vBulletin 4.0.8 - Persistent Cross-Site Scripting via Profile Customization

Title: vBulletin 4.0.8 - Persistent XSS via Profile Customization Body: vBulletin - Persistent Cross Site Scripting via Profile Customization Versions Affected: 4.0.8 3.8. is not vulnerable. Info: Content publishing, search, security, and more— vBulletin has it all. Whether it’s available...

Chameleon Social Networking Software - Persistent Cross-Site Scripting

Chameleon Social Networking Software - Persistent Cross-Site Scripting Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T I...

Chameleon Social Networking Software - Persistent Cross-Site Scripting

Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T IL vaut faut inscrire au site apres aller a la partie forum ou par le li...

OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection

Exploit Title: OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Date: 13.11.2010 Author: Valentin Category: webapps/0day Version: 2.6.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Titl...

Digital Music Pad 8.2.3.3.4 - Local Stack Buffer Overflow (Metasploit)

$Id: digitalmusicpadpls.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fat Player Media Player 0.6b0 - Local Buffer Overflow (Metasploit)

$Id: fatplayerwav.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

A-PDF WAV to MP3 1.0.0 - Local Buffer Overflow (Metasploit)

$Id: a-pdfwavtomp3.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Seo Panel 2.1.0 - Critical File Disclosure

Seo Panel - Critical File Disclosure Versions Affected: 2.1.0 previous versions were not checked. Info: A complete open source seo control panel for managing search engine optimization of your websites. Seo Panel is a seo tool kit includes latest hot seo tools to increase and track the performace...

Researcher Publishes Android Browser Exploit

UPDATE: A researcher at security firm Alert Logic has published code that could be used to compromise some versions of Google’s Android Operating System. The exploit, if properly adapted, could make Android phones vulnerable to remote attacks and compromises. Researcher MJ Keith published a Rever...

Platinum SDK Library post upnp sscanf Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc =================================================================== Platinum SDK Library post upnp sscanf Buffer Overflow Vulnerability =================================================================== / -POC CODE Remote Buffer Overflow -...

Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)

Exploit for windows platform in category local exploits =================================================================== Winamp 5.5.8.2985 inmod plugin Stack Overflow Friendly Version =================================================================== !/usr/bin/python Winamp 5.5.8.2985 inmod...

Winamp 5.5.8.2985 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D and 7eK presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow A Script Kiddie Friendly Production WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ An improvement to...

Fat Player Media Player 0.6b0 Buffer Overflow

$Id: fatplayerwav.rb 10764 2010-10-20 11:53:12Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Winamp 5.5.8 (in_mod plugin) - Local Stack Overflow

!/usr/bin/python Pwn And Beans by Mighty-D presents: Winamp 5.5.8.2985 inmod plugin Stack Overflow WINDOWS XP SP3 FULLY PATCHED - NO ASLR OR DEP BYPASS... yet Bug found by http://www.exploit-db.com/exploits/15248/ POC by fdisk Exploit by Mighty-D Special thanks to: fdisk: Who wrote the skeleton o...

Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ======================================================== Disk Pulse Server v2.2.34 Remote Buffer Overflow Exploit ======================================================== !/usr/bin/python Exploit Title: Disk Pulse Server v2.2.34 Remote Buff...

Imageview <= 6.x Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ================================================ Imageview = 6.x Multiple Remote Vulnerabilities ================================================ || || | || o,7 || . o7 || 4||| ow, : / /...

Microsoft IIS 6.0 - ASP Stack Overflow Stack Exhaustion (Denial of Service) (MS10-065)

Affected Vendors Microsoft Affected Products Only Microsoft IIS 6.0 was tested successfully On a Windows Server 2003 SP2 System The System was NOT updated to the latest patches during testing. Since tests “in the wild” have shown the attack to be real this advisory was released. Vulnerability...

Trend Micro Internet Security Pro 2010 - ActiveX 'extSetOwner()' Remote Code Execution (Metasploit)

$Id: trendmicroextsetowner.rb 10538 2010-10-04 04:26:09Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Excel - SxView Record Parsing Heap Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | day 29 binary analysis | | | | || / \ || | | | || ||// \/|/ ''' Title : Microsoft Excel SxView Record Parsing Heap Memory Corruption Version : Excel 2002 SP3 Analysis : http://www.abysssec.com Vendor :...

JE CMS 1.0.0 - Authentication Bypass

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | userLogin; userLogin function is in administrator\library\functions.php. in lines 129-139: if $userName == '' || $password == '' $errorMessage = JEMISMATCHUSERNAMEPASSWORD; else // check the database and see if the...