Microsoft WMITools - ActiveX Remote Command Execution

Microsoft WMITools - ActiveX Remote Command Execution Exploit-DB Notes: Original credit goes to "牛奶坦克" via WooYun: http://www.wooyun.org/bugs/wooyun-2010-01006 //run calc.exe var shellcode =...

Internet Explorer 8 CSS parsing vulnerability-vulnerability warning-the black bar safety net

Internet Explorer 8 is Microsoft launched a web browser, Internet Explorer 8 in parsing css when the presence of vulnerabilities may lead to remote code execution. This vulnerability was originally tick: the http://www.wooyun.org/bugs/wooyun-2010-0885 以 拒绝 服务 漏洞 报 给 exploit-db to:...

Foxit PDF Reader 4.1.1 - Title Stack Buffer Overflow (Metasploit)

$Id: foxittitlebof.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

IBM DB2, IBM Informix, ЛИНТЕР [Редковстречающиеся СУБД]

Intro- Буду краток: рассмотрим здесь особенности СУБД, которые попадаются на глаза довольно редко. Я расскажу о 3х из них: IBM DB2, IBM Informix и ЛИНТЕР. Также в приложении можно обнаружить эксплоиты к ним и подобранную информацию о таких субд как Apache CouchDB, Berkeley DB, CUBRID, H2,...

Новые уязвимости в Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS WASC-08: http://site/cms/templates/banner.php?bannerId=3Cscript3Ealertdocument.cookie3C/script3E SQL DB Structure Extraction WASC-13:...

Trixbox langChoice PHP Local File Inclusion

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ -- coding: utf-8 -- require 'msf/core' class...

Microsoft Internet Explorer 8 - CSS Parser Denial of Service

color:red; @import url"css.css"; @import url"css.css"; @import url"css.css"; @import url"css.css"; Exploit-DB Notes: Original credit goes to an unidentified researcher using WooYun anonymous account "路人甲". WooYun is a connection platform for vendors and security researchers:...

Microsoft Internet Explorer 8 - CSS Parser Denial of Service

Microsoft Internet Explorer 8 - CSS Parser Denial of Service color:red; @import url"css.css"; @import url"css.css"; @import url"css.css"; @import url"css.css"; Exploit-DB Notes: Original credit goes to an unidentified researcher using WooYun anonymous account "路人甲". WooYun is a connection platfor...

TFTPUtil GUI 1.4.5 - Denial of Service (Metasploit)

TFTPUtil GUI 1.4.5 - Denial of Service Metasploit Title: TFTPUtil GUI v1.4.5 Invalid Request DoS CVE-ID: OSVDB-ID: Author: Vuk Ivanovic Published: 2010-12-04 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see th...

CVE-2010-4300

creationtimestamp| type| source ---|---|--- 2010-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15676...

Alibaba Clone B2B 3.4 SQL injection vulnerability-vulnerability warning-the black bar safety net

Alibaba Clone B2B is a B2B marketplace trading script, Alibaba Clone B2B 3.4 version of the countrydetails. php existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: Exploit Title:Alibaba v3. 4 clone b2bcountrydetails.php SQL Injection Vulnerability Date:...

J-Integra v2. 1 1 remote code execution vulnerability-vulnerability warning-the black bar safety net

J-Integra is a powerful, enables Java and COM, and J2EE, and. NET compatible middleware. J-Integra is divided into J-Integra for COM, J-Integra for . NET and J-Integra for Exchange of three partial products. J-Integra v2. 1 1 A control in the presence of a remote code execution vulnerability that...

Alibaba Clone B2B 3.4 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Alibaba Clone B2B 3.4 SQL Injection Vulnerability ================================================= Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date:...

CVE-2010-4329: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the PMAlinkOrButton function in libraries/common.lib.php in the database db search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request...

GeneralProducts (index.php?page=) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ==================================================================== GeneralProducts index.php?page= Local File Inclusion Vulnerability ==================================================================== » Title : GeneralProducts...

FozzCom Shopping Cross Site Scripting / SQL Injection

Exploit Title:FozzCom shopping / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / / / / / / Pr!v8 Expl0iT AND t00l ALGERIAN HACKERS - NORTH-AFRICA SECURITY TEAM - ! FozzCom shopping & [email protected] / ! notice : Dr.0rYX: MY OLD EMAIL [email protected]...

E-Commerce By Ifthen.nl SQL Injection

====================================================================== E-commerce by ifthen.nl index.php?pid= SQL injection Vulnerability ====================================================================== Date : Nov,18/2010 Provider: http://www.ifthen.nl Script : Not For Free Author :...

Fozzcom Shopping 7.94 8.04 - Multiple Vulnerabilities

Fozzcom Shopping 7.94 8.04 - Multiple Vulnerabilities Exploit Title:FozzCom shopping / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / /...

vBulletin 4.0.8 - Persistent XSS via Profile Customization

No description provided by source. Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization Body: vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has i...

vBulletin 4.0.8 - Persistent XSS via Profile Customization

Exploit for php platform in category web applications ========================================================== vBulletin 4.0.8 - Persistent XSS via Profile Customization ========================================================== Body: vBulletin - Persistent Cross Site Scripting via Profile...