Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Microsoft Organization Chart 2 - Remote Code Execution

Microsoft Organization Chart 2 - Remote Code Execution source: https://www.securityfocus.com/bid/31059/info Microsoft Organization Chart is prone to a remote code-execution vulnerability because of a memory-access violation. Remote attackers can exploit this issue by enticing victims into opening...

Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit

Exploit for unknown platform in category remote exploits =================================================================== Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit =================================================================== // Bea Weblogic -- Apache Connector...

phpTournois G4 - Arbitrary File Upload Code Execution

phpTournois G4 - Arbitrary File Upload Code Execution Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined. So, using registerglobals, we can define it and let the CM...

Apple QuickTime 7.2/7.3 RSTP Response Code Exec Exploit (Vista/XP)

No description provided by source. / ============================================================= Apple Quicktime Vista/XP RSTP Response Remote Code Exec ============================================================= Discovered by: h07 Author: InTeL Tested on:...

Apple QuickTime 7.2/7.3 RSTP Response Code Exec Exploit (Vista/XP)

Exploit for unknown platform in category remote exploits ================================================================== Apple QuickTime 7.2/7.3 RSTP Response Code Exec Exploit Vista/XP ================================================================== /...

PHP <=5.2.4 open_basedir bypass & code exec & denial of service

Application: PHP =5.2.4 Web Site: http://php.net Platform: unix Bug: openbasedir bypass & code exec & denial of service/some people call this as a buffer overflow , but it's a denial of service./ special condition: default php-memory-limit ------------------------------------------------------- 1...

MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Expl2

Exploit for unknown platform in category remote exploits ======================================================================= MS Internet Explorer 6/7 XML Core Services Remote Code Exec Exploit 2 ======================================================================= var heapSprayToAddress =...

CVE-2006-3461

CVE-2006-3461 is a heap-based buffer overflow in the PixarLog decoder of libtiff, tracked in CVE-2006-3461. Affected component: libtiff prior to 3.8.2. Impact described: context-dependent attackers could potentially execute arbitrary code. Public references in connected sources corroborate that t...

TinyPHPForum 3.6 - UpdatePF.php Authentication Bypass

TinyPHPForum 3.6 - UpdatePF.php Authentication Bypass source: https://www.securityfocus.com/bid/19281/info TinyPHPForum is prone to an authentication-bypass vulnerability because it fails to prevent an attacker from accessing admin scripts directly without requiring authentication. A remote...

TinyPHPForum 3.6 - 'UpdatePF.php' Authentication Bypass

source: https://www.securityfocus.com/bid/19281/info TinyPHPForum is prone to an authentication-bypass vulnerability because it fails to prevent an attacker from accessing admin scripts directly without requiring authentication. A remote attacker can exploit this issue to perform administrative...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relativescriptpath parameter...

CVE-2006-0418

Affected product: 123 Flash Chat Server 5.0 and 5.1. Vulnerable: eval injection in username handling that allows arbitrary code execution. Root cause: crafted username processed in a way that enables code execution. Impact: potential compromise of confidentiality, integrity, and availability (as ...

vBulletin 'Calendar' Command Execution Vulnerability (CVE-2001-0475) - Active Check

A vulnerability in vBulletin enables attackers to craft special URLs that will execute commands on the server through the vBulletin PHP script. SPDX-FileCopyrightText: 2005 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2005-1524

PHP file inclusion vulnerability in topgraphheader.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the configlibrarypath parameter...

CVE-2004-1906

Mcafee FreeScan is affected by CVE-2004-1906. A long string in the ScanParam property of a COM object can trigger a buffer overflow, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The vulnerability impact is noted as Partial availability impact with...