Click&Email (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Founded By : SuB-ZeRo WaLiD E-mail : [email protected] Home : WwW.dz-security.Net GreeTZ : Evils-dz & X.CJP.x & www.dz-security.net & gaza --------------------------------------------------------- vondor : http://icash.ch...

Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnt_eval() Perl Code Evaluation RCE

No description provided by source. Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll ldapagnteval Perl Code Evaluation RCE pre auth/SYSTEM Tested against: Microsoft Windows 2003 r2 sp2 download url: http://download.novell.com/index.jsp search Privileged User Manager file tested:...

Active Web Helpdesk 2 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

amoeba cms 1.01 - Multiple Vulnerabilities

No description provided by source. !/usr/bin/python Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the web...

Mercury Mail SMTP AUTH CRAM-MD5 Buffer Overflow

No description provided by source. $Id: mercurycrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

If-CMS 2.07 Pre-Auth Local File Inclusion Exploit

No description provided by source. !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

DotDefender <= 3.8-5 No Authentication Remote Code Execution Through XSS

No description provided by source. / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability:...

Dark Age CMS <= 0.2c Beta - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. --+++==================================================================================+++-- --+++====== Dark Age CMS = v0.2c Beta Auth Bypass SQL Injection Vulnerability ======+++--...

W3infotech (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + |ViRuSHiMa@YouR SyS|\ + ||||\ + |||||, + |||||||| + @''@|@@@ +====================================================================|| About : W3infotech Auth Bypass SQL injection Vulnerability || ! Site : http://www.w3infotech.com || ! Author : ViRuSHiMa || !...

Avaya WinPDM UniteHostRouter <= 3.8.2 - Remote Pre-Auth Command Execute

No description provided by source. Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = 3.8.2 Remote Pre-Auth Command Execute A boundary error in the Unite Host Router service UniteHostRouter.exe when processing certain requests can be exploited to cause a stack-based...

IPN Development Handler 2.0 - Multiple Vulnerabilities

No description provided by source. IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ ===...

Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service

No description provided by source. !/usr/bin/python Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service Coded By: DrIDE Found By: Ma3sTr0-Dz Date: May 24, 2010 Download: http://sourceforge.net/projects/open-ftpd/ Tested: Windows 7 import random, socket, sys host = sys.argv1 buff = A:...

sysax <= 5.57 - Directory Traversal

No description provided by source. !/usr/bin/python Title: Sysax Multi Server = 5.57 Directory Traversal Tool Post Auth Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit and Server 2003 SP2 32bit Date Discovered: March 27, 2012 Vendor Contacted: March 29, 2012 Vendor Response: April 3, 2012...

RiotPix <= 0.61 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. RiotPix = 0.61 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 06.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI...

clickandemail (sql/xss) Multiple Vulnerabilities

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ClickAndEmaiL download : null Demo : http://icash.ch/ClickAndEmailDEMO Exploits : --=SQL...

impleo music collection 2.0 (sql/xss) Multiple Vulnerabilities

No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...

Linux Kernel < 2.6.26.4 - SCTP Kernel Memory Disclosure Exploit

No description provided by source. / cve-2008-4113.c Linux Kernel 2.6.26.4 SCTP kernel memory disclosure Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in t...

Absolute Form Processor XE-V 1.5 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home:...

GNU Anubis 3.6.x/3.9.x auth.c auth_ident() Function Overflow

No description provided by source. source: http://www.securityfocus.com/bid/9772/info GNU Anubis has been reported prone to multiple buffer overflow and format string vulnerabilities. It has been conjectured that a remote attacker may potentially exploit these vulnerabilities to have arbitrary co...

Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/20365/info Multiple Computer Associates products are prone to multiple buffer-overflow vulnerabilities because the applications using an affected library fail to properly bounds-check user-supplied input before copying it...