HTB22866: XSS vulnerability in xtcModified

Vulnerability ID: HTB22866 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinxtcmodified3.html Product: xtcModified Vendor: xtcModified Team http://www.xtc-modified.org/ Vulnerable Version: 1.05 and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Store...

vsftpd 2.3.2 Denial of Service Vulnerability

Exploit for linux platform in category dos / poc include include include include include include include / This is code of http://cxib.net/stuff/vspoc232.c PoC CVE-2011-0762 vsftpd Remote Denial of Service Affected: 2.3.2 Fix: 2.3.4 Author: Maksymilian Arciemowicz Use: ./vspoc232 127.0.0.1 21 use...

vsftpd 2.3.2 - Denial of Service

include include include include include include include / This is code of http://cxib.net/stuff/vspoc232.c PoC CVE-2011-0762 vsftpd Remote Denial of Service Affected: 2.3.2 Fix: 2.3.4 Author: Maksymilian Arciemowicz Use: ./vspoc232 127.0.0.1 21 user pass 1 or read...

Bitweaver 2.8.0 - Multiple Vulnerabilities

Bitweaver 2.8.0 - Multiple Vulnerabilities exploit title: Path Disclosure bitweaver 2.8 date: 25.o2.2o11 author: lemlajt software : bitweaver version: 2.8 tested on: linux cve : Path Disclosure bitweaver 2.8 PoC :...

CVE-2011-0762

The vsffilenamepassesfilter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service CPU consumption and process slot exhaustion via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632...

vsftpd 2.3.2 - Denial of Service

vsftpd 2.3.2 - Denial of Service include include include include include include include / This is code of http://cxib.net/stuff/vspoc232.c PoC CVE-2011-0762 vsftpd Remote Denial of Service Affected: 2.3.2 Fix: 2.3.4 Author: Maksymilian Arciemowicz Use: ./vspoc232 127.0.0.1 21 user pass 1 or read...

WP Forum WordPress Plugin 1.7.8 SQL Injection

================================= Vulnerability ID: HTB22860 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumwordpressplugin2.html Product: WP Forum wordpress plugin Vendor: Fredrik Fahlstad http://www.fahlstad.se/ Vulnerable Version: 1.7.8 Vendor Notification: 15 February 2011...

Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)

Microsoft Windows XP - WmiTraceMessageVa Integer Truncation PoC MS11-011 / Exploit Title: MS11-011CVE-2011-0045: MS Windows XP WmiTraceMessageVa Integer Truncation Vulnerability PoC Date: 2011-03-01 Author: Nikita Tarakanov CISS Research Team Software Link: Version: prior to MS11-011 Tested on: W...

Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)

/ Exploit Title: MS11-011CVE-2011-0045: MS Windows XP WmiTraceMessageVa Integer Truncation Vulnerability PoC Date: 2011-03-01 Author: Nikita Tarakanov CISS Research Team Software Link: Version: prior to MS11-011 Tested on: Win XP SP3 CVE : CVE-2011-0045 Status : Patched Binary Analysis:...

WSI CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Web : http://www.wsicorporate.com/ Dork : intext:"Powered by WSI" filetype:asp SQL --- http://site.com/xxx.asp?PId=SQL http://site.com/xxx.asp?Id=SQL http://site.com/form.asp?formname=nameSQL POC --- http://site.com/xxx.asp?PId=1234 having 1=1...

Portal Networks - Internet Based Solutions CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Web : http://www.portalnetworks.com.mx/ Found by: p0pc0rn 01/03/2011 Dork : intext:"Powered by: Portal Networks - Internet Based Solutions" asp SQL --- http://site.com/buscar.asp?linea=SQL http://site.com/buscar.asp?q=SQL...

Question And Answer Forum 1.2.4 Cross Site Scripting

Vulnerability ID: HTB22861 Reference: http://www.htbridge.ch/advisory/xssinquestionandanswerforumwordpressplugin.html Product: Question and Answer Forum wordpress plugin Vendor: David Woodford hhttp://trevorpythag.co.uk Vulnerable Version: 1.2.4 Vendor Notification: 15 February 2011 Vulnerability...

Wordpress jQuery Mega Menu 1.0 Plugin Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress jQuery Mega Menu 1.0 Vulnerability...........Local File Inclusion...

phreebooks r30rc4 - Multiple Vulnerabilities

phreebooks r30rc4 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/phreebooks Release...

WP Forum Server 1.6.5 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Product: WP Forum Server wordpress plugin Vendor: VastHTML Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...

ClanSphere 2010.3 Xss Vulnerability

Exploit for php platform in category web applications author: lemlajt software : Clansphere @ sourceforge.net version: 20103 tested on: linux cve : xss-01 PoC : POST http://localhost/www/cmsadmins/clansphere20103/clansphere20103/index.php?mod=messages&action=create $messagessubject= xss-02 Stored...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10 February 2011 Vulnerability Type: S...

WordPress Plugin Forum Server 1.6.5 - SQL Injection

WordPress Plugin Forum Server 1.6.5 - SQL Injection Vulnerability ID: HTB22851 Reference: http://www.htbridge.ch/advisory/sqlinjectioninwpforumserverwordpre ssplugin1.html Product: WP Forum Server wordpress plugin Vendor: VastHTML Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011...

IWantOneButton 3.0.1 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpressplugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version: 3.0.1 Vendor Notification: 10...

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities

WordPress Plugin Comment Rating 2.9.23 - Multiple Vulnerabilities Source: http://packetstormsecurity.org/files/view/98660/commentrating-sqldisclose.txt ================================= Vulnerability ID: HTB22842 Reference:...