5000 matches found
x10 MP3 Automatic Search Engine 1.6.5b - 'embed.php?name' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43336/info x10 Media Automatic MP3 Search Engine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of ...
NaviCOPA Web Server Remote Buffer Overflow and Source Code Information Disclosure Vulnerabilities
NaviCOPA Web Server is prone to a remote buffer-overflow vulnerability and an information disclosure vulnerability because the application fails to properly bounds-check or validate user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...
Stream 0day-vulnerability warning-the black bar safety net
gxm Inscription: First of all as I am, gxm, very pleased with Kaka in the 2 Number 3 of the morning 2am more common study of the flow of data in this subject. Thanks Kaka selfless dedication. Technology sharing. Only allow this stream to fully play his strength. A principle First said, the NTFS...
ntop HTTP Basic Authentication NULL Pointer Dereference Denial Of Service Vulnerability
The SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntop:ntop"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100255";...
Sun Java JDK/JRE Multiple Vulnerabilities (Aug 2009)
Sun Java JDK/JRE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
!/usr/bin/env python SPIP - Content Management System " exit filename = sys.argv2 baseurl = sys.argv1 cookiejar = cookielib.CookieJar urlOpener = urllib2.buildopenerurllib2.HTTPCookieProcessorcookiejar formulaire = sendrequesturlOpener,...
SPIP < 2.0.9 Arbitrary Copy All Passwords to XML File Remote Exploit
No description provided by source. !/usr/bin/env python SPIP - Content Management System 2.0.9 exploit http://www.securityfocus.com/bid/36008 Author : KernelPanik import urllib, urllib2 import cookielib import sys def sendrequesturlOpener, url, postdata=None: request = urllib2.Requesturl url =...
Adobe ColdFusion Server 8.0.1 - wizardscommon_authenticatewizarduser.cfm Query String Cross-Site Scripting
Adobe ColdFusion Server 8.0.1 - wizardscommonauthenticatewizarduser.cfm Query String Cross-Site Scripting source: https://www.securityfocus.com/bid/36046/info Adobe ColdFusion is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before usin...
Discuz! 6.0 - 2fly_gift.php SQL Injection
Discuz! 6.0 - 2flygift.php SQL Injection source: https://www.securityfocus.com/bid/36044/info Discuz! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
ViArt Helpdesk - reviews.php?category_id Cross-Site Scripting
ViArt Helpdesk - reviews.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
SpiceWorks - 'query' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43248/info Spiceworks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
PHP Photo Vote 1.3F - page Cross-Site Scripting
PHP Photo Vote 1.3F - page Cross-Site Scripting source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...
ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
No description provided by source. / ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC "Based on: http://www.securityfocus.com/data/vulnerabilities/exploits/35848.txt by kingcope - this is basically a rewrite of the above, lame i know, but fun enough for the zone argument you can try...
ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC
Exploit for multiple platform in category dos / poc ============================================================== ISC BIND 9 Remote Dynamic Update Message Denial of Service PoC ============================================================== / ISC BIND 9 Remote Dynamic Update Message Denial of...
VideoLAN VLC Media Player 0.8.6f - 'smb://' URI Handling Remote Buffer Overflow
/ VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability Exploit Reference: https://www.securityfocus.com/bid/35500 Tested on VLC media player 0.8.6f on WinXP SP3 Coded by Pankaj Kohli http://www.pank4j.com / include include // ASCII shellcode Display a message box & exit...
68 Classifieds 4.1 - 'searchresults.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...
68 Classifieds 4.1 - toplistings.php Cross-Site Scripting
68 Classifieds 4.1 - toplistings.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
ZNC < 0.072 File Upload Directory Traversal Vulnerability
ZNC is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
MyDLstore Pixel Ad Script - payment.php Cross-Site Scripting
MyDLstore Pixel Ad Script - payment.php Cross-Site Scripting source: https://www.securityfocus.com/bid/43448/info MyDLstore Pixel Ad Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
MyDLstore Meta Search Engine Script 1.0 - 'url' Remote File Inclusion
source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...