Easy RM to MP3 Converter (2.7.3.700) Stack Buffer Overflow (meta)

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Easy FTP Server 1.7.0.2 Buffer Overflow

!/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF Original Author: dookie2000ca || Windows XP SP3 Professional Author: b33f Windows XP Home SP1 Software link: http://cdnetworks-us-2.dl.sourceforge.net/project/easyftpsvr/easyftpsvr/1.7.0.2-en/easyftpsvr-1.7.0.2.zip import...

Easy Media Script SQL Injection

alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script - SQL Injection

Easy Media Script - SQL Injection alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script SQL Injection Vulnerability

Exploit for php platform in category web applications alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script - SQL Injection

alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

FPD и XSS уязвимости в Easy Contact для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине Easy Contact для WordPress. Full path disclosure WASC-13: http://site/wp-content/plugins/easy-contact/econtact.php http://site/wp-content/plugins/easy-contact/econtact-menu.php XSS...

Уязвимости в Easy Contact для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Abuse of Functionality и Cross-Site Scripting уязвимостях в плагине Easy Contact для WordPress. Insufficient Anti-automation WASC-21: Отсутствие капчи на странице контактов позволяет слать автоматизированные сообщения...

Easy Contact 0.1.2 WordPress Plugin Cross Site Scripting

Hello list! I want to warn you about Insufficient Anti-automation, Abuse of Functionality and Cross-Site Scripting vulnerabilities in plugin Easy Contact for WordPress. ------------------------- Affected products: ------------------------- Vulnerable are Easy Contact 0.1.2 and previous versions...

Opera < 11.11 Multiple Vulnerabilities

Binary data 5925.prm...

Password Security Do's and Don'ts

We write a lot about sophisticated, targeted attacks and zero day vulnerabilities aside. But the fact is that most security breaches hinge on easy to prevent security holes – such as insecure passwords. Indeed, even as headlines blare about data breaches and hacks at prominent firms, password...

[SECURITY] Fedora 14 Update: kphotoalbum-4.1.1-8.fc14

A photo album tool. Focuses on three key points: It must be easy to describe a number of images at a time. It must be easy to search for images. It must be easy to browse and View the images...

BodgeIt Store : Vulnerable Web Application For Penetration Testing !

BodgeIt Store : Vulnerable Web Application For Penetration Testing ! Features Easy to install – just requires java and a servlet engine, e.g. Tomcat Self contained no additional dependencies other than to 2 in the above line Easy to change on the fly – all the functionality is implemented in JSPs...

Easy day technology Mall 2.1 Free Edition IIS6 parsing exploits-vulnerability warning-the black bar safety net

Easy day micro Mall is E-day technologies the only official service website. Provide professional e-Commerce service,including a free online store system,supply information publishing system design and development and provide Taobao brush drill Service,Shop Agent extension services. The exploit:...

The BodgeIt Store - another vulnerable web app

Hi folks, I've recently open sourced a vulnerable web app, called The BodgeIt Store: http://code.google.com/p/bodgeit/ Why? Well, you can never have too many vulnerable apps to test against, but also because I've found that many of the existing apps are non trivial to install - they either have a...

CVE-2010-4784

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2010-4783

The CVE-2010-4783 entry concerns multiple cross-site scripting (XSS) vulnerabilities in index.php of PHP Web Scripts Easy Banner Free 2009.05.18. The root cause described in sources is that with magic_quotes_gpc disabled, an attacker can inject arbitrary web script or HTML via the siteurl and url...

CVE-2010-4784

CVE-2010-4784 describes multiple SQL injection vulnerabilities in the member.php component of PHP Web Scripts Easy Banner Free 2009.05.18. When magic_quotes_gpc is disabled, remote attackers may inject SQL via the (1) username and (2) password parameters. Details on exploitation, affected version...

ilchClan 1.0.5 (regist.php) SQL Injection Vulnerabiility

Exploit for php platform in category web applications SQL Injection Vulnerability in ilch clan 1.0.5 a,b,c,d,e,f! Vulnerability Name : Registration Bypass SQL Injection Vulnerability Date : 02.04.2011 SQL Injection method : $POST Discovered by : Easy Laster Security Group...

Anzeigenmarkt 2011 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : Anzeigenmarkt 2011 SQL Injection Vulnerability +Autor : Easy Laster +Date : 02.04.2011 +Script : ANZEIGENMARKT 2011 +Price : free +Language : PHP...