3879 matches found
PHP-Ultimate Webboard 2.0 'admindel.php' Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful exploits will allow unauthorized attackers to dele...
Ultimate Auction 3.67 ItemList.PL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
RM Downloader 3.1.3 - Local SEH Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/perl Exploit Title: RM Downloader 3.1.3 Local SEH Exploit Win7 ASLR and DEP Bypass Date: July 1, 2010 Author: Node Software Link: http://www.mini-stream.net/downloads/RMDownloader.exe Version: RM Downloader 3.1.3.3.2010.06.26 Evaluation Tested on:...
CyberShop Ultimate E-commerce Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16473/info CyberShop Ultimate E-commerce is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...
Ultimate Media Script 2.0 - Remote Change Content Vulnerabilities
No description provided by source. tittle Ultimate Media Script 2.0 Remote Change Password/Add Admin/Delete Admin Exploit/tittle FORM action=http://umscript.com/demo/admin/index.php?mod=admins method=post TD class=column1INPUT class=umsinput name=username/TD TD class=column1INPUT class=umsinput...
yPlay 2.4.5 - Denial of Service Vulnerability
No description provided by source. Exploit Title : yPlay Denial of Service Vulnerability Software : yPlay Software link : http://www.spacejock.m6.net/files/yPlayFull.exe Autor : ABDI MOHAMED Email : [email protected] greetz: netown3r , sadhacker , net-decrypt3r , xa7m3d , the commander ,...
Adobe InDesign CS4 DLL Hijacking Exploit (ibfs32.dll)
No description provided by source. / Exploit Title: Adobe InDesign CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: CS4 v6.0 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .indl .indp .indt .inx Greetz: Astalavist...
Ultimate PHP Board <= 1.9.6 GOLD users.dat Password Decryptor
No description provided by source. !/usr/bin/perl Passwords Decrypter for UPB = 1.9.6 Related advisory: http://www.securityfocus.com/archive/1/402461/30/0/threaded Discovered and Coded by Alberto Trivero Password file is located at: http://www.example.com/upb/db/users.dat /str0ke use Getopt::Std;...
UFO: Alien Invasion 2.2.1 - BoF Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/python Exploit Title: UFO: Alien Invasion v2.2.1 BoF Exploit Win7 ASLR and DEP Bypass Date: July 5, 2010 Author: Node Software Link: http://sourceforge.net/projects/ufoai/files/UFOAI%202.x/2.2.1/ufoai-2.2.1-win32.exe/download Version: UFO: Alien Invasi...
DJ Legend 6.01 Denial of Service Vulnerability
No description provided by source. Exploit Title :DJ Legend Denial of Service Vulnerability Software : DJ Legend Software link :...
ConvexSoft DJ Audio Mixer - Denial of Service Vulnerability
No description provided by source. Exploit Title :ConvexSoft DJ Audio Mixer Denial of Service Vulnerability Software : ConvexSoft DJ Audio Mixer Software link :...
Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board = 2.0b1 chat/login.php Remote Code Execution Vulnerability...
Ultimate eShop Error Based SQL Injection Vulnerability
No description provided by source. Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability Google Dork: inurl:index.cgi?aktion=shopview Date: 19/04/2011 Author: Romka Software Link: http://www.ultimate-eshop.de/ Tested on: Windows XP SP3 Exploit:...
Xilisoft Video Converter Ultimate 7.8.1 build-20140505 DLL Hijacking
/ Title: Xilisoft Video Converter Ultimate Dll Hijacking Exploit quserex.dll Version: 7.8.1 build-20140505 Previous versions might be vulnerable Tested on: Windows XP SP2 en Vendor: http://www.xilisoft.com/ Software Link:...
Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
VirusChaser栈缓冲区溢出漏洞
Bugtraq ID:66475 Virus Chaser驱逐舰是拥有广告/间谍软件扫描功能+完美的病毒扫描与修复功能,能强力清除流氓软件、广告软件及间谍软件。 Virus Chaser存在一个基于栈的缓冲区溢出，允许攻击者构建恶意文件，诱使应用扫描，可使应用程序崩溃。 0 VirusChaser 8.0 目前没有详细解决方案提供： https://www.viruschaser.com/ Exploit Title: VirusChaser 8.0 - Stack Buffer Overflow Date: 2014/03/26 Exploit Author: wh1ant Vendo...
MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently)
Origin: Visit http://technet.microsoft.com/en-us/security/bulletin/ms14-010 Check "Acknowledgments" for "CVE-2014-0293". It says "Dieyu" and links to my website http://dieyu.org/ Technical Details: showModalDialog to keep script running, HTTP redirecting to target domain. Then script will run in...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...