CakePHP 2.x-2.2.0-RC2 XXE Injection

Exploit for php platform in category web applications Exploit title: CakePHP XXE injection Date: 01.07.2012 Software Link: http://www.cakephp.org Vulnerable version: 2.x - 2.2.0-RC2 Tested on: Windows and Linux Author: Pawel Wylecial http://h0wl.pl 1. Background Short description from the project...

Vivotek Cameras Data Configuration Disclosure

Exploit Title: Vivotek Full Data Source CONFIG Date: 09/07/12 Author: Alejandro Leon Morales GothicX Author Mail: Gothicxatfreaknetworkdotin Author Web: www.undermx.blogspot.mx Sofware web: www.vivotek.com Vulnerable version: all Tested on: Microsoft windows 7 / Vista / XP/ MacOS Dork:...

MGB - Multiple Cross-Site Scripting SQL Injections

MGB - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/54348/info MGB is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allo...

Internet Mobile Denial Of Service

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Zend Framework 2.0.0 beta4 1.12 RC1 1.11.11 - Local File Disclosure

Zend Framework 2.0.0 beta4 1.12 RC1 1.11.11 - Local File Disclosure SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local file disclosure via XXE injection product: Zend Framework vulnerable version: 1.11.11 1.12.0 RC1...

CMS Lokomedia - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

CMS Lokomedia - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54150/info CMS Lokomedia is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploi...

Wordpress Plugins - LB Mixed Slideshow Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PHP CGI Argument Injection

PHP CGI Argument Injection Remote Exploit PHP CGI Argument Injection Coded by: Mostafa Azizi admin@0-Daydotnet Mass File Uploader /th...

PHP CGI Argument Injection Remote Exploit (PHP Version)

Exploit for php platform in category web applications PHP CGI Argument Injection Remote Exploit PHP CG...

Galette SQL Injection

Source: http://www.securityfocus.com/bid/53463/info Galette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

FlexNet License Server Manager - Stack Overflow In lmgrd

FlexNet License Server Manager - Stack Overflow In lmgrd Luigi Auriemma Application: FlexNet License Server Manager http://www.flexerasoftware.com/products/flexnet-publisher.htm http://www.globes.com/support/fnputilitiesdownload.htm Versions: = 11.9.1 and others earlier this version number was...

ExoPHPDesk 1.2.1 SQL Injection

Author : L3b-r1'z Title : ExoPHPDesk v1.2.1 Bypass Vulnerability Dork : allintext: "Powered by ExoPHPDesk v1.2.1" Download : http://exoscripts.com/exohelpdesk Email : [email protected] Bypass Vuln + P0c : Http://exaple-site/admin.php Username : admin' or '1'='1 Password : anything Example...

Concrete5 CMS 5.5.2.1 - Information Disclosure / SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/53268/info concrete5 is prone to information-disclosure, SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to harvest sensitive information, compromi...

DEBIAN-CVE-2012-2400

Unspecified vulnerability in wp-includes/js/swfobject.js in WordPress before 3.3.2 has unknown impact and attack vectors...

Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities

Title: ====== Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Date: ===== 2012-04-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=487 VL-ID: ===== 487 Introduction: ============= Flatnux is no database CMS for accessible websites, corporate websites, e-commer...

Simple Machines Forum (SMF) 2.0.2 - scheduled Cross-Site Scripting

Simple Machines Forum SMF 2.0.2 - scheduled Cross-Site Scripting source: https://www.securityfocus.com/bid/52822/info Simple Machines Forum is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Google Chrome Full Sandbox Escape and Code Execution Vulnerability (MAC OS X)

This host is installed with Google Chrome and is prone to sandbox escape and code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromesandboxescpncodeexecvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Google Chrome Full Sandbox Escape and Code Execution Vulnerability MA...

VOXTRONIC Voxlog Professional 3.7.2.729 SQL Injection

Exploit for php platform in category web applications SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple critical vulnerabilities product: VOXTRONIC voxlog professional - voice recording solution vulnerable...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_include.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbaseinclude.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues t...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_main.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basemain.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...