JDownloader - 'JDExternInterface.java' Remote Code Execution

source: https://www.securityfocus.com/bid/38143/info JDownloader is prone to a vulnerability that lets remote attackers execute arbitrary code. Attackers can exploit this issue to execute arbitrary code within the context of the affected webserver process. Versions prior to JDownloader 0.9.334 ar...

JDownloader - JDExternInterface.java Remote Code Execution

JDownloader - JDExternInterface.java Remote Code Execution source: https://www.securityfocus.com/bid/38143/info JDownloader is prone to a vulnerability that lets remote attackers execute arbitrary code. Attackers can exploit this issue to execute arbitrary code within the context of the affected...

GeFest Web Home Server 1.0 - Directory Traversal

GeFest Web Home Server 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/38141/info Gefest Web Home Server is prone to a remote directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view...

XAMPP Multiple Vulnerabilities June 2009

XAMPP is prone to multiple vulnerabilities. 1. showcode.php Local File Include Vulnerability An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. This may aid in further attacks. 2. Multiple Cross Site Scripting Vulnerabilitie...

lighttpd 1.4/1.5 - Slow Request Handling Remote Denial of Service

source: https://www.securityfocus.com/bid/38036/info The 'lighttpd' webserver is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to hang, denying service to legitimate users. slowtest.sh for j=0;j/dev/null 2/dev/null & done& sleep 3 don...

HTTP WebDAV Scanner

Detect webservers with WebDAV enabled This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP WebDAV Scanner', 'Description' = 'Detect webservers with WebDAV enabled', 'Author' = 'et', 'License' =...

HTTP WebDAV Internal IP Scanner

Detect webservers internal IPs though WebDAV This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP WebDAV Internal IP Scanner', 'Description' = 'Detect webservers internal IPs though WebDAV',...

Joomla CCNewsLetter Directory Traversal

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost -- Sorry for not...

Joomla! Component CCNewsLetter - Directory Traversal

Joomla! Component CCNewsLetter - Directory Traversal ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Joomla! Component CCNewsLetter - Directory Traversal

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comccnewsletter Directory Traversal Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost -- Sorry for not...

Joomla Component com_ccnewsletter Directory Traversal Vulnerability

Exploit for unknown platform in category web applications =================================================================== Joomla Component comccnewsletter Directory Traversal Vulnerability =================================================================== ...BEGIN ADVISORY...

Open Media Collectors Database Multiple Local File Include Vulnerabilities

Open Media Collectors Database OpenDb is prone to multiple local file- include vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context o...

SiteX 'THEME_FOLDER' Parameter Multiple Local File Include Vulnerabilities

SiteX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

Bits Video Script 2.042.05 - addvideo.php Arbitrary File Upload Arbitrary PHP Code Execution

Bits Video Script 2.042.05 - addvideo.php Arbitrary File Upload Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

Bits Video Script 2.04/2.05 - '/addvideo.php' Arbitrary File Upload / Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the...

Bits Video Script 2.04/2.05 - '/register.php' Arbitrary File Upload / Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the...

Bits Video Script 2.05 Gold Beta - 'showcase2search.php?rowptem[template]' Remote File Inclusion

source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute...

Bits Video Script 2.05 Gold Beta - showcasesearch.php?rowptem[template] Remote File Inclusion

Bits Video Script 2.05 Gold Beta - showcasesearch.php?rowptemtemplate Remote File Inclusion source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptem[template] Remote File Inclusion

Bits Video Script 2.05 Gold Beta - showcase2search.php?rowptemtemplate Remote File Inclusion source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

Bits Video Script 2.042.05 - register.php Arbitrary File Upload Arbitrary PHP Code Execution

Bits Video Script 2.042.05 - register.php Arbitrary File Upload Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...