3402 matches found
2daybiz Template Monster Clone (edituser.php) Change Pass Exploit
No description provided by source. title Template Monster Clone Change Password /title /head head /head body bgcolor=000000 pfont size=6 color=FF0000a href=http://www.2daybiz.com/ font color=FF00002daybiz/font/a Template Monster Clone /font/p TABLE border=0 width=780 align=center TR TDTABLE...
Alibaba Clone Platinum (buyer/index.php) SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python -- coding:utf-8 -- from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class TestPOCPOCBase: vulID = '68613' version = '1' vulDate = '2010-05-04' author = 'anonymous' createDate =...
FormMail-Clone Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6570/info FormMail-clone is allegedly prone to cross-site scripting attacks. The FormMail-clone script does not sufficiently sanitize HTML tags and script code. As a result, a remote attacker may construct a malicious lin...
Ebay Clone from clone2009 SQL Injection Vulnerabilities
No description provided by source. / Name : Ebay Clone from clone2009.comhttp://clone2009.com Site : http://www.clone2009.com/ Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , GreyMen : / 1st SQL injection : File : gotourl.php , Get : id...
Alibaba Clone <= 3.0 (Special) - SQL Injection Vulnerability Exploit
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Alibaba Clone Version = 3.0 Special SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : Alibaba Clone Version 3.0...
ITechSctipts Alibaba Clone Multiple Vulnerabilities
No description provided by source. / Name : ITechSctipts Alibaba Clone Site : http://itechscripts.com/index.php?page=shop.productdetails&flypage=shop.flypage&productid=24&option=comvirtuemart Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Sellim / SQL Injection : File :...
HispaH Youtube Clone 'load_message.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27598/info HispaH Youtube Clone is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...
Alibaba Clone Platinum (about_us.php) SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------- Alibaba Clone Platinum aboutus.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21...
John Donoghue Knapster 0.9/1.3.8 File Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1186/info Various open source clones of the Napster software package have a vulnerability by which users may view files on a machine running a vulnerable Napster clone client. The file access is limited to files accessibl...
ec21 clone 3.0 - (id) SQL Injection Vulnerability
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
Itetris 1.6.1/1.6.2 Privileged Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2139/info Itetris, or Intelligent Tetris, is a clone of the popular Tetris puzzle game for linux systems. The svgalib version of Itetris is installed setuid root so that it may access video hardware when run by a regular...
Alibaba Clone Platinum (offers_buy.php) SQL Injection Vulnerability
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
Swoopo Clone 2010 SQL Injection Vunerability
No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Swoopo Clone 2010 SQL Vunerable Vendor url:http://www.euro-hq.com...
cPanel 5/6,Formail-Clone E-Mail Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7758/info It has been reported that cPanel is prone to an issue where a remote attacker may bypass cPanel Formail-clone local domain checks and have untrusted e-mail delivered in the context of the vulnerable host. This...
Linux Kernel 3.13 - SGID Privilege Escalation
/ CVE-2014-4014 Linux Kernel Local Privilege Escalation PoC Vitaly Nikolenko http://hashcrack.org Usage: ./poc filepath where filepath is the file on which you want to set the sgid bit / define GNUSOURCE include include include include include include include include include define STACKSIZE 1024...
DEBIAN-CVE-2014-2673
The archduptaskstruct function in the Transactional Memory TM implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and fork system calls, which allows local users to cause a denial of service Program...
Medium: lighttpd
Issue Overview: Use-after-free vulnerability in lighttpd before 1.4.33 allows remote attackers to cause a denial of service segmentation fault and crash via unspecified vectors that trigger FAMMonitorDirectory failures. lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, whi...
Glambombworld PHP Clone Script Header Injection
Glambombworld PHP Clone Script CRLF injection/HTTP response splitting Vulnerability ================================================================================== Author indoushka ================= vendor :http://vk.com/doc227142112238900463?dl=scriptux ================= Demo...
CVE-2014-1882
Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictions of an event-based bridge via a crafted library clone that leverages IFRAME script execution and directly accesses bridge JavaScript objects, as demonstrated...
CVE-2014-1882
Affected software: Apache Cordova 3.3.0 and earlier; Adobe PhoneGap 2.9.0 and earlier. Root cause: An event-based bridge can be bypassed via a crafted library clone that uses IFRAME script execution to directly access bridge JavaScript objects, demonstrated by cordova.require calls. Impact: Remot...