DotNetNuke DNNArticle Module 10.0 - SQL Injection

Title: DotNetNuke DNNArticle Module SQL Injection Vulnerability References: CVE-2013-5117 Discovered by: Sajjad Pourali Vendor http://www.zldnn.com/ , http://www.dnnarticle.com/‎ Vendor advisory: http://www.zldnn.com/Support/tabid/643/ctl/RecordList/mid/1691/ItemID/2979/Default.aspx Ticket iD:297...

Microsoft .NET Framework Multiple Vulnerabilities (2861561)

This host is missing an important security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WPS Office - 'Wpsio.dll' Stack Buffer Overflow

WPS Office Wpsio.dll Stack Buffer Overflow Vulnerability PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25140.tgz 1 Summary CVE number: CVE-2012-4886 Impact: High Vendor homepage: http://www.wps.cn Credit: Zhangjiantao of Hangzhou DPtech Technologies 2...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection Vulnerability

SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection

Hornbill Supportworks ITSM 1.0.0 - SQL Injection Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been...

Hornbill Supportworks ITSM 1.0.0 SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Adobe Flash Player 11.5.502.135 - Crash (PoC)

Adobe Flash Player 11.5.502.135 - Crash PoC Title : Adobe Flash Player 11,5,502,135 memory corruption Version : 11,5,502,135 Date : 2012-12-17 Vendor : http://www.adobe.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Internet Explorer 8 Windows 7 Author :...

Opera Web Browser 12.11 - Crash (PoC)

Title : Opera Web Browser 12.11 WriteAV Vulnerability Version : 12.11 Build 1661 and 12.12 Date : 2012-12-03 Vendor : http://www.opera.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : windows XP SP3 Author : coolkaveh Opera is a web browser and Internet suite...

Adobe Reader 10.1.4 - JP2KLib&CoolType Crash (PoC)

Title : Adobe Reader 10.1.4 JP2KLib&CoolType WriteAV Vulnerability Version : 10.1.4.38 Date : 2012-11-20 Vendor : http://www.adobe.com/ Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Author : coolkaveh...

Infin8 Shell Upload

Infin8 == Remote File Upload Vulnerability ------------------------------------------------------------------------------------------- Title : Infin8 == Remote File Upload Vulnerability Auth0r : Hack Center Security Team Discovered By : Net.W0lf Software Link : www.infin8design.com Impact : High...

Microsoft Publisher 2013 - Crash (PoC)

Microsoft Publisher 2013 - Crash PoC Title : Microsoft Publisher 2013 memory corruption Version : Microsoft Office Publisher professional Plus 2013 Date : 2012-11-11 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : Windows ...

Microsoft Publisher 2010 - Crash (PoC)

Title : Microsoft Office Publisher 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-25 Vendor : http://office.microsoft.com Impact : Med/High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : XP SP3 ENG Bug : ---- memory corruption during t...

Microsoft Office professional Plus 2010 Memory Corruption

memory corruption during the handling of the pub files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office professional Plus 2010 memory corruption Version : Microsoft Office professional Plus 2010 Date : 2012-10-25 Vendor : http://office.microsoft.com Impact :...

Layton Helpbox 4.4.0 SQL Injection

Layton Helpbox 4.4.0 Multiple SQL Injection Points by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to multiple SQL injection vulnerabilities. CVE number: CVE-2012-4971 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified:...

Microsoft Office Word 2010 Stack Overflow

StackOverflow during the handling of the doc files a context-dependent attacker can execute arbitrary code. Title : Microsoft Office Word 2010 Stack Overflow Version : Microsoft Office professional Plus 2010 Date : 2012-10-23 Vendor : http://office.microsoft.com Impact : Med/High Contact :...

RealPlayer 15.0.6.14 (.3GP) Arbitrary Code Execution POC

RealPlayer 15.0.6.14 suffers from Arbitrary Code Execution during handling a .3GP file Title : RealPlayer 15.0.6.14 .3GP Arbitrary Code Execution Version : 15.0.6.14 Date : 2012-10-18 Vendor : http://www.real.com/ Impact : High Contact : coolkaveh at rocketmail.com Twitter : @coolkaveh tested : X...

Unirgy uStoreLocator Magento Extension SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: SQL Injection product: Unirgy uStoreLocator - Magento extension vulnerable version: =2.0.1 impact: High homepage: http://www.unirgy.com/ found: 2012-06-18 by: K...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

Megabirlik Bilgi Islem Cross Site Scripting

---------------------------------------------------------------- Megabirlik Bilgi Islem Cross Site Scripting ---------------------------------------------------------------- Exploit Title : Megabirlik Bilgi Islem alert/0/ Greets To : | Amir | B3HZ4D | Packetstormsecurity.org | Exploit-db.com | |...

Plante Graffix SQL Injection

---------------------------------------------------------------- Plante Graffix SQL Injection ---------------------------------------------------------------- Exploit Title: Plante Graffix SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Site : http://net-w0lf.blogspot.com...