ApartmentSearch Insecure Cookie Handling / SQL Injection

|=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script name :ApartmentSearch link...

Opera Denial Of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

CVE-2010-0255

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2010-0255

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2009-3272

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service application crash via JavaScript code that calls eval on a long string composed of A/ sequences...

Adobe Acrobat and Reader Collab 'getIcon()' JavaScript Method Exploit and Report (CVE-2009-0927)

Hi everyone, I published some work I did concerning the adobe reader Collab.getIcon buffer overflow. You can find the package exploit/report/payload on: http://www.coromputer.net/CVE-2009-0927package.zip Cheers, Ivan Rodriguez Almuina kralor - HiC && Crpt...

Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling

Arcade Trade Script 1.0b - Authentication Bypass Insecure Cookie Handling ====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder:...

Microsoft Internet Explorer Crash

Irfan Asrar Set Attribute Crash : Tested with IE7 Vista IE6 XP2 IE6 XP3 function c var li = document.createElement"li"; li.setAttribute"value", "1"; li.value = "1";...

Logoshows BBS 2.0 (DD/ICH) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Logoshows BBS 2.0 DD/ICH Multiple Remote Vulnerabilities ========================================================== Logoshows BBS 2.0 DD vuln:...

MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ====================================================== MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln ====================================================== --------------------------------------------------------------- Message Bo...

MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications =============================================================== MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln ===============================================================...

MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...

D-Link CAPTCHA Bypass

D-Link Captcha Partially Broken May 12th, 2009 Hack-A-Day reported on D-Link’s new captcha system designed to protect against malware that alters DNS settings by logging in to the router using default administrative credentials. I downloaded the new firmware onto our DIR-628 to take a look, and...

PHP Site Lock 2.0 Insecure Cookie

-------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: --------...

Online Email Manager - Insecure Cookie Handling

Online Email Manager - Insecure Cookie Handling Online Email Manager Insecure Cookie Handling Vulnerability Author: Hussin X Home : WwW.IQ-TY.CoM email: darkangelg85atYahooDoTcom script : http://www.esoftpro.com/webscriptsonlineemailmanager.phps DorK : Powered by Online Email Manager exploit:...

Grestul SQL Injection

Grestul Sql Injection By Cookie bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.org Let's Go! \admin\login.php : $username = SafeAddSlashes$POST'username'; $passcode = SafeAddSlashesmd5$POST'passcode'; $time = time; $check = SafeAddSlashes$POST'setcookie'; $query = "SELECT...

Simple Machines Forums (BBCode) Cookie Stealing Vulnerability

No description provided by source. Author: Xianur0 BBCode of the smf not filtered properly specified urls: centersize=14pturl=javascript:alert'xss'Saltando Filtro :D.../url/size...

Simple Machines Forums (BBCode) Cookie Stealing Vulnerability

Exploit for unknown platform in category web applications ============================================================= Simple Machines Forums BBCode Cookie Stealing Vulnerability ============================================================= Author: Xianur0 BBCode of the smf not filtered properly...

NewsCMSLite - Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/33467/info NewsCMSLite is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain unauthorized access to the affected...