4919 matches found
Ultimate Auction 3.67 ItemList.PL Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16254/info Ultimate Auction is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
RM Downloader 3.1.3 - Local SEH Exploit (Win7 ASLR and DEP Bypass)
No description provided by source. !/usr/bin/perl Exploit Title: RM Downloader 3.1.3 Local SEH Exploit Win7 ASLR and DEP Bypass Date: July 1, 2010 Author: Node Software Link: http://www.mini-stream.net/downloads/RMDownloader.exe Version: RM Downloader 3.1.3.3.2010.06.26 Evaluation Tested on:...
ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability
No description provided by source. ?php / ViArt Shop Enterprise 4.1 Arbitrary Command Execution Vulnerability Vendor: ViArt Software Product web page: http://www.viart.com Affected version: 4.1, 4.0.8, 4.0.5 Summary: Viart Shop is a PHP based e-commerce suite, aiming to provide everything you nee...
Xilisoft Video Converter Ultimate 7.8.1 build-20140505 DLL Hijacking
/ Title: Xilisoft Video Converter Ultimate Dll Hijacking Exploit quserex.dll Version: 7.8.1 build-20140505 Previous versions might be vulnerable Tested on: Windows XP SP2 en Vendor: http://www.xilisoft.com/ Software Link:...
Ultimate Weather Plugin <= 1.0 - Unauthenticated Reflected XSS
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-content/plugins/ultimate–weather–plugin/magpierss/scripts/magpiedebug.php?url=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
VirusChaser栈缓冲区溢出漏洞
Bugtraq ID:66475 Virus Chaser驱逐舰是拥有广告/间谍软件扫描功能+完美的病毒扫描与修复功能,能强力清除流氓软件、广告软件及间谍软件。 Virus Chaser存在一个基于栈的缓冲区溢出，允许攻击者构建恶意文件，诱使应用扫描，可使应用程序崩溃。 0 VirusChaser 8.0 目前没有详细解决方案提供： https://www.viruschaser.com/ Exploit Title: VirusChaser 8.0 - Stack Buffer Overflow Date: 2014/03/26 Exploit Author: wh1ant Vendo...
MS14-010 CVE-2014-0293 Technical Details and Code(I changed the web permanently)
Origin: Visit http://technet.microsoft.com/en-us/security/bulletin/ms14-010 Check "Acknowledgments" for "CVE-2014-0293". It says "Dieyu" and links to my website http://dieyu.org/ Technical Details: showModalDialog to keep script running, HTTP redirecting to target domain. Then script will run in...
MP3Info 0.8.5a - Local Buffer Overflow (SEH)
Exploit Title: mp3info SEH exploit Date: 18 March 2014 Exploit Author: Ayman Sagy Vendor Homepage: http://ibiblio.org/mp3info/ Software Link: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz Version: MP3Info 0.8.5 Tested on: Windows 7 Ultimate 64 and 32 bit CVE ...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Ultimate Fun Book function.php gbpfad Parameter PHP Code Execution - Ver2 (CVE-2007-1059)
A code execution vulnerability has been reported in Ultimate Fun Book. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Code injection
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl parameter to campaign/campaignone.php; the 2 action, 3 campaignname, 4 campaignformat...
CVE-2013-3264
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...
CVE-2013-3263
CVE-2013-3263 affects the WordPress WP Ultimate Email Marketer Plugin (tested with version 1.1.0 and possibly earlier). The connected sources describe multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via a range of parameters (siteurl, action, campaignna...
PT-2013-4262
Name of the Vulnerable Software and Affected Versions WP Ultimate Email Marketer plugin version 1.1.0 and possibly earlier Description The issue concerns improper access restriction to certain API endpoints, specifically "list/edit.php" and "campaign/editCampaign.php", allowing remote attackers t...
CVE-2013-3264: Undefined Security Weakness
The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to 1 list/edit.php and 2 campaign/editCampaign.php, which allows remote attackers to modify list or campaign data...
CVE-2013-3263: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl parameter to campaign/campaignone.php; the 2 action, 3 campaignname, 4 campaignformat...
Practico 13.9 XSS / CSRF / SQL Injection
Practico 13.9 Multiple Vulnerabilities Vendor: Practico Product web page: http://www.codigoabierto.org Affected version: 13.9 Summary: Practico is a free CMS software project released under license GNU GPL v2.0 for creating web applications in a completely visual and fast fashion. Without...
Immunity Canvas: CVE_2013_3881
Name| CVE20133881 ---|--- CVE| CVE-2013-3881 Exploit Pack| CANVAS Description| Win32k NULL Page Exploit Notes| Repeatability: Notes: This vulnerability only affects Intel x86 based versions of Windows 7 This module automatically migrates to lsass.exe . Tested on: Windows 7 Ultimate N VENDOR:...
Ice Cold Apps Servers Ultimate 6.0.2(12) Remote Command Execution
Ice Cold Apps Servers Ultimate version 6.0.212 for Android has no credentials by default and authentication is disabled for telnet/ssh/ftp, allowing remote access to the device's storage. Multiple vulnerabilities in Ice Cold Apps Servers Ulitmate Version 6.0.212 for Android 9/8/13 Larry W...