10306 matches found
Technicolor TC7200 - Multiple CSRF Vulnerabilities
No description provided by source. Exploit Title: Technicolor TC7200 - Multiple CSRF Vulnerabilities Google Dork: N/A Date: 02-01-2013 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gatew...
AWStats (6.0-6.2) configdir Remote Command Execution Exploit (perl code)
No description provided by source. !/usr/bin/perl ---GHC--------------------------------- Remote command execution exploit Product: Advanced Web Statistics 6.0 - 6.2 URL:http://awstats.sourceforge.net Greets & respects to our friends: 1dt.w0lf and all rst.void.ru Special greets 2 d0G4 & cr0n for...
Office 2008 sp0 RTF Pfragments MAC exploit
No description provided by source. RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/...
Advanced Guestbook 2.2 Password Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10209/info It has been reported that Advanced Guestbook is prone to a SQL injection vulnerability that could allow an attacker to gain administrative access to the application. This issue is reported to exist in Advanced...
PHP Advanced Transfer Manager <= 1.30 Source Code Disclosure Exploit
No description provided by source. ? / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:...
SPGPartenaires 3.0.1 delete.php SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/6455/info Several vulnerabilities have been discovered in SPGPartenaires. The vulnerabilities are due to insufficient sanitization of the 'pass' and 'SPGP' variables used to construct SQL queries in various PHP scripts. B...
Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0day
No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language=JavaScript defer var sCode =...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
No description provided by source...
Advanced Poll 2.02 SQL Injection Vulnerability
No description provided by source...
vBulletin "Cyb - Advanced Forum Statistics" DoS
No description provided by source...
PHP Advanced Transfer Manager 1.21 Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13542/info PHP Advanced Transfer Manager is prone to a vulnerability regarding the uploading of arbitrary files. If successfully exploited, an attacker can execute arbitrary script code on a vulnerable server. This can le...
Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit
No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou [email protected] PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...
WordPress Plugin Advanced Custom Fields Remote File Inclusion
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Advanced Image Hosting 2.2 (index.php) SQL Injection Vulnerability
No description provided by source. ========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com...
IBM Rational RequisitePro 7.10 ReqWeb Help Feature ReqWebHelp/advanced/workingSet.jsp operation Parameter XSS
No description provided by source...
Microsoft to End Email Security Notifications
Update: Microsoft today has reversed course on its decision to suspend security email notifications, and will resume doing so on Thursday. The original decision, made in response to Canada’s antispam law set to go into effect tomorrow, was announced on Friday. This afternoon, however, a Microsoft...
Google Patches Gmail Token Vulnerability
Google has patched a vulnerability that exposes an indefinite number of Gmail addresses, a potential gold mine for phishing and advanced attacks. Researcher Oren Hafif of Israel disclosed details on how he was able to abuse a token exposed in a URL in order to reveal every Gmail address. His work...
Buffer overflow
Buffer overflow in A10 Networks Advanced Core Operating System ACOS before 2.7.0-p6 and 2.7.1 before 2.7.1-P155 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long session id in the URI to sysreboot.html. NOTE: some of these details are obtain...
[SECURITY] Fedora 20 Update: openstack-neutron-2013.2.3-7.fc20
Neutron is a virtual network service for Openstack. Just like OpenStack Nova provides an API to dynamically request and configure virtual servers, Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services e.g.,...
Coinbase: Bypassing 2FA for BTC transfers
Under advanced settings, users have the ability to protect their wallet by requiring two-factor confirmation when sending bitcoins. Personally, I have configured my account with the most secure option, which requires two factor confirmation when sending any amount of bitcoins. However, a flaw...