6473 matches found
Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities
No description provided by source. Title: ====== Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities Date: ===== 2013-07-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=832 VL-ID: ===== 832 Common Vulnerability Scoring System:...
Windows XP TCP Packet Fragmentation Handling Denial of Service Vulnerability (4)
No description provided by source. source: http://www.securityfocus.com/bid/11258/info Multiple vendor implementations of the TCP stack are reported prone to a remote denial-of-service vulnerability. The issue is reported to present itself due to inefficiencies present when handling fragmented TC...
Oracle 9i/10g Database Remote Network Authentication Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35680/info Oracle Database is prone to a remote vulnerability in Network Authentication. The vulnerability can be exploited over the 'Oracle Net' protocol. An attacker doesn't require privileges to exploit this...
Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class VivvoArticleManagerRemoteFileIncludePOCBase: vulID = '63958' version = '1' vulDate = '2006-09-09' author ...
MIT Kerberos 5 'src/kdc/do_tgs_req.c' Ticket Renewal Double Free Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39599/info MIT Kerberos is prone to a remote memory-corruption vulnerability. An authenticated attacker can exploit this issue by sending specially crafted ticket-renewal requests to a vulnerable computer. Successfully...
Esselbach Storyteller CMS System 1.8 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Esselbach Storyteller CMS System Version 1.8 page.php Remote SQL Injection Vulnerability Date: March, 9th 2011 GMT +7 Author: Shamus Software Link: http://www.esselbach.com/ Version : Esselbach Storyteller CMS System Version 1.8 Tested on: windows...
Warrior Kings 1.3 And Warrior Kings: Battles 1.23 Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13711/info Warrior Kings, and Warrior Kings: Battles are vulnerable to a remote format string vulnerability. This issue is due to a failure of the application to securely implement a formatting printing function. This...
Belchior Foundry VCard 2.8 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9910/info It has been reported that vCard is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow a malicious user access to certain admin functionality without havin...
LICQ 0.85/1.0.1/1.0.2 - Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2406/info At least one version of LICQ is vulnerable to a remote buffer overflow. By sending many characters 12000-16000 to the port on which LICQ is listening, an attacker can cause excessive data to be copied onto the...
Microsoft Office XP 2000/2002 HTML Link Processing Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12480/info A remote buffer overflow vulnerability affects Microsoft Office XP. The problem presents itself when an unsuspecting user follows a malicious HTML link that points to a Office document. A boundary condition err...
KDE KMail 1.7.1 HTML EMail Remote Email Content Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may leverage this issue to spoof...
W1L3D4 WEBmarket 0.1 - Remote SQL Injection Vulnerability
No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : W1L3D4 WEBmarket v0,1 SQL Injection Vuln Author : CrackersChild Contact : [email protected] Bug : in urunbak.asp Do...
Absolute News Feed 1.0 - Remote Insecure Cookie Handling Vulnerability
No description provided by source. Discovered by : Hakxer Script : Absolute News Feed http://www.xigla.com/absolutenf/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie=xlaAFSuser=p=admin; Exploit Go To admin login :...
ModernGigabyte ModernBill 4.3 News.PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13086/info ModernBill is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the 'news.php' script...
SQL-Ledger 2.6.x/LedgerSMB 1.0 Terminal Parameter Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver...
eXV2 Module eblog 1.2 - (blog_id) Remote SQL Injection Vulnerability
No description provided by source. Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :modules/eblog DORK 2 : allinurl :exoops/modules/eblog EXPLOIT :...
Cruiseworks 1.09 Cws.exe Doc Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20699/info Cruiseworks is prone to a remote buffer-overflow vulnerability. Specifically, the application fails to validate input passed to the 'doc' parameter of the '/scripts/cruise/cms.exe' application. Cruiseworks 1.09...
Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component prayercenter Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comprayercenter POC :...
EType EServ 2.9x FTP Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6519/info EServ is a proxy software package distributed by EType. It is available for Microsoft Windows operating systems. It has been reported that a problem in EServ may cause the software to crash. When a remote user...
News File Grabber 4.1.0.1 Subject Line Stack Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/22617/info News File Grabber is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory...