5000 matches found
Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)
exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: https://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close milw0rm.com 2009-03-16...
Dagger RFI Vulnerability (Mar 2009) - Active Check
Dagger is prone to a remote file include RFI vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Woltlab Burning Board <= 3.0.5 Multiple Input Validation Vulnerabilities - Active Check
Woltlab Burning Board is prone to multiple input-validation vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TurnkeyForms Local Classifieds Authentication Bypass Vulnerability (Mar 2009) - Active Check
TurnkeyForms Local Classifieds is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
GhostScripter Amazon Shop Multiple Vulnerabilities (Mar 2009) - Active Check
Amazon Shop is prone to multiple vulnerabilities, including a cross-site scripting issue, a directory-traversal issue, and multiple remote file-include issues, because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be...
ClearBudget <= 0.6.1 Unauthorized Access Vulnerability - Active Check
ClearBudget is prone to an unauthorized access vulnerability because it fails to properly restrict access to certain directories. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mozilla Firefox 2.0.x - Nested 'window.print()' Denial of Service
source: https://www.securityfocus.com/bid/33969/info Mozilla Firefox is prone to a remote denial-of-service vulnerability. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Firefox 2.0.0.20 is vulnerable; other versions may also be...
Novaboard 1.0 - HTML Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/33968/info NovaBoard is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the issues to execute arbitrary script code in the browser of an...
Yaws < 1.80 (multiple headers) Remote Denial of Service Exploit
No description provided by source. !usr/bin/perl -w Yaws before 1.80 allows remote attackers to cause a denial of service memory consumption and crash via a request with a large number of headers. Refer: http://yaws.hyber.org/ http://www.securityfocus.com/bid/33834/discuss...
A4Desk Event Calendar SQLi Vulnerability (Mar 2009) - Active Check
A4Desk Event Calendar is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Novell eDirectory iMonitor - 'Accept-Language' Request Buffer Overflow (PoC)
!usr/bin/perl -w Novell eDirectory iMonitor 'Accept-Language' Request Buffer Overflow Vulnerability Refer: https://www.securityfocus.com/bid/33928/discuss To run this exploit on MS Windows replace "!usr/bin/perl -w" with "!Installationpathforperl -w" say !C:/Program Files/Perl/bin/perl -w $$$$$Th...
Free Download Manager torrent file parsing buffer overflow
Added: 02/17/2009 CVE: CVE-2009-0184 BID: 33555 Background Free Download Manager is a download accelerator and manager for Windows systems. Problem A buffer overflow vulnerability allows command execution when a user opens a torrent file containing a long file name. Resolution Upgrade to version...
Clipbucket 1.7 - dwnld.php Directory Traversal
Clipbucket 1.7 - dwnld.php Directory Traversal source: https://www.securityfocus.com/bid/33781/info ClipBucket is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive...
Squid 3.1 5 - HTTP Version Number Parsing Denial of Service
Squid 3.1 5 - HTTP Version Number Parsing Denial of Service !usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 https://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author...
Squid < 3.1 5 HTTP Version Number Parsing Denial of Service Exploit
Exploit for multiple platform in category dos / poc =================================================================== Squid ; chomp$vulnserverip; @maliciousversion="9.9"...
NaviCOPA < 3.01 6th February 2009 Multiple Vulnerabilities
According to its banner, the version of the NaviCOPA web server software running on the remote host is either earlier than 3.01 or 3.01 from before the 6th of February 2009. Such versions are affected by two vulnerabilities : - There is a heap-based buffer overflow that can be triggered when...
pyblosxom -- atom flavor multiple XML injection vulnerabilities
Security Focus reports: PyBlosxom is prone to multiple XML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied XML and script code would run in the context of the affected browser,...
FeedMon 2.7.0.0 - outline Tag Buffer Overflow (PoC)
!usr/bin/perl -w Reference: http://security.bkis.vn/?p=329 https://www.securityfocus.com/bid/33630/info Tested on Windows Server 2003 with FeedMon 2.7.0.0. FeedMon crashes whenever I am trying to Unsubscribe from the maliciousoverlylong feed. Thanx to milw0rm, str0ke, security.bkis, @rp m@n,...
Cisco IOS 12.4(23) - HTTP Server Multiple Cross-Site Scripting Vulnerabilities
Cisco IOS 12.423 - HTTP Server Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33625/info Cisco IOS HTTP Server is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...
Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
Windows Operating System is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...