Disk Savvy Enterprise 9.0.32 - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python print "Disk Savvy Enterprise 9.0.32 Buffer Overflow Exploit" print "Author: Tulpa / tulpaattulpa-securitydotcom" Author website: www.tulpa-security.com Author twitter: @tulpasecurity Exploit will land you NT AUTHORITY\SYSTE...

wordpress-simple-shout-box - SQL Injection

The wordpress-simple-shout-box WordPress plugin was affected by a SQL Injection security vulnerability...

ShoutCMS (content.php) Blind SQL Injection Vulnerability

No description provided by source. Shout! content.php Blind Sql Injection Vulnerability ======================================================= .:. Author : Zero Cold [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Shout! Script .:. Vendor :...

phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability

No description provided by source. Title: phpBB AJAX Chat/Shoutbox MOD CSRF Vulnerability Release Date: 2011-04-30 Product Affected: http://startrekaccess.com/community/viewtopic.php?f=127&t=8675 Responsible Disclosure: After repeated attempts to get the vendor to fix this flaw, he has told me to...

Shout! CMS SQL Injection

Shout! content.php Blind Sql Injection Vulnerability ======================================================= .:. Author : Zero Cold [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Shout! Script .:. Donwload Script: http://www.mediashaker.com/index.php .:...

ShoutCMS - 'content.php' Blind SQL Injection

Shout! content.php Blind Sql Injection Vulnerability ======================================================= .:. Author : Zero Cold [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Shout! Script .:. Vendor : http://www.mediashaker.com/index.php .:. Bug Ty...

CVE-2008-2192: Improper Control of Generation of Code

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

realestates2n-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Development Provided By: Site2Nite Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

clickbanex-sql.txt

------------------------------- Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal http://icash.ch/index.html?ClickAndRank/details.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w From Aria-Security.Net...

JiRos Upload Manager SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRoґs.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 nick aka Name and 2 shout aka Shout parameters...

CVE-2007-5948

Multiple cross-site scripting XSS vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 nick aka Name and 2 shout aka Shout parameters...

CVE-2007-5948: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in main.php in SF-Shoutbox 1.2.1 through 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 nick aka Name and 2 shout aka Shout parameters...

mwf-ftp.txt

Aria-Security Team http://Aria-Security.Net shout out to: AurA, imm02tal and Aria's Staff http://site.com/path/mwftp/pass/pass.txt As you see the mentioned file contains the md5 which you can crack and use in http://site.com/path/ftp.php to login. Regards, The-0utl4w...

CVE-2007-2141: Undefined Security Weakness

Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shouts.php via the shout parameter...

CVE-2006-5131: Undefined Security Weakness

module/shout/jafshout.php aka the shoutbox in ph03y3nk just another flat file JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by " ", possibly due to a static code injection vulnerability involving admin/datainc.php...

CVE-2006-5129: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 the message parameter, and possibly other parameters, in module/shout/jafshout.php aka the shoutbox; and 2 the message body in a...

G Shout 1.3.1 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

gshout.txt

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

CVE-2002-1000

CVE-2002-1000 describes a buffer overflow in AnalogX SimpleServer:Shout 1.0 that allows remote attackers to cause a denial of service and potentially execute arbitrary code via a long request to TCP port 8001. The issue affects the affected software as documented in multiple sources (NVD, CVE Lis...