TorrentTrader Classic 1.04 - Blind SQL Injection

TorrentTrader Classic 1.04 - Blind SQL Injection ====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr ==...

SkaLinks 1.5 - 'register.php' Arbitrary Add Editor

|| || | || o,7 || . o7 || 4||| ow, : / / . SQL Injection Found by ::: mr.al7rbi Contact ::: n16 at live.com my Group ::: mr.al7rbi team Title: SkaLinks - Link Exchange Script d0rk: 2005. Powered by SkaLinks - Link Exchange Script DESCRIPTION: add admin EXPLOITS:...

affildir-sql.txt

|| | | Affiliate Directory id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://scripts-for-sites.com/item.php?item=107 | | DorK :...

Novell iPrint Client ActiveX control stack buffer overflows

Overview The Novell iPrint Client ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Novell iPrint is a software printing solution that allows for printing over the internet. On...

[oCERT-2008-006] multiple SNMP implementations HMAC authentication spoofing

2008/06/09 2008-006 multiple SNMP implementations HMAC authentication spoofing Description: Some SNMP implementations include incomplete HMAC authentication code that allows spoofing of authenticated SNMPv3 packets. The authentication code reads the length to be checked from sender input, this...

Joomla Component acctexp <= 0.12.x Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component acctexp Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " &nb...

PhotoStockPlus Uploader Tool ActiveX stack buffer overflows

Overview The PhotoStockPlus Uploader Tool ActiveX control contains several stack buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description PhotoStockPlus provides an image uploader ActiveX control, which is provided by the...

Cyberfolio 7.12 (rep) Remote File Inclusion Vulnerability

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : cyberfolio 7.2 Remote File Include Vulnerabiliy Download From : http://cyberfolio.org/sources/version7.10/cyberfolio712.zip Found By : RoMaNcYxHaCkEr...

cyberfolio-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : cyberfolio 7.2 Remote File Include Vulnerabiliy Download From : http://cyberfolio.org/sources/version7.10/cyberfolio712.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ,...

Cyberfolio 7.12 - rep Remote File Inclusion

Cyberfolio 7.12 - rep Remote File Inclusion -========================================== ViVa Islam + YeMeN ====================================- Name : cyberfolio 7.2 Remote File Include Vulnerabiliy Download From : http://cyberfolio.org/sources/version7.10/cyberfolio712.zip Found By :...

CVE-2003-1556

CVE-2003-1556 affects CGI City CC GuestBook’s cc_guestbook.pl (Perl). The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML via the name and homepage_title parameters, potentially enabling cookie theft as described in the Nessus advisory. T...

inotes6-overwrite.txt

My first attempt at an SEH overwrite exploit. Anyhow, I first posted about this issue regarding version 7 of this control, Will Dormann of the CERT/CC discovered versions 6 and 6.5 are vulnerable too, see http://www.kb.cert.org/vuls/id/963889. Dwa7w.dll and inotes6w.dll are unicode, thats my next...

Web-MeetMe 3.0.3 (play.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ Web-MeetMe 3.0.3 play.php Remote File Disclosure Vulnerability ================================================================...

Apple Mac OS X CoreText uninitialized pointer vulnerability

Overview Apple Mac OS X CoreText contains an uninitialized pointer vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Apple Mac OS X CoreText is a framework for handling text on Mac OS X Tiger 10.4 and later. Mac OS X...

Electronic Arts SnoopyCtrl ActiveX control and plug-in stack buffer overflows

Overview The Electronic Arts SnoopyCtrl ActiveX control and plug-in contains multiple stack buffer overflows, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Electronic Arts EA.com provides an ActiveX control and Netscape-style...

Callisto PhotoParade Player PhPInfo ActiveX control buffer overflow

Overview The Callisto PhotoParade Player PhPInfo ActiveX control contains a buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Callisto PhotoParade Player includes an ActiveX control called PhPinfo. The ActiveX control...

Earth Resource Mapping NCSView ActiveX control stack buffer overflows

Overview The Earth Resource Mapping NCSView ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Earth Resource Mapping NCSView ActiveX control, which is provided by...

Broderbund Expressit 3DGreetings Player ActiveX control buffer overflows

Overview The Broderbund Expressit 3DGreetings Player ActiveX control contains multiple buffer overflows, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The 3DGreetings Player is an ActiveX control that displays 3D greeting cards...

CVE-2007-3386: XSS in Host Manager

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2007-3386: XSS in Host Manager Severity: Low Cross-site scripting Vendor: The Apache Software Foundation Versions Affected: 6.0.0 to 6.0.13 5.5.0 to 5.5.24 Description: The Host Manager Servlet does not filter user supplied data before display. Th...

Motive Communications ActiveUtils EmailData ActiveX control stack buffer overflows

Overview The Motive Communications ActiveUtils EmailData ActiveX control contains multiple stack buffer overflows, which could allow an attacker to execute arbitrary code on a vulnerable system. Description Motive Communications ActiveUtils is a software package used by multiple ISPs to provide...