ESET Cross Site Scripting

\ // /\ /\ / | \ \ | | | | / \ | \ | | http://www.eset.com/ | / / // / || / / / Cross Site Scripting Exploit Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Vulnerability: Cross Site Scripting ————————- 1. INFORMATION | ————————- Site:...

Microsoft Windows Media Player Arbitrary File Download (MS03-017; CVE-2003-0228)

Microsoft Windows Media Player is an application that is used to play various media files, such as those compressed with AVI, MP3, MPG formats and so on. Windows Media Player runs on the Microsoft Windows operating system. Windows Media Player has the ability to change its user interface and...

paFileDB 3.1 Cross Site Scripting

you can copy the exploit source from : http://www.hell-z0ne.org/pafiledb.txt + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ +======================================================================|| Title : paFileDB 3.1 Xss Vuln as Redirecting Method . || ! Author :...

Authentication flaw

The Staging Webservice "sitecore modules/staging/service/api.asmx" in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and 1 upload files, 2 download files, 3 list directories, and 4 clear the server cache via crafted SOAP requests with arbitra...

CVE-2009-4367

The Staging Webservice "sitecore modules/staging/service/api.asmx" in Sitecore Staging Module 5.4.0 rev.080625 and earlier allows remote attackers to bypass authentication and 1 upload files, 2 download files, 3 list directories, and 4 clear the server cache via crafted SOAP requests with arbitra...

HP LoadRunner XUpload.ocx ActiveX Control Arbitrary File Download

An arbitrary file download vulnerability exists in an HP LoadRunner ActiveX control. The vulnerability is due to a design flaw in a certain method. The method can be leveraged by attackers to execute arbitrary programs on the vulnerable host...

ISPWorker 1.23 File Disclosure

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd 90r0nt4l0 und3r9r0nd c0mmun1ty Gorontalo /...

ISPworker 1.23 - Remote File Disclosure

ISPworker 1.23 - Remote File Disclosure Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg ISPworker PoC : http://target/path/module/ticket/download.php?ticketid=../../../../../../../../../etc/passwd%00 http://target/path/module/ticket/download.php?filename=../../../../../../../../../etc/passwd...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3 'Symantec...

Zenturi ProgramChecker ActiveX Control Arbitrary File Download.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Zenturi...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Snapshot Viewer f...

PointComma <= 3.8b2 Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg PointComma = 3.8b2 Remote File Include Vulnerability Download Script : http://nchc.dl.sourceforge.net/project/pointcomma/pointcomma/ Dork : die"Hacking attempt"; :D Vuln :...

SMB Client File Download

Binary data 7021.pasl...

phpMyBackupPro 2.1 File Download

Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW phpMyBackupPro is a web-based MySQL...

Arbitrary File Download in phpMyBackupPro

Exploit for unknown platform in category web applications ========================================= Arbitrary File Download in phpMyBackupPro ========================================= Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected...

Arbitrary File Download in phpMyBackupPro

No description provided by source. Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW...

Internet Explorer File Download Extension Spoofing (MS04-024; CVE-2004-0420)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. On certain cases, when downloading a...

phpMyBackupPro - Arbitrary File Download

phpMyBackupPro - Arbitrary File Download Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIE...

phpMyBackupPro - Arbitrary File Download

Arbitrary File Download in phpMyBackupPro Name Arbitrary File Download in phpMyBackupPro Systems Affected phpMyBackupPro v 2.1 and possibly earlier versions site http://www.phpmybackuppro.net Author Amol Naik amolnaik4atgmail.com Date 16/11/2009 1. OVERVIEW phpMyBackupPro is a web-based MySQL...

Design/Logic Flaw

Incomplete blacklist vulnerability in browser/download/downloadexe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a "Content-Disposition: attachment" designation, as demonstrated by 1 .mht and 2 .mhtml files, which are...