News Rover 12.1 Rev 1 - Stack Overflow (2)

!/usr/bin/perl =============================================================================================== News Rover 12.1 Rev 1 Remote Stack Overflow perl exploit By Umesh Wanve [email protected] ==============================================================================================...

Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22705/info Active Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

News Rover 12.1 Rev 1 Remote Stack Overflow Exploit (perl)

Exploit for unknown platform in category local exploits ========================================================== News Rover 12.1 Rev 1 Remote Stack Overflow Exploit perl ========================================================== !/usr/bin/perl...

Oracle 9i/10g - DBMS_METADATA.GET_DDL SQL Injection

!/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

Exploit for multiple platform in category remote exploits ========================================================= Oracle 9i/10g DBMSMETADATA.GETDDL SQL Injection Exploit ========================================================= !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Gran...

Oracle 10g - KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission

!/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato http://rawlab.mindcreations.com DATE...

Oracle 10g KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission Exploit

Exploit for multiple platform in category remote exploits ================================================================= Oracle 10g KUPV$FT.ATTACHJOB Grant/Revoke dba Permission Exploit ================================================================= !/usr/bin/perl Remote Oracle...

Oracle 10g KUPV$FT.ATTACH_JOB Grant/Revoke dba Permission Exploit

No description provided by source. !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16294 AUTHOR: Andrea "bunker" Purificato...

Apple Mac OSX 10.4.8 - ImageIO GIF Image Integer Overflow

source: https://www.securityfocus.com/bid/22630/info Apple Mac OS X ImageIO is prone to an integer-overflow vulnerability because it fails to handle specially crafted image files. A remote attacker can exploit this issue to cause denial-of-service conditions and potentially to execute code, but...

News File Grabber 4.1.0.1 - Subject Line Stack Buffer Overflow (1)

source: https://www.securityfocus.com/bid/22617/info News File Grabber is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows...

WebTester 5.0.20060927 - typeID SQL Injection

WebTester 5.0.20060927 - typeID SQL Injection source: https://www.securityfocus.com/bid/22559/info WebTester is prone to multiple input-validation issues, including multiple cross-site scripting and multiple SQL-injection issues, because the application fails to properly sanitize user-supplied...

Fullaspsite ASP Hosting Site - 'listmain.asp?cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly sanitize user-supplied input. A successful exploit of these...

Tagit! Tagit2b 2.1.B Build 2 - tagminverify.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminverify.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - CONFIGerrmsg.inc.php?configpath Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

WordPress 1.x2.0.x - Templates.php Cross-Site Scripting

WordPress 1.x2.0.x - Templates.php Cross-Site Scripting source: https://www.securityfocus.com/bid/22534/info WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

[Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)

There is an interesting logic flaw in Mozilla Firefox web browser. The vulnerability allows the attacker to silently redirect focus of selected key press events to an otherwise protected file upload form field. This is possible because of how onKeyDown / onKeyPress events are handled, allowing th...

[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification

After some research, I can offer this clarification: 1 The MSIE 7 attack vector I described is a distinctive, new vulnerability that differs from the attack reported by Charles McAuley and Bart van Arnhem. Attacks described by them were fixed in MSIE7 although MSIE6 is still exposed to the origin...

oracle-sql.txt

!/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: http://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker" Purificato...

Oracle 9i/10g DBMS_EXPORT_EXTENSION SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: http://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker"...

Oracle 9i/10g - DBMS_EXPORT_EXTENSION SQL Injection

!/usr/bin/perl Remote Oracle dbmsexportextension exploit any version Grant or revoke dba permission to unprivileged user Tested on Oracle 10g - Release 10.2.0.1.0 Oracle 9i - Release 9.2.0.2.0 REF: https://www.securityfocus.com/bid/17699 AUTHOR: Andrea "bunker" Purificato...