All Club CMS <= 0.0.2 index.php Remote SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS = 0.0.1f index.php Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x D.O.M TEAM 2008 we are: ka0x, an0de,...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

No description provided by source. Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site :...

Tainos Webdesign (All Scripts) SQL/XSS/HTML Injection Vulnerability

No description provided by source...

All In One Control Panel 1.3.x cp_downloads.php did Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/22032/info All In One Control Panel is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

A-PDF All to MP3 Converter 2.0.0 (.wav) Buffer Overflow (seh)

No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 SEH overflow Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: = 2.0.0 Tested on: Win XP SP2 English Date: 29/01/2011 Author: m0nna Email: [email protected] triggering details: Open the...

eWebeditor Directory Traversal

No description provided by source. Application Info: Name: eWebeditor Version: all version Vulnerability Info: Type: Directory Traversal Risk: Medium Vulnerability: http://site.com/admin/ewebeditor/admin/upload.asp?id=16&dviewmode=&dir =./...

Scorched 3D <= 39.1 - Multiple Vulnerabilities (All-in-One) (PoC)

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include time.h include zlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous...

All Club CMS <= 0.0.2 - Remote DB Config Retrieve Exploit

No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...

vBulletin DoS - all version

No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...

phpMyAdmin 2.5.7 - Remote code injection Exploit

No description provided by source. / phpmy-explt.c written by Nasir Simbolon nasir kecapi com eagle kecapi com Jakarta, Indonesia June, 10 2004 A phpMyAdmin-2.5.7 exploite program. This is a kind of mysql server wrapper acts like a proxy except that it will sends a fake table name, when client...

A-PDF All to MP3 Converter 2.0.0 DEP Bypass

No description provided by source. Exploit Title: A-PDF All to MP3 Converter v.2.0.0 DEP Bypass Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 2.0.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Email: [email protected] Home: http://net-effects.blogspot.com Big...

PhotoADay Pad_selected Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11009/info It is reported that PhotoADay is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remot...

A-PDF All to MP3 Converter 1.1.0 Universal Local SEH Exploit

No description provided by source. !/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next...

ThinkSNS 储存型xss一枚

简要描述： rt. 详细说明： 对于swf文件 过分信任 通杀所有浏览器 测试代码 : http://demo.thinksns.com/t3/weiba/post2075 chrome firefox ie 10 可蠕虫。 漏洞证明： chrome firefox https://images.seebug.org/upload/201406/150142590b17fc5d7dedb7e685f9e1f2797b7c98...

WordPress All-In-One SEO Pack Vulnerabilities Patched

A web design firm has patched two privilege escalation vulnerabilities that could have led to cross-site scripting attacks in a popular WordPress plugin it manages. If left unpatched, the issue could leave potentially millions of websites vulnerable. The problem exists in old versions of the All ...

Phpbb Forum Denial of Service Vulnerability

!/usr/bin/perl @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@...

6: JSM policy not respected by deployed applications

It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to...

6: JSM policy not respected by deployed applications

It was found that Java Security Manager permissions configured via a policy file were not properly applied, causing all deployed applications to be granted the java.security.AllPermission permission. In certain cases, an attacker could use this flaw to circumvent expected security measures to...

AZL-6651 CVE-2013-4420 affecting package libtar for versions less than 1.2.20-8

Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...

AZL-34945 CVE-2013-4420 affecting package libtar for versions less than 1.2.20-11

Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...