Webcat Multiple Blind SQL Injection Vulnerabilities

No description provided by source. Exploit Title: Webcat - Two Blind SQL Injection Vulnerabilities Google Dork: allinurl: scwebcat/ecat/cmsview.php Date: 6/23/2011 Author: w0rd w0rdatNULL0x00.com Software Link: http://webcat.sourceforge.net/ Tested on: Linux/Windows 7 Vulnerable Parameters: webid...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

No description provided by source. !/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed...

al3jeb script Remote Login Bypass Exploit

No description provided by source. '/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r cr4wl3r!linuxmail.org ! Date: 19.01.201...

Absolute News Manager .NET 5.1 getpath.aspx Direct Request Error Message Information

No description provided by source. source: http://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal...

WordPress Photoracer plugin <= 1.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Photoracer plugin = 1.0 SQL Injection Vulnerability Google Dork: inurl:wp-content/plugins/photoracer/viewimg.php Date: 2011-08-26 Author: evilsocket evilsocket at gmail dot com Software Link: http://wordpress.org/extend/plugins/photorace...

Supernews <= 2.6.1 (noticias.php cat) SQL Injection

No description provided by source. Supernews = 2.6.1 noticias.php cat Remote SQL Injection Google Dork: intext:2003 - 2004 : SuperNews : Todos os direitos reservados Bug discovered by Pr0T3cT10n, [email protected] Date: 31/05/2012 Version: 2.6.1 Software Link:...

OneFileCMS - Failure to Restrict URL Access

No description provided by source. Exploit Title: OneFileCMS - Failure to Restrict URL Access Date: 12th March 2012 Author: Abhi M Balakrishnan Software Link: https://raw.github.com/rocktronica/OneFileCMS/f265961d0646890c9efe05b93983124abc18c56e/onefilecms.php Version: upto 1.1.4 Tested on:...

Winamp <= 5.21 (Midi File Header Handling) Buffer Overflow PoC

/ Winamp 5.21 - Midi Buffer Overflow inmidi.dll PoC coded by: BassReFLeX Date: 19 Jun 2006 / include stdio.h include stdlib.h include string.h void usagechar file; char header = \x4D\x54\x68\x64\x00\x00 \x00\x06\x00\x00\x00\x01 \x00\x60\x4D\x54\x72\x6B \x00\x00; char badc0de =...

Link Bid Script 1.5 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. + Link Bid Script 1.5 Multiple Remote SQL Injection + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Remote SQL Injection - Note : For PoC 2 you need administrative rights. Po...

Joomla Component Multiple Map com_multimap Local File Inclusion Vulnerability

============================================================================================================== o Joomla Component Multiple Map Local File Inclusion Vulnerability Software : commultimap version 1.0 Vendor : http://joomlacomponent.inetlanka.com/ Author : AntiSecurity NoGe Vrs-hCk...

Flash Player (Flash6.ocx) AllowScriptAccess DoS PoC

No description provided by source. !-- Title : Flash Player Flash6.ocx AllowScriptAccess DoS PoC Found By : DrIDE Tested on : Windows XPSP3 VM + IE7 COM Object ID : D27CDB6E-AE6D-11cf-96B8-444553540000 Shockwave Flash Object COM Object Filename : C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx File...

Ezhometech Ezserver 6.4 Stack Overflow Exploit

No description provided by source. Exploit Title: Ezhometech EzServer =6.4 Stack Overflow Vulnerability Author: modpr0be Contact: researchatSpenteradotcom Platform: Windows Tested on: Windows XP SP3 OptIn, Windows 2003 SP2 OptIn Software Link: http://www.ezhometech.com/buyezserver.htm References:...

Nukedit CMS <= 4.9.6 Unauthorized Admin Add Exploit

No description provided by source. KAPDA - Security Science Researchers Institute Advisory : http://www.kapda.ir/advisory-337.html Vendor : http://www.nukedit.com/ What is : Nukedit is a Free Content Management Vulnerability : Unauthorized Admin Add Exploit if register.asp be enable! Discovered :...

DynPG 4.2.0 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22703 Reference: http://www.htbridge.ch/advisory/lfiindynpg.html Product: DynPG Vendor: dynpg.org http://www.dynpg.org/ Vulnerable Version: 4.2.0 Vendor Notification: 16 November 2010 Vulnerability Type: Local File Inclusion Status: Fixed by...

FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

No description provided by source. Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be...

Xynph 1.0 USER Denial of Service Exploit

No description provided by source. Exploit Title: Xynph 1.0 USER Denial of Service Exploit Date: 04.01.2011 Author: freakout Version: 1.0 Tested on: Windows XP SP3 Type: DOS/POC Greetings: anco, mahjong, puddy, st!x, war10ck, fraggle, DarthShredder, krzym, starslayer, db E-Mail: [email protected]...

Oracle 9i/10g Database Remote Network Authentication Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35680/info Oracle Database is prone to a remote vulnerability in Network Authentication. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this...

FoxPlayer 2.3.0 (.m3u) Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl Title: FoxPlayer Version 2.3.0 .m3u Local BOF PoC Download: http://www.foxmediatools.com/products/foxplayer.html Tested on WinXP Pro SP2 Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Greetz: offsec and inj3ct0r teams my $junk= \x4...

virtual support office-xp <= 3.0.29 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Virtual Support Office-XP Multiple Vulnerabilities. Vendor: www.vso-xp.com Vulnerable Version: 3.0.29, 3.0.27 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

Hycus CMS 1.0.1 - Multiple Cross Site Request Forgery Vulnerabilities

No description provided by source. !--- Title: Hycus CMS 1.0.1 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 26 Aug 2010 07:53:22 PM EEST Vendor: http://www.hycus.com/ Download: http://www.hycus.com/download/hycuscms-1.0.1.zip --- -= CSRF PoC 1 - Change Admin Password =-...