1062 matches found
Dr.Web 4.x Virus Scanner Folder Name Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7022/info A buffer overflow vulnerability has been reported for Dr. Web virus scanner. The vulnerability is due to insufficient bounds checking when processing folder names. An attacker is able to exploit this vulnerabili...
Barracuda Spam Firewall 3.5.11.020, Model 600 - SQL Injection Vuln
No description provided by source. CVE Number: CVE-2008-1094 Vulnerability: SQL Injection Risk: Medium Attack vector: From Remote Vulnerability Discovered: 16th June 2008 Vendor Notified: 16th June 2008 Advisory Released: 15th December 2008 Abstract Barracuda Networks Spam Firewall is vulnerable ...
Netscape Enterprise Server 3.6 SP2/FastTrack Server 2.0.1 GET Request Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be executed remotely at this...
PHP Classifieds ADS (sid) Blind SQL Injection Vulnerability
No description provided by source. Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,,...
Ipswitch IMail 5.0.8/6.0/6.1 IMonitor status.cgi DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/914/info IMail includes a service called IMail Monitor which is used for local and remote performance measuring and diagnostics. It includes a small webserver operating on port 8181 to support web-based monitoring. One of...
TBDev.NET DR TakeProfEdit.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24923/info TBDev.NET DR is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the...
[SECURITY] Fedora 19 Update: ndjbdns-1.06-1.fc19
New djbdns: is a usable fork of djbdns. djbdns' is a Domain Name System originally written by the eminent author of Qmail, Dr D. J. Bernstein. This new version of djbdns is a complete makeover to the original sourcedjbdns-1.05 and is meant to make life a lot more pleasant. The notable changes so...
Internet Bug Bounty: SPDY memory corruption
A bug in the experimental SPDY implementation in nginx 1.5.10 was found, which might allow an attacker to corrupt worker process memory by using a specially crafted request, potentially resulting in arbitrary code execution CVE-2014-0088. The problem only affects nginx 1.5.10 on 32-bit platforms,...
x7chat 3.2 Cross Site Scripting
Exploit Title: x7chat 3.2 Cross-Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.x7chat.com Version : 3.2 Tested on: Windows Category: webapps Google Dork: intext:"Powered By X7 Chat" + Exploit : http:///x7chat/ This vulnerability affects /x7chat/. Discovered by:...
ChatNess 2.5 Session Fixation
Exploit Title: ChatNess 2.5 Session Fixation Script Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.chatness.us Version : 2.5 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Chatness" + Exploit : http:///chatness/chatness/chat.php Discovered by: Scripting...
litepublisher 5.72 Cross Site Scripting
Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...
Bigace 2.7.5 LFI / XSS / SQL Injection
Exploit Title: Bigace 2.7.5 Blind Sql Injection Bigace 2.7.5 Cross site scripting Bigace 2.7.5 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bigace/files/bigace2.7.5.zip Version : 2.7.5 Tested on: Windows Category: webapps Google Dork:...
Square 0.3.1 Cross Site Scripting
Exploit Title: Square 0.3.1 XSS Vulnerability Date: 2014 17 March Author: Dr.3v1l Vendor Homepage: http://readmoresystems.com Version : 0.3.1 Tested on: Windows Category: webapps Google Dork: inurl:"/?s=" + Exploit : http:///square.0.3.1/0.3.1/?s=XSS&submit=Submit&cmd=search + Demo : You can find...
Datalogicco CMS SQL Injection
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
CNZZ CMS Cross Site Scripting / SQL Injection
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
Ox Design Cross Site Scripting / SQL Injection
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
Palms 3.6 SQL Injection
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
Palms 3.6 Cross Site Scripting
1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...
Exclusive : Google Palestine domain hacked and defaced
Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...
Exclusive : Google Palestine domain hacked and defaced
Google has local domains for almost every country in the world. Just now some hackers from Palestine hacked into Google's Palestine domain and defaced it The message appearing on the defaced page says, "uncle google we say hi from Palestine to remember you that the country in google map not calle...