BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV102$2009 ----------------------------------------------------------------------------------------- ECHOADV102$2009 BusinessSpace = 1.2 id Remote SQL Injection Vulnerability...

CVE-2008-5237

Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 crafted width and height values that are not validated by the mymngprocessheader function in demuxmng.c before u...

Maran PHP Shop (prodshow.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------- Maran PHP Shop prodshow.php SQL Injection Vulnerability http://www.maran.pamil-visions.com/maranshop.php...

tlguestbook-insecure.txt

-========================================- Autore: x0r Email: evolutionteam.x0 at gmail.com Cms: TlGuestBook v 1.2 Bug: Insecure Cookie Handling Vulnerability Cms Download: http://www.easy-script.com/scripts-dl/tlguestb-12.zip -========================================- Exploit:...

Jetbox CMS 2.1 - '/admin/cms/images.php?orderby' SQL Injection

source: https://www.securityfocus.com/bid/31824/info Jetbox CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

MS03-020 Microsoft Internet Explorer Object Type

This module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS03-020 Microsoft Internet Explorer Object...

超星浏览器4.0漏洞0day

No description provided by source. object classid="clsid:7F5E27CE-4A5C-11D3-9232-0000B48A05B2" id='target'/object PMade By Friddy QQ:568623 Phttp://www.friddy.cn SCRIPT language="javascript" var shellcode =...

NuMedia Soft Nms DVD Burning SDK - ActiveX NMSDVDX.dll Command Execution

NuMedia Soft Nms DVD Burning SDK - ActiveX NMSDVDX.dll Command Execution : DVDEngineX.Initialize True sLogFileName="C:\WINDOW...

otmanager-cookie.txt

...:::::OTManager CMS v2.4 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best...

Cosminexus javadoc Cross-Site Scripting Vulnerability

Overview The javadoc command of Cosminexus may generate an HTML file that contains cross-site scripting vulnerabilities. Impact An attacker could exploit said HTML file vulnerable to cross-site scripting. Solution Please refer to the 'Vendor Information' section for official remediation and take...

BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day)

PR: n/a I: 10,500 L: 0 LD: 246,240 I: 70400 Rank: 18167 Age: Feb 17, 2004 I: 0 whois source Density Links: 0|0 !/usr/bin/python BigAnt Server Ver 2.2 PreAuth Remote SEH Overflow 0day Matteo Memelli aka ryujin http://www.r57shell.in - http://adult.wikipediatr.com - http://www.wikipediatr.com...

Apache Tomcat处理包含MS-DOS设备名请求信息泄漏漏洞

BUGTRAQ ID: 28484 CVE ID: CVE-2005-4703 CNCVE ID:CNCVE-20054703 Tomcat是一款由Apache软件基金会下属的Jakarta项目开发的一个Servlet容器。 Apache Tomcat 4.0.3不正确处理包含MS-DOS设备名的请求，远程攻击者可以利用漏洞获得敏感信息。 当请求的文件匹配MS-DOS文件名时，就会出现错误。服务器会返回包含安装路径等敏感信息。 Apache Software Foundation Tomcat 4.0.3 Apache Software Foundation Tomcat 4.0.3...

ipb23x-xss.txt

Tested On: http://www.abarjigs.com/forum/ Effected on:Invision Power Board 1.REG WITH VICTIM FORUM 2.GO TO USER CONTROL PANEL 3.EDIT YOUR SIGNATURE ByTHIS CODE Code: Select all HACKED BY YOUR-NAME 4.AFTER THAT U WILL SEE ALL THE PAGE IS COVERED BY YOUR PAGE 5.GO ANY TOPIC AND POST ANYTHING. 6.AFT...

dotnetnuke-expose.txt

=========================================================== DotNetNuke Default Machine Key Exposure Public Release Date: March 20, 2008 Brian Holyfield - Gotham Digital Science [email protected] Affected Software: DotNetNuke = 4.8.1 Severity: Critical...

EEYE: CA BrightStor ArcServe Backup Server Arbitrary Pointer Dereference

CA BrightStor ARCserve Backup Server Arbitrary Pointer Dereference Release Date: October 11, 2007 Date Reported: June 18, 2007 Severity: High Remote Code Execution Vendor: Computer Associates CA Systems Affected: BrightStor ARCserve Backup 11.5 BrightStor ARCserve Backup 11.1 BrightStor ARCserve...

Drupal 5.2 - PHP Zend Hash ation Vector

Drupal = 5.2 PHP Zend Hash Vulnerability Exploitation Vector Example: http://www.example.com/drupal/?menucallbacks1callback=drupaleval&menuitemstype=-1&-312030023=1&q=1/?phpinfo; milw0rm.com 2007-10-10...

smbftpd 0.96 - SMBDirList-function Remote Format String

/ smbftpd 0.96 Proof of concept tested with smbftpd 0.96 compiled with gcc 3.3.6 1. write jumpcode to BSS mov dx, 0x1234 pop eax cmp ax, dx jne $-4 jmp esp 2. overwrite a GOT entry with the addr to BSS & send shellcode jerry: ./bleh -h localhost + GOT: 0x80591d8 - .bss jmpcode: 0x805a791 +...

EasyMail MessagePrinter Object - emprint.dll 6.0.1.0 Remote Buffer Overflow

EasyMail MessagePrinter Object - emprint.dll 6.0.1.0 Remote Buffer Overflow pwnin'... //add su one, user: sun pass: tzu shellcode =...

QuickTicket 1.2 - 'qti_checkname.php' Local File Inclusion

QuickTicket v1.2 Local File Inclusion download: http://www.qt-cute.org/download/qti12.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploit:...

HPSBPI02226 SSRT061274 rev.2 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access

Potential Security Impact Remote unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Help and Support Center running on HP Notebook Computers running with Windows XP. The vulnerability could be remotely exploited to allow unauthorized access to t...