1726 matches found
Nexpose Security Console CSRF Vulnerability
No description provided by source...
Alqatari Group 1.0 - Blind SQL Injection Vulnerability
No description provided by source...
JM CMS 1.0 <= 1.0 - (Auth Bypass) SQL Injection Vulnerability
No description provided by source...
AutoDealer 1.0 & 2.0 - MSSQLi Vulnerability
No description provided by source...
Apache 1.0/1.2/1.3 Server Address Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3169/info A vulnerability has been discovered in Apache web server that may result in the disclosure of the server's address. The problem occurs when a HTTP request containing the URI of a directory is submitted to the...
VisualPic 0.3.1 Cross-Site Scripting Vulnerability
No description provided by source...
Apache Tomcat <= 6.0.13 Cookie Handling Quote Delimiter Session ID Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/25316/info Apache Tomcat is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access potentially sensitive data that...
phpBazar 2.1.1 stable - rfi Vulnerability
No description provided by source...
phpBugTracker 1.0.1 - File Disclosure Vulnerability
No description provided by source...
Samba chain_reply Memory Corruption (Linux x86)
No description provided by source. $Id: chainreply.rb 10238 2010-09-04 02:10:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
TFTgallery <= 0.13.1 - Local File Inclusion Vulnerability
No description provided by source...
deV!L`z Clanportal Witze Addon 0.9 - SQL Injection Vulnerability
No description provided by source. ======================================================================================== | Title : deV!Lz Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability | Author : Easy Laster | Download : http://dzcp-zone.de/downloads/?action=show&id=97 | Scrip...
MyShoutPro 1.2 Final - Cross Site Scripting Vulnerability
No description provided by source. ======================================================================================== | Title : MyShoutPro v1.2 Final Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi ...
LandShop 0.6.3 ls.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20989/info LandShop is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to steal cookie-based...
Flyspray 0.9.9 - Information Disclosure, HTML Injection, and Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28076/info Flyspray is prone to an information-disclosure issue, an HTML-injection issue, and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may levera...
Microsoft Internet Explorer 8 - Fixed Col Span ID (Full ASLR + DEP + EMET 4.1.x Bypass) (MS12-037)
function strtointstr return str.charCodeAt10x10000 + str.charCodeAt0; var free = "EEEE"; while free.length 500 free += free; var string1 = "AAAA"; while string1.length 500 string1 += string1; var string2 = "BBBB"; while string2.length 500 string2 += string2; var fr = new Array; var al = new Array...
MediaWiki 1.22.1 PdfHandler - Remote Code Execution Exploit
No description provided by source...
Php-Stats 0.1.9.2 - Multiple Vulnerabilities Exploit
No description provided by source. ?php / Php-Stats 0.1.9.2 Multiple Vulnerabilities Exploit Blind SQL Injection / Remote Code Execution P.o.C. author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://php-stats.com/downloads details..: works with magicquotesruntime = off 1 Blind SQL...
Kerio Mailserver 5.6.3 list Module Overflow
No description provided by source. source: http://www.securityfocus.com/bid/7967/info Multiple buffer overrun vulnerabilities have been discovered in Kerio MailServer, which affect the webmail component. The problem occurs when handling usernames of excessive length and likely occurs due to...
linux/x86 append "/etc/passwd" & exit() 107 bytes
No description provided by source. / appendpasswd.c Payload: Adds the string: toor::0:0:t00r:/root:/bin/bash to /etc/passwd thereby adding a password-less root account with login name toor Platform: linux/x86 Size: 107 bytes Author: $andman / / 08049054 start: 8049054: eb 38 jmp 804908e callfunc...