BloofoxCMS 0.3.5 - Information Disclosure

BloofoxCMS 0.3.5 - Information Disclosure Vulnerability ID: HTB22660 Reference: http://www.htbridge.ch/advisory/informationdisclosureinbloofoxcms1.html Product: BloofoxCMS Vendor: bloofox.com http://bloofox.com/ Vulnerable Version: 0.3.5 and probably prior versions Vendor Notification: 13 October...

BlogBird Platform - Multiple Cross-Site Scripting Vulnerabilities

BlogBird Platform - Multiple Cross-Site Scripting Vulnerabilities Vulnerability ID: HTB22647 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogbird1.html Product: BlogBird Vendor: BlogBird http://www.blogbird.nl/ Vulnerable Version: Current actual version on http://www.blogbird.nl/...

DZCP (deV!L_z Clanportal) 1.5.4 - Local File Inclusion

Vulnerability ID: HTB22656 Reference: http://www.htbridge.ch/advisory/lfiindzcp.html Product: DZCP Vendor: dzcp.de http://www.dzcp.de Vulnerable Version: 1.5.4 Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Fixed by Vendor Risk level: High Credit: High-Tech...

Energine CMS - SQL Injection

Energine CMS - SQL Injection Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vend...

MinaliC WebServer 1.0 - Directory Traversal

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Directory Traversal Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

DBHcms 1.1.4 - 'dbhcms_user/SearchString' SQL Injection

Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not...

DBHcms 1.1.4 - dbhcms_userSearchString SQL Injection

DBHcms 1.1.4 - dbhcmsuserSearchString SQL Injection Vulnerability ID: HTB22651 Reference: http://www.htbridge.ch/advisory/sqlinjectionindbhcms.html Product: DBHcms Vendor: drbenhur.com http://www.drbenhur.com/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October...

Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

Exploit for windows platform in category local exploits =================================================================== Winamp 5.5.8.2985 inmod plugin Stack Overflow Friendly Version =================================================================== !/usr/bin/python Winamp 5.5.8.2985 inmod...

Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D and 7eK presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow A Script Kiddie Friendly Production WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ An improvement to...

MinaliC Webserver 1.0 Denial Of Service

------------------------------------------------------------------------ Software................MinaliC Webserver 1.0 Vulnerability...........Denial Of Service Download................http://sourceforge.net/projects/minalic/ Release Date............10/24/2010 Tested On...............Windows XP...

iGaming CMS 1.5.0 Local File Inclusion

iGaming CMS 1.5.0 Local File Inclusion Vulnerability Exploit Title: iGaming CMS 1.5.0 Local File Inclusion Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.igamingcms.com/downloads.php Version: 1.5.0 Tested on:...

DBHcms 1.1.4 - 'dbhcms_pid' SQL Injection

DBHcms 1.1.4 SQL Injection Vulnerability Exploit Title: DBHcms 1.1.4 SQL Injection Vulnerability Date: 24-10-2010 Author: ZonTa Mail: zontahackersatgmaildotcom IM : zontahackersatlivedotcom Software Link: http://www.drbenhur.com/downloads-dbhcms-114-1-69-en.html Version: 1.1.4 Tested on:...

Winamp 5.5.8 (in_mod plugin) Stack Overflow Exploit

Exploit for windows platform in category local exploits =================================================== Winamp 5.5.8 inmod plugin Stack Overflow Exploit =================================================== !/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stac...

ALPHA 2 Player Local Crash PoC

Exploit for windows platform in category dos / poc ============================== ALPHA 2 Player Local Crash PoC ============================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

sNews 1.7 Cross Site Scripting

=============================== Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability Type:...

Oracle JRE - java.net.URLConnection class Same-of-Origin SOP Policy Bypass

Oracle JRE - java.net.URLConnection class Same-of-Origin SOP Policy Bypass Description Security-Assessment.com discovered that a Java Applet making use of java.net.URLConnection class can be used to bypass same-of-origin SOP policy and domain based security controls in modern browsers when...

EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC

Exploit for windows platform in category dos / poc ====================================================== EasyFTP version 1.7.0.11 and version 1.7.0.2 Crash PoC ====================================================== sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail:...

Alpha 2 Player Denial Of Service

=================================================== ALPHA 2 Player Denial of service vulnerability =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

EasyFTP 1.7.0.x Denial Of Service

sub banner print q PoC EasyFTP 1.7.0.X Crash Author: Inj3cti0n P4ck3t e-mail: [email protected] Date: 18/10/2010 Greetz: C00l3r - fvox - MLK - DD3str0y3r - s4r4d0 - Sh0rtKiller HADES - CODERED - FORAST - Colt7r - Z4i0n - M0nt3r Th1nk3r - Hackinho - r0t3d - elementopcx - Observing Believe -...

eXV2 Content Management System 2.10 Cross Site Scripting

eXV² Content Management System 2.10 Remote XSS Vulnerability Vendor: eXV² Team Product web page: http://www.exv2.de Affected version: 2.10 LiveCD Summary: eXV² is a free CMS for building and operating private home pages, small and large communities and it's also easily used for small to medium...