1.1 - Remote Admin Settings Change
No description provided by source. =========================================== Web@all = 1.1 Remote Admin Settings Change =========================================== Author: giudinvx Email: giudinvxatgmaildotcom Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/...
phpBB All Topics Mod <= 1.5.0 (start) Remote SQL Injection Exploit
No description provided by source...
ARASTAR - SQL Injection Vulnerability
No description provided by source. ++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 CHROME + FIREFOX + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:POWERE...
vBulletin DoS - all version
No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...
A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow (seh)
No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the...
A-PDF All to MP3 Converter 2.0.0 DEP Bypass
No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: [email protected] Home: http://net-effects.blogspot.com Big...
RapidWareX 2.0.1 - (WebUI) CSRF Exploit
No description provided by source. RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the...
Muse Music All-In-One 1.5.0.001 .pls File Buffer Overflow (DEP Bypass)
No description provided by source. !/usr/bin/perl +Exploit Title: Muse Music All-In-One PLS File Buffer Overflow ExploitDEP Bypass +Date: 25\09\2011DD\MM\YYYY +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/Muse-Music-All-In-One/3000-21414-10070288.html +Version: 1.5.0.001 +Tested...
Nevis Systems All-Mail 1.1 - Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1789/info All-mail is an smtp server for Windows NT and 2000 platforms offered by Nevis Systems. It is vulnerable to remotely exploitable buffer overflow attacks that may lead to an attacker gaining control of the victim...
All In One Control Panel 1.3.x cp_downloads.php did Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/22032/info All In One Control Panel is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...