Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SET

The module exploits an sql injection flaw in the CREATECHANGESET procedure of the PL/SQL package DBMSCDCPUBLISH. Any user with execute privilege on the vulnerable package can exploit this vulnerability. By default, users granted EXECUTECATALOGROLE have the required privilege. Module Options msf u...

Imageview <= 6.x Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Imageview = 6.x Multiple Remote Vulnerabilities ================================================ || || | || o,7 || . o7 || 4||| ow, : / /...

Microsoft IIS 6.0 - ASP Stack Overflow Stack Exhaustion (Denial of Service) (MS10-065)

Affected Vendors Microsoft Affected Products Only Microsoft IIS 6.0 was tested successfully On a Windows Server 2003 SP2 System The System was NOT updated to the latest patches during testing. Since tests “in the wild” have shown the attack to be real this advisory was released. Vulnerability...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...

JE CMS 1.0.0 - Authentication Bypass

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | userLogin; userLogin function is in administrator\library\functions.php. in lines 129-139: if $userName == '' || $password == '' $errorMessage = JEMISMATCHUSERNAMEPASSWORD; else // check the database and see if the...

Microsoft Internet Explorer - MSHTML Findtext Processing

Microsoft Internet Explorer - MSHTML Findtext Processing /textarea function Search var textinput = document.getElementById"Abysssec"; var textRange = textinput.createTextRange; textRange.findTextunescape"%u4141",-1; textRange.selectdocument.getElementById'd'; document.body.appendChildtextinput;...

Programs Script Reinstall admin login Vulnerabilities

Exploit for php platform in category web applications ===================================================== Programs Script Reinstall admin login Vulnerabilities ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Barracuda Networks Spam Virus Firewall 4.1.1.021 - Remote Configuration Retrieval

Barracuda Networks Spam Virus Firewall 4.1.1.021 - Remote Configuration Retrieval !/bin/bash Exploit by ShadowHatesYou [email protected] The resulting output is an SQL dump containing the Barracuda's configuration, which includes goodies such as: The administrative password for the...

ZenPhoto - Config Update / Command Execution

body font-family:tahoma;font-size:14px "; echo "Zen Photo Image Gallery 1.3 Reset admin Password By : Abysssec @ Inc www.Abysssec.com After click on below , if target will can connect to your MysqlHost : You Must view 'GO !'...

VisualSite CMS 1.3 - Multiple Vulnerabilities

VisualSite CMS 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite...

VisualSite CMS 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite CMS Multiple Vulnerabilities Affected Version :...

Adobe Shockwave Director tSAC Chunk Memory Corruption

Exploit for windows platform in category dos / poc ===================================================== Adobe Shockwave Director tSAC Chunk Memory Corruption ===================================================== Title : Adobe Shockwave Director tSAC Chunk memory corruption Version : dirapi.dll...

MP3 Workstation 9.2.1.1.2 - Local Overflow (SEH) (Metasploit)

Exploit Climatisée fermee la Porte DeRrière Twaa xDeii Title: MP3 Workstation Version 9.2.1.1.2 buffer overflow exploit MSF Sanjeev Gupta san.gupta86atgmail.com http://www.exploit-db.com/exploits/15013/ Author: MadjiX Sec4ever.com WinXp Fr require 'msf/core' class Metasploit3 'MP3 Workstation...

PeaZIP 2.6.1 - Zip Processing Command Injection (Metasploit)

$Id: peazipcommandinjection.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Word 2007 SP2 - sprmCMajority Buffer Overflow

Microsoft Word 2007 SP2 - sprmCMajority Buffer Overflow ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub11-microsoft-office-word-sprmcmajority-buffer-overflow/...

festos CMS 2.3b - Multiple Vulnerabilities

festos CMS 2.3b - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | query$query; poc: in admin.php page: username: admin' or '1'='1 password: admin' or '1'='1 1.2- in festoszdologin.php: $query = "SELECT vendorID FROM...

Month Of Abysssec Undisclosed Bugs - HP OpenView NNM

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' ''' Title : HP OpenView NNM webappmon.exe execvpnc Remote Code Execution Version : OpenView Network Node Manager 7.53 Analysis : http://www.abysssec.com Vendor :...

CVE-2010-4907

creationtimestamp| type| source ---|---|--- 2010-09-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34611...

HP OpenView NNM webappmon.exe execvp_nc Remote Code Execution

Exploit for windows platform in category dos / poc ============================================================= HP OpenView NNM webappmon.exe execvpnc Remote Code Execution ============================================================= Title : HP OpenView NNM webappmon.exe execvpnc Remote Code...