plesk 8.1.1 - login.php3 Directory Traversal

plesk 8.1.1 - login.php3 Directory Traversal source: https://www.securityfocus.com/bid/23639/info Plesk is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...

GNU Mailutils imap4d 0.6 Remote Format String Exploit (exec-shield)

No description provided by source. / Fedora Core 6 exec-shield based GNU imap4d mailutils-0.6 search remote format string exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt Reference:...

GNU Mailutils imap4d 0.6 - exec-shield Remote Format String

GNU Mailutils imap4d 0.6 - exec-shield Remote Format String / Fedora Core 6 exec-shield based GNU imap4d mailutils-0.6 search remote format string exploit by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL: http://x82.inetcop.org/h0me/papers/FCexploit/FCexploit.txt...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.Activ...

Second Sight Software - ActiveMod.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveMod.ocx ActiveX Buffer Overflow POC - By Umesh Wanve targetFile = "C:\Research\activemod\ActiveMod.ocx" prototype = "InvokeUnknown Filename As String" memberName = "Filename" progid = "ActiveModLib.ActiveMod" argCount = 1 arg1=String208, "A" target.Filename = arg1...

Allfaclassifieds 6.04 - Level2.php Remote File Inclusion

Allfaclassifieds 6.04 - Level2.php Remote File Inclusion source: https://www.securityfocus.com/bid/23598/info Allfaclassifieds is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise th...

ACVSWS - Transport.php Remote File Inclusion

ACVSWS - Transport.php Remote File Inclusion source: https://www.securityfocus.com/bid/23603/info acvswsphp5 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...

Fully Modded PHPBB2 - phpbb_root_path Remote File Inclusion

Fully Modded PHPBB2 - phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/23565/info Fully Modded PHPBB2 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromis...

Fully Modded PHPBB2 - 'phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/23565/info Fully Modded PHPBB2 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks...

Actionpoll 1.1 - Actionpoll.php Remote File Inclusion

Actionpoll 1.1 - Actionpoll.php Remote File Inclusion source: https://www.securityfocus.com/bid/23504/info Actionpoll is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the...

Actionpoll 1.1 - 'Actionpoll.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23504/info Actionpoll is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are als...

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow !/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in https://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444...

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow

!/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in https://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444 and then connects to it. Cheers to metasploit for the first exploit...

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicDVDDashVRNav.dll ActiveX Control Remote Buffer Overflow source: https://www.securityfocus.com/bid/23412/info Roxio CinePlayer is prone to a stack-based buffer-overflow vulnerability because it fails to sufficiently check boundaries of user-supplied input before copying...

webMethods Glue 6.5.1 Console - Directory Traversal

webMethods Glue 6.5.1 Console - Directory Traversal source: https://www.securityfocus.com/bid/23423/info webMethods Glue is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary file...

DropAFew 0.2 - newaccount2.php Arbitrary Account Creation

DropAFew 0.2 - newaccount2.php Arbitrary Account Creation source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

DropAFew 0.2 - 'editlogcal.php?save Action calories' SQL Injection

source: https://www.securityfocus.com/bid/23400/info DropAFew is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

QuizShock 1.6.1 - auth.php HTML Injection

QuizShock 1.6.1 - auth.php HTML Injection source: https://www.securityfocus.com/bid/23368/info QuizShock is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the contex...

PHPwebnews 0.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Apache mod_rewrite (Windows x86) - Off-by-One Remote Overflow

!/bin/sh Exploit for Apache modrewrite off-by-oneWin32. by axis http://www.ph4nt0m.org 2007-04-06 Tested on Apache 2.0.58 Win32 Windows2003 CN SP1 Vulnerable Apache Versions: 1.3 branch: 1.3.28 and 2.0.46 and 2.2.0 and 2006-08-20 http://www.milw0rm.com/exploits/2237 to successfully exploit the...