SIPS 0.2.2 User Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7134/info It has been reported that authentication is not required to view user account information. As a result, an unauthorized remote attacker may be able to view potentially sensitive information. This may aid in...

PBBoard 2.1.4 - Multiple SQL Injection Vulnerabilities

No description provided by source. Title: PBBoard v2.1.4 multiple SQLi Vulnerabilities Version: 2.1.4 Author/Found by: loneferret Software Site: http://www.pbboard.com/PBBoardv2.1.4.zip Other vulnerabilities: http://www.exploit-db.com/exploits/18937/ Date found: May 29th 2012 Tested on: Ubuntu...

Nuke ET 3.4 - 'mensaje' Parameter HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28614/info Nuke ET is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attackers will likely require access to a user account to perform attacks. Exploiting this...

Microsoft Windows NT <= 4.0 SP5,Terminal Server 4.0 "Pass the Hash" with Modified SMB Client Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need...

Prozilla Top 100 1.2 - Arbitrary Delete Stats Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered...

HP Web Jetadmin 7.5.2456 Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9973/info Reportedly HP web Jetadmin is prone to a remote arbitrary command execution vulnerability. This issue is due to a failure of the application to properly validate and sanitize user supplied input. Successful...

Geeklog <= 1.6.0sr2 - Remote File Upload

No description provided by source. ============================================================================== Geeklog = v1.6.0sr2 - Remote File Upload Discovered: JaL0h Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered...

ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple Vulnerabilities

No description provided by source. Exploit Title: ZTE ZXDSL 831IIV7.5.0aZ29OV Multiple vulnerabilities Date: 28 / 10 / 2011 . Authors: Mehdi Boukazoula ; Ibrahim Debeche . Software Link with patch : Version: v 831IIV7.5.0aZ29OV Tested on: v 831IIV7.5.0aZ29OV, May Affect all ZTE routers !!...

DCForum 6.0 - Remote Admin Privilege Compromise Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2728/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. Versions of DCForum are vulnerable to attacks which can yield an elevation of privileges an...

Exim <= 4.41 dns_build_reverse Local Exploit

No description provided by source. / ripped straight off iDEFENSE advisory - so lazy I just picked up GDB... bored on a weeknight : nothing to write home to mother about due to the fact that you need a local user account on a server and all you get is to read other people's emails .... not even m...

OS/400 User Account Name Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4059/info AS/400 is a midrange computer platform developed by IBM. It is designed to be highly reliable and efficient, and uses the OS/400 operating system. An information disclosure vulnerability has been reported to exi...

Positive Software H-Sphere Winbox 2.4 Sensitive Logfile Content Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user credentials could be exposed to other local users w...

Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...

joomla component memorybook 1.2 - Multiple Vulnerabilities

No description provided by source. SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found o...

Geeklog 1.3.7 Homepage User Field HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6604/info Geeklog is prone to HTML injection attacks. The user account 'Homepage' field is not sufficiently sanitized of HTML and script code. As a result, a malicious user may inject malicious HTML and script code into...

Coppermine Photo Gallery 1.4.9 - Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/ cpg149 1 john...

Apple Mac OS X 10.4 dsidentity Directory Services Account Creation and Deletion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described in BID 14567 Apple Mac OS X Multiple...

RedHat Piranha Virtual Server Package passwd.php3 Arbitrary Command Execution

No description provided by source. $Id: piranhapasswdexec.rb 10729 2010-10-18 15:41:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

OtomiGenX 2.2 - 'userAccount' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29470/info OtomiGenX is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

HackerOne: Cache leads to Privacy leaks

POC IS ATTACHED Description: --------------------------- This bug allows me to see others users usernames even if they don't want to. Steps to reproduce: -------------------------------------- 1. Log in to account A 2. Change password of account A 3. You will be automatically logged out. 4. Log i...