Microsoft Word - Record Parsing Buffer Overflow (MS09-027)

Microsoft Word - Record Parsing Buffer Overflow MS09-027 MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcod...

Xampp 1.7.3 CSRF and Password disclosure Vulnerability

Exploit for php platform in category web applications ====================================================== Xampp 1.7.3 CSRF and Password disclosure Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

CVE-2010-2429

Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...

Cross site scripting

Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...

DotNetNuke - Arbitrary File Upload

DotNetNuke - Arbitrary File Upload DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Original discovery and credit goes to: Alireza Afzali of ISCN Team Fou...

Asset Manager 1.0 Shell Upload

Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel Software Link: http://www.sourcecodeonline.com/details/assetmanagercmsandfileeditor.html Price : $35.00 Founded By NetOwn3r & Shichemt Alen Hi All Muslims Brothers & All Hackers Exploit :...

CMS Made Simple 1.7 CSRF Vulnerability

No description provided by source. Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software CMS Made Simple 1.7 Category CMS / Portals Site p4ge http://server/demo/2/10/CMSMadeSimple Plateform php Greetz to Gaurav, Prateek, Vivek, Sanja...

eDisplay Personal FTP Server 1.0.0 Stack Buffer Overflow

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

SweetRice 0.6.0 Remote File Inclusion Vulnerabilities

===================================================== SweetRice 0.6.0 Remote File Inclusion Vulnerabilities ===================================================== + SweetRice 0.6.0 Remote File Inclusion Vulnerabilities 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Mandriva Update for drakxtools MDVA-2010:082 (drakxtools)

Check for the Version of drakxtools OpenVAS Vulnerability Test Mandriva Update for drakxtools MDVA-2010:082 drakxtools Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Eshbel Priority MarketGate module Cross Site Scripting Vulnerability

========================================= Yaniv Miron aka "Lament" Advisory Feb 27, 2010 Eshbel Priority MarketGate module Cross Site Scripting Vulnerability ========================================= ===================== I. BACKGROUND ===================== Priority’s ERP The features listed belo...

Mandriva Update for aria2 MDVA-2010:077 (aria2)

Check for the Version of aria2 OpenVAS Vulnerability Test Mandriva Update for aria2 MDVA-2010:077 aria2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Security Advisory MDVSA-2009:322 (mono)

The remote host is missing an update to mono announced via advisory MDVSA-2009:322. OpenVAS Vulnerability Test $Id: mdksa2009322.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:322 mono Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

PHP Inventory v1.2 Remote (Auth Bypass) SQL Injection Vulnerabiity

Exploit for unknown platform in category web applications ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity ================================================================== PHP Inventory v1.2 Remote Auth Bypass SQ...

iWeb HTTP Server - Directory Traversal

iWeb HTTP server Directory Transversal Vulnerability Found By: mrme Download: http://www.ashleybrown.co.uk/iweb/ Tested On: Windows XPSP3 POC: http://server/..%5C..%5C..%5Cboot.ini...

Websense Email Security DoS

No description provided by source. Security Advisory NSOADV-2009-002 Title: Websense Email Security Web Administrator DoS Severity: Low Advisory ID: NSOADV-2009-002 Found Date: 28.09.2009 Date Reported: 01.10.2009 Release Date: 20.10.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de...

asaher pro 1.0.4 - Remote Database Backup

asaher pro 1.0.4 - Remote Database Backup ::::::::::::::::::::::::::::::::::::::: found by alnjm33 my site : http://sec-war.com/cc/ mail:alnjm33athotmail.com :::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::::::::::Re: asaher pro v1.0.4 Remote Database Backup...

PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or...

Pixaria Gallery 2.3.5 (file) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Pixaria Gallery 2.3.5 file Remote File Disclosure Exploit =========================================================== ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . ...