Vikingboard 0.1b - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...

Ruby Safe Level security bypass

"alias" can be exploited to replace safe function, directory access protection bypass. Few potentially dangerous methods are not limited...

Microsoft Windows Server Driver Mailslot Remote Heap Buffer Overflow Vulnerability

Description Microsoft Windows Server driver is prone to a remote heap buffer-overflow vulnerability. This issue is due to a failure of the software to properly bounds check user-supplied input prior to copying it to an insufficiently-sized memory buffer. Exploiting this issue allows anonymous,...

CVE-2006-3129

Multiple cross-site scripting XSS vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 cat and 2 view parameters...

CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion

source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities

xFlow 5.46.11 - index.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17614/info xFlow is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in...

ArchAngelFlaw.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KingOfSka - http://www.cpc.info.ms Contro Potere Crew Advisories 5 26/02/2006 http://www.archangelmgt.com/ Archangel Weblog 0.90.02 Admin Authentication Bypass & Remote File Inclusion 1:. Background : Archangel Weblog is a new, full featured weblog...

RCblog exploit [fun]

!/usr/bin/perl RCBlog 1.0.3 / 1.0.2 Exploit by Hessam-x www.hessamx.net Name : RCBlog www.fluffington.com version : 1.0.3 / 1.0.2 manual exploiting: index.php?20post=../config/password use LWP::Simple; print "-------------------------------------------n"; print "= RCBlog 1.0.3 / 1.0.2 =n"; print ...

GnuPG 1.x - Detached Signature Verification Bypass

GnuPG 1.x - Detached Signature Verification Bypass source: https://www.securityfocus.com/bid/16663/info GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verificatio...

Microsoft Windows DTC Remote Exploit (PoC) (MS05-051) (updated)

Exploit for unknown platform in category remote exploits =============================================================== Microsoft Windows DTC Remote Exploit PoC MS05-051 updated =============================================================== / Hard to exploit, isn't it? I have tested it on 10+...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

bluecoat7111.txt

Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...

MS Windows Color Management Module Overflow Exploit (MS05-036)

Exploit for unknown platform in category dos / poc ============================================================== MS Windows Color Management Module Overflow Exploit MS05-036 ============================================================== / Author: snooq http://www.redpuffer.net/snooq/web/ Date: 2...

sile002adv.txt

---- sile002 advisory + PoC PRODUCT: PHP-Nuke VERSION: 7.5 but others versions maybe either vulnerables VENDOR: http://www.phpnuke.org VULNERABILITY: Multiple vulnerability RISK: Hight Found by: Silentium of Anacron Group Italy date: 02/05/2005 e-mail: anacrongroupitalyatautisticidotorg myhome:...

eXtropia Shopping Cart web_store.cgi Remote Exploit

No description provided by source. !/usr/bin/perl -w Remote Command Execution Vulnerability In Webstore.cgi SegmentationFault Group Greetz to : Xsupr3mo - failed - Status-x - Stealh - P3S4D3L0 Greetz to : berhooz - nima - ehsan - Unknown OutLaw eutanasia www.ashiyane.com ok setp by setp to work :...

xloadimage 4.1 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/3006/info // // xloadimage is a utility used for displaying images of varying formats on X11 servers. // // xloadimage and possibly derivatives such as 'xli' contain a buffer overflow vulnerability in the handling of the 'Faces Project' image type. // ...

proftpd_exploiting_toolkit.txt

Subject: proftpd To: [email protected] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 / babcia padlina ltd. poland, 17/08/99 your ultimate proftpd pre0-3 exploiting toolkit based on: - adm-wuftpd by duke - kombajn do czere¶ni by Lam3rZ thx for shellcode! thx and greetz. / include include...