7778 matches found
Openfire <= 3.6.0a Admin Console Authentication Bypass
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
IDEAL Administration 2009 9.7 - Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python IDEAL Administration 2009 v9.7 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed...
AShop Deluxe 4.5 ashop/catalogue.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues ...
Novell Netware 5.1 - Remote Administration Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1118/info The Netware Remote Administration utility can be compromised to allow arbitrary code to be remotely run on the server. The Remote Administration server is basically a simple webserver, and if sent a GET request ...
axis network camera 2.x and video server 1-3 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous user...
Fortech Proxy+ 2.30 Remote Administration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1226/info By default, Fortech Proxy+ can be remotely administered by any user possessing no authorization simply by connecting to http://target:4400/admin. In addition, the telnet gateway is open by default which can...
IDEAL Administration 2010 10.2 - Local Buffer Overflow Exploit
No description provided by source. !/usr/bin/env python IDEAL Administration 2010 v10.2 Local Buffer Overflow Exploit Found By: DrIDE Usage: Migrate - Open Migration Project - Bind Shell Download: www.pointdev.com Tested On: Windows XPSP3 windows/shellbindtcp - 696 bytes Encoder: x86/alphamixed...
Ruslan Communications <Body>Builder SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5008/info Ruslan Communications BodyBuilder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java. Reportedly, user input suppli...
JBS 2.0 / JBSX - Administration panel Bypass and File Upload Vulnerability
No description provided by source. Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: inurl:/files/redirect.asp Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload panel...
ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit
No description provided by source. ?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: ReloadCMS is a free CMS written on PHP and based on flat files. vulnerability: ReloadCMS do not properly sanitize User-Agent request...
EZ Publish 2.2.7/3.0 site.ini Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7347/info eZ Publish has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying site.ini configuration file. The file contains eZ Publish...
Xoops 2.5.4 - Blind SQL Injection
No description provided by source. ------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: Powered by XOOPS 2.5.4 Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom...
HP Managed Printing Administration jobAcct Remote Command Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
IISProtect 2.1/2.2 Web Administration Interface SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful exploitation could result in...
Root Exploit Western Digital's WD TV Live SMP/Hub
No description provided by source. Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of it...
GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
No description provided by source. from: http://marc.info/?l=full-disclosure&m=128776663124692&w=2 The GNU C library dynamic linker will dlopen arbitrary DSOs during setuid loads ------------------------------------------------------------------------------- Cześć, This advisory describes...
Ericsson HM220dp DSL Modem World Accessible Web Administration Interface Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6824/info The Ericsson HM220dp DSL Modem uses a web interface for remote administration and configuration. This interface does not require any authentication in order to access. There is no option to enable any...
Camtron CMNC-200 IP Camera Authentication Bypass
No description provided by source. Finding 3: Web Based Administration Interface Bypass CVE: CVE-2010-4232 The CMNC-200 IP Camera has an administrative web interface that does not handle authentication properly. Using a properly formatted request, an attacker can bypass the authentication...
MyPHPSoft MyPHPLinks 2.1.9/2.2 - SQL Injection Administration Bypassing
No description provided by source. source: http://www.securityfocus.com/bid/6395/info MyPHPLinks is a freely available, open source PHP application distributed by MyPHPSoft. It is available for Unix, Linux, and Microsoft Windows operating systems. It has been reported that a problem with the...
SAMBA 2.0.7 SWAT Symlink Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...