1120 matches found
CVE-2009-2899
The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...
PT-2012-1272
Name of the Vulnerable Software and Affected Versions SpringSource Hyperic HQ versions prior to 4.3 Description The issue allows local users to obtain the database password by listing the process and its arguments, specifically affecting the monitor perl script in the Sybase database plug-in...
CVE-2009-2899: Exposure of Sensitive Information to an Unauthorized Actor
The monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3 allows local users to obtain the database password by listing the process and its arguments...
MySQL Remote Preauth User Enumeration Zeroday
No description provided by source. MySQL User Account Enumeration Utility When an attacker authenticates using an incorrect password with the old authentication mechanism from mysql 4.x and below to a mysql 5.x server the mysql server will respond with a different message than Access Denied, what...
jsupload.cgi.pl 0.6.4 Directory Traversal
------------------------------------------------------------------------------------------------------------- Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before 29 November 2012 Sean de Regge seanderegge gmail.com...
Perl script jsupload.cgi.pl 0.6.4 Directory Traversal
jsupload.cgi.pl versions 0.6.4 and below suffer from a directory traversal vulnerability. ------------------------------------------------------------------------------------------------------------- Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before 29 November 2012...
Snort Multiple HTTP Bypass <= 2.9.3.1 Exploit
Snort® is an open source network intrusion prevention and detection system IDS/IPS developed by Sourcefire. Combining the benefits of signature, protocol, and anomaly-based inspection, Snort is the most widely deployed IDS/IPS technology worldwide. With millions of downloads and nearly 400,000...
MPC (Media Player Classic) WebServer Multiple Vulnerabilities
========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...
MPC (Media Player Classic) XSS / Denial Of Service
========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...
Joomla! Component com_kunena - search SQL Injection
Joomla! Component comkunena - search SQL Injection !/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.or...
Arctic Torrent 1.2.3 - Memory Corruption (Denial of Service)
Arctic Torrent 1.2.3 - Memory Corruption Denial of Service !/usr/bin/perl Arctic Torrent 1.2.3 Vendor URI: http://int64.org/projects/arctic-torrent/ Vendor Description: A minimal BitTorrent client. It wont have all the pretty features that other torrent apps have, but focuses on low memory and cp...
Arctic Torrent 1.2.3 <= Remote Memory Corruption
Exploit for windows platform in category dos / poc !/usr/bin/perl Arctic Torrent 1.2.3 Vendor URI: http://int64.org/projects/arctic-torrent/ Vendor Description: A minimal BitTorrent client. It wont have all the pretty features that other torrent apps have, but focuses on low memory and cpu usage...
Vip torrent 4.X.X - Multiple Vulnerabilities
Exploit for windows platform in category local exploits !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote,...
WarFTP Daemon 1.82 RC 11 - Remote Format String
WarFTP Daemon 1.82 RC 11 - Remote Format String Exploit Title: War FTP Daemon Remote Format String Vulnerability crash: http://img826.imageshack.us/img826/6222/69004160.png Date: 2012-08-30 Author: coolkaveh [email protected] https://twitter.com/coolkaveh Vendor Homepage:...
Divx Player 6.8.2 - Denial of Service
Divx Player 6.8.2 - Denial of Service source: https://www.securityfocus.com/bid/55105/info Divx Player is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Divx 6.8.2 is vulnerable; other versions...
E-Mail Security Virtual Appliance (ESVA) - Remote Execution
Exploit Title: E-Mail Security Virtual Appliance ESVA Remote Execution. Date: 10 Aug 2012 Exploit Author: iJoo Vendor Homepage: http://www.esvacommunity.com/ Software Link: http://sourceforge.net/projects/esva-project/ Version: ; while$cmd ! "exit" $content = ""; $ua = LWP::UserAgent-new;...
Scientific Linux Security Update : perl on SL5.x i386/x86_64
Perl is a high-level programming language commonly used for system administration utilities and web programming. The Safe extension module allows users to compile and execute Perl code in restricted compartments. The File::Path module allows users to create and remove directory trees. The Safe...
httpdx 1.5.4 Heap Overflow
!/usr/bin/perl -w ====================================================================== Exploit Title: httpdx UnhandledExceptionFilter ====================================================================== use strict; use IO::Socket::INET; target my $host = "127.0.0.1"; The perl|php|py|.. page t...
wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net
WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...
DomsHttpd 1.0 - Remote Denial of Service
DomsHttpd 1.0 - Remote Denial of Service !/usr/bin/perl DomsHttpd 1.0 Usage: domshttpd.pl host port use strict; use warnings; use IO::Socket; my $host = shift || "localhost"; my $port = shift || 88; my $sock = IO::Socket::INET-new Proto = "tcp", PeerAddr = $host, PeerPort = $port ; my $junk =...