ARASTAR - SQL Injection

++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:"POWERED BY ARASTAR" + Category : Content Management +...

Firefox 8.0 Null Pointer Dereference PoC

No description provided by source. Firefox = 8.0 null pointer dereference PoC exploit Author: 0in Maksymilian Motyl Tested on Firefox 8.0/4.0 on windows and Firefox 7.1 on Linux Lets see in code: $ cat ./mozilla-release/content/base/src/nsObjectLoadingContent.cpp NSIMETHODIMP...

Firefox 8.0 Null Pointer Dereference PoC

Exploit for multiple platform in category dos / poc Firefox GetStatus&status; // Code execution is here. // --------------------------------------------------------------------------------- DUMP: 014E7A28 8B7D 08 MOV EDI,DWORD PTR SS:EBP+8 014E7A2B 8B07 MOV EAX,DWORD PTR DS:EDI ; access violation...

osCSS2 "_ID" parameter Local file inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

osCSS2 - '_ID' Local file Inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

Multiple Vulnerabilities in OrangeHRM

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in OrangeHRM, which can be exploited to perform Cross-Site Scripting XSS and SQL Injection attacks. 1 Cross-Site Scripting XSS vulnerabilities in OrangeHRM 1.1 Input passed via the "uniqcode" GET parameter to...

Oracle - xdb.xdb_pitrig_pkg.PITRIG_DROPMETADATA procedure

Exploit Title: New exploit to Oracle CVE-2007-4517 vulnerability Date: 11,2,2011 Author: David Maman and the GreenSQL Team Software Link: http://blog.greensql.com/2011/11/02/new-exploit-to-oracle-vulnerability/ Version: 0.1 Tested on: Oracle Database 10g Express Edition CVE : New exploit to...

IBSng all version Cross-Site Scripting Vulnerability

================= APA-IUTcert ================= Title: IBSng all version Cross-Site Scripting Vulnerability Vendor: www.parspooyesh.com Type: Cross-Site Scripting Vulnerability Fix: N/A ================== nsec.ir ================= Description: Input passed via the "str" parameter to...

eFront 3.6.10 Build 11944 Cross Site Scripting

Information --------------------------------- Name : XSS Vulnerabilities in eFront Software : eFront 3.6.10 build 11944 and possibly below. Vendor Homepage : http://efrontlearning.net/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Canberk Bolat Advisory Reference :...

Multiple vulnerabilities in Dolibarr

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Dolibarr, which can be exploited to perform cross-site scripting & sql injection attacks. 1 Cross-Site scripting vulnerability in Dolibarr: CVE-2011-4814 1.1 Input appended to the URL after multiple files is not...

Apple Mail.app mail拒绝服务漏洞

Mail.app是Apple的Mac OS X操作系统中自带的电子邮件程序。 Mail.app电子邮件客户端在实现上存在拒绝服务漏洞，通过发送大于2023 MIME的附件到邮件客户端，在解析时可造成其崩溃。 Apple Mac OS X 10.7.2 Apple Mail 5.1 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.apple.com/ !/usr/bin/env python Mail of death for Apple's Mail.app Tested &...

Facebook Holi Greeting Cards - SQL Injection Vulnerability

Document Title: =============== Facebook Holi Greeting Cards - SQL Injection Vulnerability References Source: ==================== Facebook 3rd Party Application - Holi Greeting Cards 2011/Q2 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID:...

jbShop SQL Injection

Exploit Title: jbShop - e107 v7 CMS plugin - SQL Injection vulnerability Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://sourceforge.net/projects/jbshop/ Tested on: Linux/Windows 7 Vulnerable Parameter: itemid= PoC:...

Oracle DataDirect ODBC Drivers - HOST Attribute 'arsqls24.dll' Stack Buffer Overflow (PoC)

g 208.152c: Access violation - code c0000005 first chance First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=0000008b ebx=00000000 ecx=00410041 ed...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16...

X.Org xorg 1.4 1.11.2 - File Permission Change

X.Org xorg 1.4 1.11.2 - File Permission Change / xchmod.c -- Xorg file permission change vulnerability PoC Author: vladz http://vladz.devzero.fr Date: 2011/12/15 Software: www.x.org Version: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor...

Xampp 1.7.4 For Windows Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ Xampp 1.7.4 for Windows multiple Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.apachefriends.org/en/xampp-windows.html $ Dat...

Joomla YJ Contact us Component Local File Inclusion Vulnerability

No description provided by source. ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...

Joomla! Component com_yjcontactus - Local File Inclusion

Joomla! Component comyjcontactus - Local File Inclusion ================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...

Joomla YJ Contact Local File Inclusion

================================================================================ - YJ Contact us - Enhanced Joomla Contact Form = Local File Inclusion Vulnerability Software : YJ Contact us - Enhanced Joomla Contact Form Vendor :...