1194 matches found
OneOrZero AIMS 2.6.0 Members Edition - Multiple Vulnerabilities
No description provided by source. :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...
ASPSiteware Project Reporter SQL Injection
No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...
TinyBB 1.2 - SQL Injection Vulnerability
No description provided by source. +-------------------------------+ | TinyBB 1.2 SQLi Vulnerability | +-------------------------------+ Vulnerable Web-App : TinyBB 1.2 Vulnerability : SQL Injection. Author : Aodrulez. Email : [email protected] Google-Dork : TinyBB 2011 all rights reserved...
Horizon Web Builder (fshow.php) SQL Injection Vulnerability
No description provided by source. Exploit Title: Horizon SQLi Google Dork: intext:Site by Horizon : inurl:uid=HORIZON3 Date: 03/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.horizonsolutions.tv/ Notes: Both params are vulnerable to union...
Zoneminder 1.24.3 - Remote File Inclusion Vulnerability
No description provided by source. Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability Date: 2011-07-22 Author: Iye iyedotcba-at-gmaildotcom Software Link: http://www.zoneminder.com/ Version: 1.24.3 Tested. 1.24.4 probably too, not tested Tested on: Ubuntu 10.04 You must be...
Log1 CMS 2.0 - Multiple Vulnerabilities
No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...
aBitWhizzy whizzylink.php d Variable Traversal Arbitrary Directory Listing
No description provided by source. source: http://www.securityfocus.com/bid/23167/info aBitWhizzy is prone to multiple cross-site scripting and directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit these...
Web-APP.net WebAPP 0.9.x index.cgi Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17359/info Web-App.Org and Web-App.Net are prone to multiple cross-site scripting vulnerabilities because the applications fail to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities
No description provided by source. Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities Author: SirGod Website: www.rstforums.com Vendor Homepage: http://www.trendnet.com/ Version: 1.00.23 1. Local file disclosure The router has the TFTP service enabled by default and it can be accessed...
CVE-2014-2611
Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120...
Apache vulnerabilities-after suffix name parsing vulnerability-vulnerability warning-the black bar safety net
We all know that windows2003 + IIS6. 0, if the directory structure has xxx. asp such a directory, then all the directory of the file regardless of the extension of what are as asp to parse. We generally call this the loophole for windows2003+iis6. 0 directory to resolve the vulnerability. Blog...
TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities
TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities Author: SirGod Website: www.rstforums.com Vendor Homepage: http://www.trendnet.com/ Version: 1.00.23 1. Local file disclosure The router has the TFTP service enabled by default and i...
TRENDnet TEW-634GRU 1.00.23 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Title: TRENDnet TEW-634GRU 1.00.23 Multiple Vulnerabilities Author: SirGod Website: www.rstforums.com Vendor Homepage: http://www.trendnet.com/ Version: 1.00.23 1. Local file disclosure The router has the TFTP service enabled by default a...
vtiger CRM密码重置安全绕过漏洞
Bugtraq ID:65757 CVE ID:CVE-2014-2269 vTiger CRM是一款基于Web以销售能力自动化SFA为主的客户关系管理系统CRM。 vTiger CRM安装脚本存在安全漏洞，允许攻击者利用漏洞执行任意命令，可重置密码并控制应用。 0 vtiger CRM 6.0 目前没有详细解决方案： http://www.securityfocus.com/bid/66757/www.vtiger.de This module requires Metasploit: http//metasploit.com/download Current source:...
Vtiger - 'Install' Remote Command Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Vtiger Install Unauthenticated Remote Command Execution', 'Description' = %q This module exploits an arbitrary command execution...
MS14-017: Description of the security update for Word Web App: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...
LinEx - Password Reset Vulnerability
Exploit for php platform in category web applications Exploit Title: LinEx All Versions Password Reset Vulnerability Google Dork: linkex.dk 2006-2011 Date: 15/01/2014 Exploit Author: N B Sri Harsha Reconnect Gray hat Vendor Homepage: http://linkex.dk/ Software Link:...
RelateIQ: open redirect
go to https://www.relateiq.com/sign-up 2. Fill the form and click on signup free button. 3. Intercept the request using tamper data and change the 'retURL' parameter to any value like https://google.com any evil url and submit the request. 4. The web app redirect to any evil website...
UBUNTU-CVE-2013-4590
Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web application with a context.xml, web.xml, .jspx, .tagx, or .tld XML document containing an external entity declaration ...
CVE-2013-5611
Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation...