Microsoft Windows Messenger Remote Illegal Access Vulnerability

CVE-2008-0082 When installing Windows XP, an old edition of MSN Messenger is installed automatically. The old edition opens the MSN API to develop as an ActiveX Control, and marks it with "safe". By using this ActiveX Control, we can control the local MSN Messenger, for instance: change state, ga...

HydraIRC远程拒绝服务漏洞

BUGTRAQ ID: 30523 CNCAN ID：CNCAN-2008080502 HydraIRC是一款IRC聊天客户端。 HydraIRC不正确处理恶意WEB页，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 HydraIRC 0.3.164 目前没有解决方案提供： http://www.hydrairc.com/ Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Worki...

hydralrc-dos.txt

Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : HydraIRC Remote Denial Of Service Poc var site = 'irc://127.0.0.1/' var buf = 'A...

HydraIrc <= 0.3.164 (last) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================================== HydraIrc HydraIRC Remote Denial Of Service Poc var site = 'irc://127.0.0.1/' var buf = 'A'; while buf.length 0day.today 2018-01-09...

HydraIrc 0.3.164 - Remote Denial of Service

HydraIrc 0.3.164 - Remote Denial of Service Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Working on : all browsers Include this in any webpage or xss & see it with any browser , wait 15sec, and boom. PoC : HydraIRC Remote Denial Of Service Po...

CVE-2008-3129

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

BareNuked CMS 1.1.0 - Arbitrary Add Admin

!/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------|...

MS Internet Explorer (Print Table of Links) Cross-Zone Scripting PoC

No description provided by source. !-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in ...

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting

!-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in its “Print Table of Links” feature. This feature allows users to add to a printed web page an...

philboard1-sql.txt

Philboard W1L3D4 v1.0 Multiple SQL İnjection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

BlogWorx 1.0 - id SQL Injection

BlogWorx 1.0 - id SQL Injection BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...

blogworx-sql.txt

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

BlogWorx 1.0 - 'id' SQL Injection

BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ : http://www.codedworld.com/download/blogworx/74764.html...

BlogWorx 1.0 (view.asp id) Remote SQL Injection Vulnerability

No description provided by source. BlogWorx 'view.asp' Multiple SQL Injection Vulnerability Discovered By : U238 WebPage : http://noexec.blogspot.com mail : setuid.noexec0x1a.qhotmaild0t.com Script : http://devworx.somee.com/projects/project.asp?pid=20 Script alternativ :...

W1L3D4 philboard 1.0 - philboard_reply.asp SQL Injection

W1L3D4 philboard 1.0 - philboardreply.asp SQL Injection Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2:...

W1L3D4 philboard 1.0 - 'philboard_reply.asp' SQL Injection

Philboard W1L3D4 v1.0 Multiple SQL Ä°njection Vulnerable Author : U238 mail : setuid.noexec0x1aqhotmaildotcom webpage: http://noexec.blogspot.com Script : http://www.aspindir.com/Goster/4703 Script2: http://rapidshare.de/files/39107179/philboardtrge.zip.html...

cobalt-sql.txt

---------------------------------------- CoBaLT v1.0 Remote SQL İnjection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28152/info Alkacon OpenCms is prone to multiple input-validation vulnerabilities, including one cross-site scripting issue and a file-disclosure issue, because the application fails to properly sanitize user-supplied input. Attackers can exploit these...

phpcomasy-sql.txt

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql İnj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

Macrovision InstallShield Update Service ActiveX Control Code Execution (CVE-2007-5660)

Macrovision InstallShield is a software tool for creating installers or software packages. This vulnerability is due to errors in the Macrovision InstallShield Update Service ActiveX Control when handling webpage scripts. To trigger this issue, an attacker may create a malicious web page that wil...