CVE-2010-1365

creationtimestamp| type| source ---|---|--- 2010-02-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11600 2010-03-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11837...

Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

ProMan 0.1.1 - Multiple File Inclusions

ProMan 0.1.1 - Multiple File Inclusions ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI:...

CVE-2010-1537

creationtimestamp| type| source ---|---|--- 2010-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11585...

JAG (Just Another Guestbook) <= 1.14 Information Disclosure Vulnerability

JAG is prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Web Server Creator - Web Portal v 0.1 Multi Vulnerability

Exploit for unknown platform in category web applications ========================================================= Web Server Creator - Web Portal v 0.1 Multi Vulnerability =========================================================...

Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)

Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...

SphereCMS 1.1 Alpha SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== SphereCMS 1.1 Alpha SQL Injection Vulnerability =============================================== AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor:...

AST-2010-002: Dialplan injection vulnerability

Asterisk Project Security Advisory - AST-2010-002 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Dialplan injection vulnerability |...

SphereCMS Blind SQL Injection Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities

VUPEN Security Research - OpenOffice.org Word Document Handling Heap Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- OpenOffice.org OO.o or OOo, commonly known as OpenOffice, is an open source software application suite available for a number...

Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow

source: https://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code ...

Malware Infested PDFs Ruled 2009 Exploits

A newly released report shows that based on more than a trillion Web requests processed in 2009, the use of malicious PDF files exploiting flaws in Adobe Reader/Adobe Acrobat not only outpaced the use of Flash exploits, but also, grew to 80% of all exploits the company encountered throughout the...

CVE-2010-0678

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11452...

CVE-2010-0691

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11445...

Calendarix 0.8.20071118 - SQL Injection

Calendarix 0.8.20071118 - SQL Injection Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution ...

Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

Nokia Symbian S60v3 web browser DoS Exploits

Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...

HASHE! Solutions - Multiple SQL Injections

HASHE! Solutions - Multiple SQL Injections HASHE! Multiple Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : HASHE .:. Bug Type : Sql...

MS10-007: Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)

The ShellExecute API function on the remote host fails to properly validate URLs, which could result in arbitrary code execution. A remote attacker could exploit this by tricking a user into making an application e.g. web browser pass specially crafted data to the vulnerable function, resulting i...