INFINICART - search.asp?search Cross-Site Scripting

INFINICART - search.asp?search Cross-Site Scripting source: https://www.securityfocus.com/bid/21043/info Infinicart is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...

Microsoft Internet Explorer 7 - Popup Address Bar Spoofing

Microsoft Internet Explorer 7 - Popup Address Bar Spoofing function StartTest var padding = ''; for i=0 ; i milw0rm.com 200...

Microsoft Internet Explorer 6 - 'Internet.HHCtrl' Heap Overflow

// MoBB Demonstration function Demo var a = new ActiveXObject"Internet.HHCtrl.1"; var b = unescape"XXXX"; while b.length Clicking the button below may crash your browser! milw0rm.com 2006-07-07...

RevilloC MailServer 1.21 (USER) Remote Buffer Overflow Exploit PoC

No description provided by source. !/usr/bin/perl -w revilloC mail server PoC exploit for xp sp1 Discovered securma massine from MorX Security Research Team http://www.morx.org. RevilloC is a MailServer and Proxy v 1.21 http://www.revilloC.com The mail server is a central point for emails coming ...

n8cms 1.1 & 1.2 version Sql Эnjection And XSS

----------------------------------------------------------------- n8cms 1.1 & 1.2 version Sql njection And XSS Site:http://www.nathanlandry.com Demo:http://www.nathanlandry.com/n8cmsv1.1/ Credit : Liz0ziM webpage:www.biyosecuerity.com Mail :[email protected]...

BlogPHP 1.0 - index.php SQL Injection

BlogPHP 1.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/16269/info BlogPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

[KAPDA::#14] - PHPPost XSS and HTML Injection

KAPDA New advisory Vendor: http://www.php-post.co.uk/ Vulnerable Version: v1.0 Bug: XSS and HTML Injection Exploitation: Remote with browser Description: -------------------- PHPP is a free message board powered by PHP and MySQL. Vulnerability: -------------------- HTML Injection: The software do...

Glider collectn kill 1.0.0.0 - Buffer Overflow (PoC)

Glider collectn kill 1.0.0.0 - Buffer Overflow PoC / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

OpenSSL Version Rollback and Weak Cryptographic Algorithm Vulnerabilities

OpenSSL contains vulnerabilities that could allow an unauthenticated, remote attacker to bypass security restrictions. The first vulnerability CVE-2005-2969 affects any application using a SL/TLS server implementation provided by OpenSSL versions 0.9.7g and prior. If these implementations have...

SQL injection & XSS in phpoutsourcing Noah's classifieds

Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...

WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service

WhitSoft Development SlimFTPd 3.17 - Remote Denial of Service // source: https://www.securityfocus.com/bid/14723/info SlimFTPd is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions. The problem presents itself duri...

Gaim 1.2.1 - URL Handling Remote Stack Overflow

Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...

Hosting Controller 0.6.1 - User Registration (1)

Domain: Username: INPUT type="hidden" name="choice" value="1"...

BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit (2)

Exploit for unknown platform in category remote exploits ================================================================ BakBone NetVault 6.x/7.x Remote Heap Buffer Overflow Exploit 2 ================================================================ / for more informations...

AWStats 6.4 - Denial of Service

AWStats 6.4 - Denial of Service !/usr/bin/perl Summarized the advisory www.ghc.ru GHC: /str0ke 0 Exploitable example raw log plugin: Attacker can read sensitive information http://server/cgi-bin/awstats-6.4/awstats.pl?pluginmode=rawlog&loadplugin=rawlog 1 Perl code execution. This script...

DelphiTurk FTP v1.0 Passwords to Local Users Exploit

No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...

-= Unl0ck Team Security Advisory =-

-= Unl0ck Team Security Advisory =- | | | | | | / | | / | | / / / | |/ / | |/ / | | / | | / | | | / / | Y Y |/|| // / | || /|| / / / / / / / / ... the best way of protection is attack http://unl0ck.void.ru Advisory : 10 by unl0ck team Product : WinRAR = 3.41 Vendor : http://rarlabs.com Date :...

Linux Kernel <= 2.6.9 <= 2.4.28 vc_resize int Local Overflow Exploit

No description provided by source. / vcresize int overflow Copyright Georgi Guninski Cannot be used in vulnerability databases / include stdio.h include stdlib.h include sys/types.h include sys/stat.h include fcntl.h include linux/vt.h include sys/vt.h include sys/ioctl.h include string.h include...

ie6-file-detection.txt

Affected Software : Microsoft Internet Explorer Vulnerability : Local File Detection Tested On : MS IE 6.0 SP1, Win2K SP4, up-to-date according to windowsupdate.com Discovered by : Gregory R. Panakkal Overview ======== This security vulnerability in Internet Explorer allows remote attackers to...

Apple Mac OSX Adobe Version Cue - Local Privilege Escalation (Bash)

Apple Mac OSX Adobe Version Cue - Local Privilege Escalation Bash Proof of concept: haven: fintler$ cd haven: fintler$ id uid=502fintler gid=500fintler groups=500fintler haven: fintler$ echo "cp /bin/sh /Users/$USER;chmod 4755 /Users/$USER/sh;chown root /Users/$USER/sh" productname.sh haven:...