720 matches found
PT-2012-3116
Name of the Vulnerable Software and Affected Versions Fork CMS versions prior to 3.2.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the type or querystring parameters to the private/en/error endpoint or the name parameter to the...
CVE-2012-1188
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 type or 2 querystring parameters to private/en/error or 3 name parameter to private/en/locale/index...
CVE-2012-1188: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Fork CMS before 3.2.7 allow remote attackers to inject arbitrary web script or HTML via the 1 type or 2 querystring parameters to private/en/error or 3 name parameter to private/en/locale/index...
CVE-2011-4307
Cross-site scripting XSS vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter...
Qutecom Softphone 2.2.1 Heap Overflow DoS/Crash Proof of Concept
Exploit for windows platform in category dos / poc Title: Qutecom Cross-platform, open source softphone Heap Overflow DoS/Crash Proof of Concept Date: 14th June 2012 Exploit Author: Debasish Mandal Author's Blog : http://www.debasish.in/ Vendor Homepage: http://qutecom.org/ Software Link:...
Zimplit CMS 3.0 - Local File Inclusion / Arbitrary File Upload
source: https://www.securityfocus.com/bid/53990/info Zimplit CMS is prone to multiple local file-include vulnerabilities and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context...
Remote Anything Player 5.60.15 Denial Of Service
!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...
CVE-2012-0466
template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive bug information via a...
CVE-2012-0466: Undefined Security Weakness
template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1 does not properly handle multiple logins, which allows remote attackers to conduct cross-site scripting XSS attacks and obtain sensitive bug information via a...
mmPlayer 2.2 - '.ppl' Local Buffer Overflow (SEH)
!/usr/bin/perl Title: mmPlayer 2.2 .ppl Local Buffer Overflow Exploit SEH Date: 23.03.2012 Author: RjRjh Hack3r Software Link: http://www.brnameg.com/download.php?id=3859 Tested on: Windows XP SP2 EN my $file= "RjRjh.ppl"; my $junk= "\x41" x 4090; my $nextseh= "\xEB\x06\x90\x90"; my $seh=...
jetVideo 8.0.2 - Denial of Service
jetVideo 8.0.2 - Denial of Service Exploit Title: jetVideo Crash Exploit Author: Senator of Pirates Email : [email protected] Software Link: http://www.jetaudio.com/download/jetvideo.html Version: 8.0.2 Basic Tested on: Windows XP PS3 En header = "http://" junk = "A" 20000 payload...
Mozilla Firefox 10.0 Local Null Byte Bypass File Check Execution
...
PDF Viewer Component - ActiveX Denial of Service
PDF Viewer Component - ActiveX Denial of Service Title : PDF Viewer Component ActiveX DoS Auther : Senator of Pirates E-Mail : [email protected] FaceBook : FaceBook.Com/SenatorofPirates Software link : http://www.ocxt.com/download/PDFViewerSetup.exe Date : 05/02/2012 Tested :...
Edraw Diagram Component 5 ActiveX buffer overflow DoS
Exploit for windows platform in category dos / poc Author : Senator of Pirates This exploit tested on Windows Xp SP3 EN http://www.edrawsoft.com/download/EDBoardSetup.exe -------------------------------------------------------------------------------------------------------- targetFile =...
Unfixed XSS vulnerability at www.chirac-en-lozere.com
Security researcher Atmon3r, has submitted on 31/01/2012 a cross-site-scripting XSS vulnerability affecting www.chirac-en-lozere.com, which at the time of submission ranked 21348297 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It...
Phonebook (.pbk) Remote Access DoS Vulnerability
Exploit for windows platform in category dos / poc Name: Remote Access Phonebook .pbk DoS Vulnerability Type: Windows Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows XP SP3 EN Exploit: 1- Create network connections 2- Open pbk file with text editors and replace this code...
FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities
FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...
FCMS 2.7.2 Cross Site Scripting
FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...
CoDeSys 2.3 Buffer Overflow
/ CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP SP1 EN THIS CODE IS FOR EDUCATIONAL PURPOSES ONLY! --snip-- root@bt: ./codesys 192.168.1.36 CoDeSys v2.3...
CoDeSys SCADA v2.3 Remote Exploit
Exploit for windows platform in category remote exploits / CoDeSys v2.3 Industrial Control System Development Software Remote Buffer Overflow Exploit for CoDeSys Scada webserver Author : Celil UNUVER, SignalSEC Labs www.signalsec.com Tested on WinXP SP1 EN THIS CODE IS FOR EDUCATIONAL PURPOSES...