Lucene search
+L

2415 matches found

exploitpack
exploitpack
•added 2009/05/15 12:00 a.m.•24 views

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion

Joomla! Component ArtForms 2.1 b7 - Remote File Inclusion ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 /...

0.7AI score
SaveExploits0
zdt
zdt
•added 2009/05/15 12:00 a.m.•27 views

Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities ====================================================================== ArtForms 2.1b7 remote file...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/15 12:00 a.m.•32 views

Joomla ArtForms 2.1b7 Remote File Inclusion

ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 / ----------------------------------------------------------------------------------...

0.6AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/05/15 12:00 a.m.•24 views

Joomla Component ArtForms 2.1 b7 Remote File Inclusion Vulnerabilities

No description provided by source. ArtForms 2.1b7 remote file includes From Turkey iskorpitx O bir dünya markası Asla Taklit Edilemez // swfmovie.php - swf output and config / output captcha image / / output captcha mp3 /...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/05/15 12:00 a.m.•27 views

D-Link Products Captcha Bypass Vulnerability

Exploit for hardware platform in category remote exploits ============================================ D-Link Products Captcha Bypass Vulnerability ============================================ D-Link Captcha Bypass ------------------------------------- D-Link released new firmware designed to...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/05/15 12:00 a.m.•47 views

D-Link - Captcha Bypass

D-Link Captcha Bypass ------------------------------------- D-Link released new firmware designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. There is a flaw in the captcha authentication system that allows an attacker ...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2009/05/14 12:00 a.m.•34 views

D-Link CAPTCHA Bypass

D-Link Captcha Partially Broken May 12th, 2009 Hack-A-Day reported on D-Link’s new captcha system designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. I downloaded the new firmware onto our DIR-628 to take a look, and...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2009/04/24 12:00 a.m.•120 views

Formshield Captcha - Older Version vulnerable to replay attacks

Replay attack on CAPTCHA Libraries Summary A CAPTCHA implementation that we tested were found to be vulnerable to replay attacks. The attack is explained in detail for Formshield – A popular DOT NET CAPTCHA implementation. NOTE: We discovered this during a Black Box engagement with one of our...

0.1AI score
SaveExploits0
myhack58
myhack58
•added 2009/03/05 12:00 a.m.•24 views

The use of injection techniques to attack the mail server and defenses and(II)-vulnerability warning-the black bar safety net

IIIinformation leaks Use of the technique: IMAP injection User Authentication Required: No The use of IMAP injection can be obtained using other methods can not get IMAP server information. If the user can the command“CAPABILITY”is injected into the parameter“mailbox”: |...

9AI score
SaveExploits0
Prion
Prion
•added 2009/02/19 4:30 p.m.•26 views

Directory traversal

Directory traversal vulnerability in captcha/captchaimage.php in the RWCards comrwcards 3.0.11 component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter...

6.8CVSS7.7AI score0.12284EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/19 12:00 a.m.•2 views

CVE-2008-6172: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in captcha/captchaimage.php in the RWCards comrwcards 3.0.11 component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter...

6.8CVSS6.2AI score0.12284EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2009/01/31 12:00 a.m.•44 views

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. E107: обход CAPTCHA, межсайтовый скриптинг...

4.3CVSS1.5AI score0.0548EPSS
SaveExploits2References5Affected Software4
Packet Storm
Packet Storm
•added 2009/01/30 12:00 a.m.•60 views

Pligg 9.9.5 Cross Site Request Forgery

Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...

0.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/01/29 12:00 a.m.•61 views

Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass html !-- Remove this iframe from this file and place it on a site that you want to force people to vote for. Change these...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/01/29 12:00 a.m.•753 views

Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass

Exploit for unknown platform in category web applications ===================================================== Pligg 9.9.5 XSRF Protection Bypass and Captcha Bypass ===================================================== Written By Michael Brooks Pligg - XSRF Protection Bypass and Captcha Bypass...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2009/01/29 12:00 a.m.•671 views

Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass

Pligg CMS 9.9.5 - Cross-Site Request Forgery Protection Bypass Captcha Bypass Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss";...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/01/29 12:00 a.m.•475 views

Pligg CMS 9.9.5 - Cross-Site Request Forgery / Protection Bypass / Captcha Bypass

Written By Michael Brooks Special thanks to str0ke! Pligg - XSRF Protection Bypass and Captcha Bypass affects 9.9.5 XSRF Protection Bypass ' width="0%" height="0%" var pliggstorytovotefor="/story.php?title=pliggxss"; function r var Z=false; ifwindow.XMLHttpRequest try Z=new XMLHttpRequest...

5.8AI score
SaveExploits0
NVD
NVD
•added 2009/01/28 3:30 p.m.•22 views

CVE-2008-5995

Cross-site scripting XSS vulnerability in the freeCap CAPTCHA srfreecap extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.01065EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2009/01/28 3:00 p.m.•35 views

CVE-2008-5995

Cross-site scripting XSS vulnerability in the freeCap CAPTCHA srfreecap extension before 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01065EPSS
SaveExploits0References5
CVE
CVE
•added 2009/01/28 3:00 p.m.•56 views

CVE-2008-5995

CVE-2008-5995 is an XSS vulnerability in the TYPO3 freeCap CAPTCHA (sr_freecap) extension prior to 1.0.4. It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the vulnerability, but do not provide explicit exploit details or a ...

4.3CVSS5.9AI score0.01065EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder