ZipExplorer 7.0 Denial Of Service

!/usr/bin/python Title: ZipExplorer 7.0 .zar DoS Advisory: http://www.corelan.be:8800/advisories.php?id=10-045 Author: TecR0c - http://tecninja.net/blog Found by: TecR0c - http://twitter.com/TecR0c Date: June 1st, 2010 Download: http://home.online.no/arnholm/org/exe/ZipX70sh.exe Platform: Windows...

Joomla! Component ChronoConnectivity - Blind SQL Injection

Exploit Title: Joomla Component ChronoConnectivity Date: 01, June 2010 Author: mlk Renan Software Link: http://bugsec.googlecode.com/files/joomlachronoconnectivity.zip Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoConnectivity comchronoconnectivity - Blind SQL Injection...

CVE-2010-1872

creationtimestamp| type| source ---|---|--- 2010-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33870 2025-06-18 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrvvsykqus2c...

Microsoft IIS 5.0 IDQ Path Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft II...

Design/Logic Flaw

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

VulnCheck KEV: CVE-2008-7168

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control UUUpgrade.ocx 3.0.2.12 allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009...

Heap overflow

Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service hang or crash via a crafted zlib compressed stream that triggers a...

Adobe Patch Day set for June 9

Adobe’s first ever quarterly patch for the Reader and Acrobat product lines is set for June 9, the same day Microsoft is scheduled to deliver its batch of security updates. As previously announced, Adobe plans to deliver security updates for Adobe Reader and Acrobat versions 7.x, 8.x, and 9.x for...

Apple iTunes 8.1.1 (ITMS) Multiple Protocol Handler BOF Exploit (meta)

No description provided by source. $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/...

Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

Apache mod_dav / svn Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ===================================================== Apache moddav / svn Remote Denial of Service Exploit ===================================================== furoffyourcat.pl Apache moddav / svn Remote Denial of Service Exploit by kcope / Jun...

CVE-2009-1752

exJune Office Message System 1 does not properly restrict access to 1 configure.asp and 2 addmessage2.asp, which allows remote attackers to gain privileges a direct request. NOTE: some of these details are obtained from third party information...

FreeBSD 7.07.1 - ktimer Local Privilege Escalation

FreeBSD 7.07.1 - ktimer Local Privilege Escalation / bsd-ktimer.c Copyright c 2008 by FreeBSD = 7.0 local kernel root exploit by christer/mu-b - Mon 2 June 2008 - Tested on: FreeBSD 7.0 FreeBSD 7.1 - Private Source Code -DO NOT DISTRIBUTE - http://www.bsdcitizen.org/ -- BSDCITIZEN 2008!@$! / defi...

WebBlizzard CMS 'index.php' SQL注入漏洞

BUGTRAQ ID: 30074 CNCAN ID：CNCAN-2008070701 WebBlizzard CMS是一款基于PHP的WEB应用程序。 WebBlizzard CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebBlizzard CMS 目前没有解决方案提供： http://www.webblizzard.de/ /usr/bin/perl |+| Vendor...

CMS WebBlizzard (index.php page) Blind SQL Injection Exploit

No description provided by source. /usr/bin/perl |+| Vendor Not Notified |+| Author: Bl@ckbe@rD |+| Discovered On: 10 june 2008 |+| greetz: InjEctOrs , underz0ne crew --//-- -- CMS webBlizzard Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print...

CMS WebBlizzard - 'index.php' Blind SQL Injection

/usr/bin/perl |+| Vendor Not Notified |+| Author: Bl@ckbe@rD |+| Discovered On: 10 june 2008 |+| greetz: InjEctOrs , underz0ne crew --//-- -- CMS webBlizzard Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

No description provided by source. usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop Deluxe 4.x...

AShop Deluxe 4.x (catalogue.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= AShop Deluxe 4.x catalogue.php cat Remote SQL Injection Exploit ================================================================= usr/bin/perl use LWP::UserAgent; use...

Keller Web Admin CMS 0.94 Pro Local File Inclusion Vulnerability

No description provided by source. =========================================================== Keller Web Admin CMS Local File Inclusion Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...