CVE-2014-5234: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the backend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via a folder publication name...

Windows Prefetch Folder

Nessus was able to retrieve and display the contents of the Windows prefetch folder %systemroot%\prefetch. This information shows programs that have run with the prefetch and superfetch mechanisms enabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77668;...

Olat Stored Cross Site Scripting

Affected software: //demo.olat.org/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: Stored XSS Author: Ankit Bharathan ,Provensec labs Description: Goto personal folder open any folder and create a new document xss.tct and then edit it fill field with " Then open...

SearchMyFiles v2.50 - Alternative to 'Search For Files And Folders' module of Windows + Duplicates Search

SearchMyFiles is an alternative to the standard "Search For Files And Folders" module of Windows. It allows you to easily search files in your system by wildcard, by last modified/created/last accessed time, by file attributes, by file content text or binary search, and by the file size...

CVE-2014-2815: Undefined Security Weakness

Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneNote Remote Code Execution Vulnerability."...

Wordpress WPTouch Authenticated File Upload Exploit

The Wordpress WPTouch plugin contains an auhtenticated file upload vulnerability. A wp-nonce CSRF token is created on the backend index page and the same token is used on handling ajax file uploads through the plugin. By sending the captured nonce with the upload, we can upload arbitrary files to...

FolderTimeUpdate - Tool that scans all files and folders and updates the Modified Time of every folder according the latest modified time

FolderTimeUpdate is a simple tool for Windows that scans all files and folders under the base folder you choose, and updates the 'Modified Time' of every folder according the latest modified time of the files stored in it. This tool might be useful if, for example, you backup a cluster of folders...

WordPress WPTouch Authenticated File Upload

The WordPress WPTouch plugin contains an authenticated file upload vulnerability. A wp-nonce CSRF token is created on the backend index page and the same token is used on handling ajax file uploads through the plugin. By sending the captured nonce with the upload, we can upload arbitrary files to...

Tastydir <= 1.2 (1216) Multiple Vulnerabilities

No description provided by source. Exploit Title: Tastydir = 1216 folder creation vuln Date: Oct 17 2010 Author: R Software Link: http://codecanyon.net/item/tastydir-an-ajax-file-manager-and-dir-listing/117167 Version: 1216 Tested on: Ubuntu 10.10 Information: Tastydir is a cross-platform PHP fil...

IISWorks FileMan fileman.mdb Remote User Database Disclosure

No description provided by source. Exploit Title: IISWorks FileMan fileman.mdb Remote User Database Disclosure Disclosure Date: July 5, 2005 Author: Known Vulnerability Software Link: http://www.scriptdungeon.com/scripts/asp/FileManASP.rar Version: OSVDB: 17824 Security Tracker ID: 1014383 Found...

JV2 Folder Gallery <= 3.0 - Remote File Include Vulnerability

No description provided by source. Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs TeAm template.php:- ?php include $galleryfilesdir./galleryfooter.php; ? ExPlOiT:...

JV2 Folder Gallery 3.0 0 - (download.php) Remote File Disclosure Exploit

No description provided by source. / Script Name :JV2 Folder Gallery Script site :www.jv2.net Discovered by :SaO Exploit Coded by :PeTrO Credits To soulreaver,Kuz3y Compile: Visual C++ or DevC++ / include stdio.h include string.h include winsock.h pragma commentlib,ws232.lib int mainint argc, cha...

JBLOG 1.5.1 - Remote SQL Table Backup Exploit

No description provided by source. !/usr/bin/perl =about VENDOR JBLOG 1.5.1 maybe earlier versions vulnerable too http://www.lisijie.org AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULNERABILITY DESCRIPTION Both 'index.php' and 'admin.php' includes file...

PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit

No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...

JV2 Folder Gallery <= 3.1 - (gallery.php) Remote File Inclusion Vulnerability

No description provided by source...

easysite 2.3 - Multiple Vulnerabilities

No description provided by source. + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin ,ToxicBlood,MesSiAH,xZu,HrN + Local File Inclusion...

FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC

No description provided by source. Title : FL Studio 10 Producer Edition - SEH Based Buffer Overflow PoC Author : Dark-Puzzle Souhail Hammou Type : PoC Risk : High Vendor : Image Line: http://www.image-line.com/downloads/flstudiodownload.html Versions : 10 Producer Edition Other Versions May be...

GlobalSCAPE - CuteFTP macros (.mcr) - Local Vulnerability

No description provided by source. Application: GlobalSCAPE CuteFTP V6.0 http://www.globalscape.com/ Risk: Medium / e-mail: [email protected] web: http://www.prohack.net / --The bug: Atacker can create a crafted CuteFTP macro .mcr, and when its loaded in the target computer, it can download the...

ImageVue 0.16.1 dir.php Folder Permission Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation...

TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities

No description provided by source. ============================================================================== TinyBrowser TinyMCE Editor File browser 1.41.6 - Multiple Vulnerabilities ============================================================================== Discovered by Aung Khant, YGN...