Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

Exploit for windows platform in category dos / poc ====================================================================== Windows Live Messenger for the msnlib library / Original msnbot example that I modded = Description: Windows Live Messenger is prone to a Denial of Service attack. By sending...

XSS vulnerability in BXR search

Vulnerability ID: HTB22505 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinbxrsearch.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type:...

XSS vulnerability in Campsite

Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions Vendor Notification: 16 July 2010 Vulnerability Type: XSS Cross Sit...

DT Centrepiece 4.5 - Cross-Site Scripting Security Bypass

DT Centrepiece 4.5 - Cross-Site Scripting Security Bypass source: https://www.securityfocus.com/bid/42243/info DT Centrepiece is prone to multiple cross-site scripting vulnerabilities and multiple security-bypass vulnerabilities. An attacker may leverage the cross-site scripting issues to execute...

FuseTalk Forums 4.0 Cross Site Scripting

XSS vulnerability in FuseTalk Forums ------------------------------------- Vulnerability ID: Month Of Full Disclosure 1 = MOFD1 ------------------------------------ Product: FuseTalk ------------------------------------- Vendor: FuseTalk Inc...

Jira Cross Site Scripting and Information Disclosure Vulnerabilities

Atlassian JIRA is prone to multiple cross-site scripting vulnerabilities and an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

Exploit for windows platform in category remote exploits ============================================================ Xerver 4.32 Source Disclosure and HTTP Authentication Bypass ============================================================ Exploit Title: Xerver Source Disclosure and HTTP Auth...

Impact Software AdPeeps - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

httpdx Multiple Vulnerabilities

This host is installed with httpdx and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbhttpdxmultvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ httpdx Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...

sNews 1.7 - index.php?category SQL Injection

sNews 1.7 - index.php?category SQL Injection sNews v1.7 index.php?category SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: "Powered by sNews" Sql Injection: http://localhost/path/index.php?category=-3 union select 0,version,2,3,4,5,6,7,8 Thanks...

XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

Quick 'n Easy FTP Server 3.9.1 - 'USER' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/42186/info Quick 'n Easy FTP Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input before copying it to an insufficiently sized memory buffer. An attacker can exploit this iss...

XSS vulnerability in Pixie

Vulnerability ID: HTB22468 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site Scripting...

XSS vulnerability in FestOS

Vulnerability ID: HTB22472 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfestos.html Product: FestOS Vendor: Skypanther Studios, Inc http://festengine.org/ Vulnerable Version: 2.3b and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

FathFTP ActiveX Control Multiple Buffer Overflow Vulnerabilities

FathFTP is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22451 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa2.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

AbleSpace 1.0 - news.php SQL Injection

AbleSpace 1.0 - news.php SQL Injection source: https://www.securityfocus.com/bid/41139/info AbleSpace is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

TitanFTP Server Arbitrary File Disclosure

Accensus Security Advisory L-02 TitanFtp Server Arbitrary File Disclosure Details ============= Product: TitanFTP Server Security-Risk: high Remote-Exploit: maybe, assuming anonymous ftp access Local-Exploit: yes Vendor URL: http://www.southrivertech.com/ Found By: Bill Finlayson...

IP2location.dll 1.0.0.1 - Function 'Initialize()' Local Buffer Overflow

IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by sinn3r / IP2Location.dll v1.0.0.1 Initialize Buffer Overflow Vulnerable version : v1.0.0.1 checksum: d86933ab58720c384bdc081d33684f7d patched version : v1.0.0.1 checksum: bf66e2ef8be3c301b381cfb424ad0afc, v3.0.1.0 Found and coded by sinn3r...

IP2location.dll v1.0.0.1 Function Initialize() Buffer Overflow

Exploit for windows platform in category local exploits ============================================================== IP2location.dll v1.0.0.1 Function Initialize Buffer Overflow ============================================================== IP2Location.dll v1.0.0.1 Initialize Buffer Overflow by...