CVE-2011-1562

Ecava IntegraXor HMI before n 3.60 Build 4032 allows remote attackers to bypass authentication and execute arbitrary SQL statements via unspecified vectors related to a crafted POST request. NOTE: some sources have reported this issue as SQL injection, but this might not be accurate...

Oracle iSQL*Plus Login Utility

This module attempts to authenticate against an Oracle ISQLPlus administration web site using username and password combinations indicated by the USERFILE, PASSFILE, and USERPASSFILE. This module does not require a valid SID, but if one is defined, it will be used. Works against Oracle 9.2, 10.1 ...

HP OpenView NNM nnmRptConfig nameParams Buffer Overflow

Exploit for windows platform in category remote exploits $Id: hpnnmnnmrptconfignameparams.rb 12085 2011-03-23 03:37:18Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By making a specially crafted HTTP request to the "snmpviewer.exe" CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. The vulnerable code lies within ...

HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01203. By specifying a long 'arg' parameter when executing the 'jovgraph.exe' CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. This vulnerability is...

HP OpenView Network Node Manager (OV NNM) - nnmRptConfig nameParams Buffer Overflow (Metasploit)

$Id: hpnnmnnmrptconfignameparams.rb 12085 2011-03-23 03:37:18Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MC Content Manager Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are previous versions of MC Content Manager before version v.10.1.1. ---------- Details...

Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...

Buffer overflow

Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service device crash via a long string in a POST request...

CVE-2011-0352

Buffer overflow in the web-based management interface on the Cisco Linksys WRT54GC router with firmware before 1.06.1 allows remote attackers to cause a denial of service device crash via a long string in a POST request...

Alguest 1.1c-patched - 'elimina' SQL Injection

source: https://www.securityfocus.com/bid/45812/info Alguest is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Concrete CMS 5.4.1.1 - Cross-Site Scripting / Remote Code Execution

!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...

WordPress Core 3.0.3 - Persistent Cross-Site Scripting (Internet Explorer 6/7 / NS8.1)

Exploit Title: Wordpress 3.0.3 stored XSS IE7,6 NS8.1 Date: 27 december 2010 Author: Saif Software Link:wordpress.org Version: 3.0.3 Tested on: IE 6 a stored XSS vulnerability using CSS styles affecting users surfing the malicious post using IE6, IE7, NS 8.1 POC: "" in the content variable in the...

ZyXEL P-660R-T1 V2 XSS

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='sCriptalert1;/ScRiPt'012F012F2000 This works with the post request ! As by default this value is sent...

Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)

$Id: hppowermanagerlogin.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ZyXEL P-660R-T1 V2 Cross Site Scripting

Name : ZyXEL P-660R-T1 V2 XSS Author : Usman Saeed from Xc0re Security Research Group Homepage :http://www.xc0re.net Dated : 22/11/2010 Exploit: VECTOR :http://IP/Forms/home1?&HomeCurrentDate='alert1;'01%2F01%2F2000 This works with the post request ! As by default this value is sent through POST...

Joomla Component JQuarks4s 1.0.0 Blind SQL Injection Vulnerability

No description provided by source. JQuarks4s Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name JQuarks4s Vendor http://www.iptechinside.com/labs/projects/listfiles/jquarks-for-surveys Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...

Angel LMS 7.3 Cross Site Scripting

I have discovered a security exploit in Angel LMS 7.3 "Colleges and universities worldwide choose the ANGEL LMS to deliver powerful online teaching and learning experiences. ANGEL provides the comprehensive LMS features institutions need in a simple interface that promotes adoption. A recognized...

WordPress cformsII插件rs和rsargs参数脚本注入漏洞

BUGTRAQ ID: 44587 CVE ID: CVE-2010-3977 WordPress是一款免费的论坛Blog系统。 WordPress所使用的cformsII插件没有正确的过滤用户提交给wp-content/plugins/cforms /libajax.php页面的rs和rsargs参数便显示给了用户。攻击者可以通过提交恶意的POST请求来利用这个漏洞，当用户查看生成页面时就会导致执行所注入的代码。 Nicole Stich cformsII 11.5 厂商补丁： Nicole Stich ------------...

WordPress Plugin cformsII 11.5/13.1 - 'lib_ajax.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44587/info The cformsII plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...