86 matches found
Backdoor Vulnerability in Juniper Networks ScreenOS (CNVD-2015-08307)
ScreenOS is an operating system developed by Juniper Networks that runs on the NetScreen family of firewall products. An unauthorized access vulnerability exists in Juniper Networks ScreenOS, which can be exploited by an attacker to remotely gain administrative access to the device via SSH or...
Atarim SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Clear (iSpot/Clearspot) Remote Command Execution Exploit
Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...
Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting
Simply Classified 0.2 XSS & CSRF Vulnerabilities Download: http://www.hotscripts.com/listing/simplyclassifieds/ Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...
Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery
Simply Classified 0.2 - Cross-Site Scripting Cross-Site Request Forgery Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...
Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery
Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory: http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-002-simply-classifieds-v0.2-xss-and-csrf/ Greetz...
Simply Classified 0.2 XSS & CSRF Vulnerabilities
Exploit for unknown platform in category web applications ================================================ Simply Classified 0.2 XSS & CSRF Vulnerabilities ================================================ Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Not...
Billwerx RC 3.1 - Multiple Vulnerabilities
Billwerx RC 3.1 - Multiple Vulnerabilities Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the...
Billwerx RC v3.1 Multiple Vulnerabilities
No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...
Viscacha 0.8 Gold persistant XSS vulnerability
No description provided by source. Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the contex...
CVE-2008-0742
Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...
CVE-2006-6973
CVE-2006-6973 affects Headstart Solutions DeskPRO. The vulnerability allows remote attackers to bypass authentication for administrative paths, enabling (1) reinstall via install/index.php, (2) database deletion via a crafted do=delete_database query on a renamed install/index.php, and (3)/(4) un...
CVE-2006-4048
CVE-2006-4048 affects Netious CMS 0.4 , where session IDs are initialized based on the client IP address. This design allows remote attackers to gain access to the administration section if they originate from the same IP address as the administrator. The vulnerability description is consistent a...
MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities
Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disable him/her account!...
dwc_articles possible sql injection
author: l0om site: www.excluded.org product: dwcarticles = 1.6 maybe other versions too problem: possible sql injection Vendor site? www.distinctwebcreations.com note:its currently down. Vendor status? Didnt find an email address or phon number. what is it? DwcArticles is an ASP application...
Finjan SurfinGate unauthorized access
By using proxy server it's possible to obtain access to administration...
phpBB 2.0.4 - PHP Remote File Inclusion
phpBB 2.0.4 - PHP Remote File Inclusion // / phpBB 2.0.4 Remote AdminStyles.PHP ThemeInfo.CFG File Include / / / / Exploit made on June 2003 by Spoofed Existence / / / / Patch : http://www.phpbb.com/phpBB/viewtopic.php?t=113826 / // include include include include include int main //The socket...
Xpressions Software: Multiple SQL Injection Attacks To Manage WebStore
/------------------------ Pimp industries. --------------------------/ Xpressions Software : Multiple SQL Injection Attacks To Manage WebStores. BackGround ------------- When your suppliers and trading partners can interact with your organization as a seamless extension of your internal business...
Web Wiz Site News realease v3.06 administration access.
Date: 14.04.2003 Subject: Web Wiz Site News realease v3.06 administration access. Description: Free asp news management system. Includes, simple intergration, short news item with link to full story, insert images, links, text formatting, user commentsoptional with email notification, anti-spam...