3119 matches found
Cartweaver 2.16.11 Results.cfm category Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17941/info Cartweaver ColdFusion is prone to SQL-injection vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input before using it in SQL queries. Successful exploits...
Destiny Media Player 1.61 0 (.m3u File) Local Buffer Overflow PoC
No description provided by source. !/usr/bin/perl -w Program : Destiny Media Player Version : 1.61.0 website : http://www.pirateradio.com/downloads/ Download : http://www.pirateradio.com/downloads/destinymp3.exe Type : .m3u File local Stack Overflow PoC EAX 61616161 ECX 00000001 EDX 014377A0 EBX...
Java Search Engine 0.9.34 Search.JSP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15687/info Java Search Engine is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
FreeBSD 9.0-9.1 mmap/ptrace - Privilege Esclation Exploit
No description provided by source. / FreeBSD 9.0,1 mmap/ptrace exploit by Hunger [email protected] Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... : Greetings to nohup, 2501, boldi, eax, johnnyb, kocka, op, pipacs, prof, sd, sghctoma, snq, spende...
e107 Plugin BLOG Engine 2.2 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz m...
LibPNG <= 1.2.5 png_jmpbuf() Local Buffer Overflow Exploit
No description provided by source. include stdio.h include stdlib.h include png.h / The pngjmpbuf macro, used in error handling, became available in libpng version 1.0.6. If you want to be able to run your code with older versions of libpng, you must define the macro yourself but only if it is no...
SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload
No description provided by source...
File Upload Manager 1.3
No description provided by source. Version: v1.3 ============================================================ www.sec-war.com ============================================================ 1- upload shell with: shell.php.jpg shell.php.gif shell.php.htm shell.htm shell.php.jpeg shell.php.bmp 2- Go t...
ActiveCollab 2.3.0 - Local File Inclusion / Directory Traversal
No description provided by source...
Web Service Deluxe News Manager 1.0.1 Deluxe Footer.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23499/info News Manager Deluxe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...
VUPlayer <= 2.44 - (.M3U UNC Name) Buffer Overflow Exploit (meta)
No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Browser::VUPlayerM3U Msf::Exploit::Remote include Exploit::Remote::HttpServer::Html def initializeinfo = superupdateinfoinfo, 'Name' = 'VUPlayer = 2.44 M3U UNC Name Buffer Overflow', 'Description' = %q This...
Bitweaver 1.1.1 view_post.php post_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
MySQL Eventum <= 1.5.5 (login.php) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; use strict; print \n; print MySQL Eventum = v1.5.5 SQL Injection PoC \n; print James Bercegay // gulftech.org // 7-28-05 \n; print \n; my $host = 'localhost'; my $path = '/eventum/login.php'; my $user = '2'; my $port = 80; my...
Vanilla Forums 2.0.18.4 Tagging Stored XSS
No description provided by source. Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag. I used...
Platform Load Sharing Facility 4/5 LSF_ENVDIR Local Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7655/info It has been reported that Load Sharing Facility LSF does not properly handle input in environment variables. Because of this, an attacker may be able to gain escalated privileges on a vulnerable system. LSF 5.1...
Apple Mac OS X Server 10.5 - Wiki Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28278/info Apple Mac OS X Server Wiki Server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary...
blogit! (sql/dd/xss) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : PouyaServer , [email protected] Vulnerability : SQL/DD/XSS...
McGallery 1.0/1.1/2.2 index.php album Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...
Sun SunVTS 4.x PTExec Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2898/info SunVTS is the Sun Validation Test Suite, distributed and maintained by Sun Microsystems. The SunVTS is used to test various components of OEM Sun hardware, and can also be used to stress-test components and...
FunkBoard 0.66 prefs.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14507/info FunkBoard is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...