604 matches found
LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit
No description provided by source. ? / --------------------------------------------------------------- LightBlog = 9.9.2 register.php Remote Code Execution Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Web Group Communication Center (WGCC) <= 1.0.3 - SQL Injection Vuln
No description provided by source. Title : Web Group Communication Center XSS/SQL Multiple Remote Vulnerabilies Author : myvx Date : 13.05.2008 Application : Web Group Communication Center Version : = 1.0.3 PreRelease 1 Vendor : http://wgcc.de/ Download :...
Astium VoIP PBX <= 2.1 build 25399 - Multiple Vulns Remote Root Exploit
No description provided by source. !/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX = v2.1 build 25399 Multiple Vulns Remote Root Exploit Date : 01-02-2012 Author :...
Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit
No description provided by source. !/usr/bin/python Title: Sysax Multi Server 5.53 SFTP Post Auth SEH Exploit Egghunter Author: Craig Freyman @cd1zz Tested on: XP SP3 32bit Software Versions Tested: 5.53 Date Discovered: Febrary 22, 2012 Vendor Contacted: Febrary 23, 2012 Vendor Response: Februar...
Xilisoft Video Converter Ultimate Dll Hijacking Exploit (quserex.dll)
Exploit for windows platform in category dos / poc / Title: Xilisoft Video Converter Ultimate Dll Hijacking Exploit quserex.dll Version: 7.8.1 build-20140505 Previous versions might be vulnerable Tested on: Windows XP SP2 en Vendor: http://www.xilisoft.com/ Software Link:...
InvisionPower CMS Links To Titles 3.0 Cross Site Scripting
InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...
Synology DSM4 Blind SQL Injection
Title: Synology DSM Blind SQL Injection Version affected: = 4.3-3827 Vendor: Synology Discovered by: Michael Wisniewski Status: Patched The file "/photo/include/blog/article.php" contains a Blind SQL Injection Vulnerability in the 'value' variable in the URL. The vendor was contacted approximatel...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities
Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities
ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES INFORMATION Vulnerabilities: 1...
Synology DSM 4.3-3827 (article.php) - Blind SQL Injection Vulnerability
Synology DSM versions 4.3-3827 and below suffer from a remote blind SQL injection vulnerability. Title: Synology DSM Blind SQL Injection Version affected: :80/ Cookie: PHPSESSID=; visitday= Host: Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64...
Cells Blog 3.3 Cross Site Scripting / SQL Injection
Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...
Cells Blog 3.3 - XSS Reflected & Blind SQLite Injection Vulnerabilities
Exploit for php platform in category web applications + Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response...
Cells Blog 3.3 - Reflected Cross-Site Scripting / Blind SQLite Injection
Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...
Light Alloy 4.7.3 - .m3u Local Buffer Overflow (SEH Unicode)
Light Alloy 4.7.3 - .m3u Local Buffer Overflow SEH Unicode !/usr/bin/perl Exploit Title: Light Alloy 4.7.3 .m3u - SEH Buffer Overflow Unicode Date: 11-18-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Light Alloy v4.7.3 Vendor Site: http://www.light-alloy.ru/...
Kaseya 6.3 Shell Upload
, , . .' '. ', . , '. , ., , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Kaseya Arbitrary File Upload Vulnerability Affected versions: All versions and hotfixes prior to 6.3.0.2 PDF:...
Plogue Sforzando 1.665 Buffer Overflow
!/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link: http://www.softpedia.com/dyn-postdownload.php?p=227357&t=0&i=1 Vendor site:...
Plogue Sforzando 1.665 - Buffer Overflow (SEH) (PoC)
!/usr/bin/perl Exploit Title: Plogue Sforzando v1.665 Buffer Overflow POC Date Discovered: 10-29-2013 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: Sforzando v1.665 Software Link: http://www.softpedia.com/dyn-postdownload.php?p=227357&t=0&i=1 Vendor site:...
CM3 AcoraCMS XSS / CSRF / Redirection / Disclosure
=============================== - Advisory - =============================== Tittle: CM3 AcoraCMS - Several Vulnerabilities Risk: Medium Date: 12.Sept.2012 Author: Pedro Andujar Twitter: @pandujar .: INTRO :. Acora CMS is a sleek and powerful off-the-shelf content management application coupled...
IP.Gallery 4.2.x and 5.0.x Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability image title is vulnerable to persistent XSS vulnerability which allow any normal member to hack any administrator account or any other member account. we contacted the vend...
Android Kernel 2.6 Denial Of Service
Exploit Title: Android Kernel 2.6 Local DoS Date: 12/7/12 Author: G13 Twitter: @g13net Versions: Android 2.2, 2.3 Category: DoS android Vulnerability The Android OS is vulnerable to a local DoS when a filename with a length of 2048 or larger is attempted to be written to the sdcardvfat fs multipl...