10137 matches found
Sony Network Camera SNC-P5 1.0 - ActiveX viewer Heap Overflow (PoC)
Sub tryMe buff = String15000, "A" viewer.PrmSetNetworkParam buff, 1 End Sub milw0rm.com 2007-06-27...
6ALBlog (newsid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================== 6ALBlog newsid Remote SQL Injection Vulnerability =================================================== +By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....:...
mod_perl PerlRun denial of service
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
mod_perl PerlRun denial of service
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
DEBIAN-CVE-2007-3238
Cross-site scripting XSS vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATHINFO REQUESTURI to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. NOTE: this might not...
mod_perl PerlRun denial of service
PerlRun.pm in Apache modperl before 1.30, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI...
CVE-2007-3191
Just For Fun Network Management System JFFNMS 0.8.3 allows remote attackers to obtain configuration information via a direct request to admin/adm/test.php, which calls the phpinfo function...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...
CVE-2007-3173
CVE-2007-3173 describes an information-disclosure flaw: remote attackers can obtain sensitive data via an activateorder request to index.php using an invalid orderid parameter, with likely involvement of ‘[]’ characters. The root cause is improper handling of the orderid parameter, enabling parti...
Ace-FTP Client 1.24a Remote Buffer Overflow PoC
No description provided by source. !/usr/bin/python Credit to n00b for finding the bug. Ace-Ftp client buffer over flow p0c. This is possible to exploit as we Smash the seh handlers and there are Plenty of registers that had our buffer Im still new to seh over writes I haven't Had much experience...
MoviePlay 4.76 - '.lst' Local Buffer Overflow
!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...
SUSE-SA:2007:021: kernel
The remote host is missing the patch for the advisory SUSE-SA:2007:021 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:021 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...
mlf17-sql.txt
!/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get userdata": if empty$id $id = $userid; else $result =...
CVE-2007-2780
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php with a missing or invalid newtheme parameter, which reveals a path in an error message...
Solaris 10 (x86) : 120051-06
SunOS 5.10x86: usermod patch. Date this patch was last updated by Sun : May/07/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...
Glossword 1.8.1 custom_vars.php Remote File Inclusion Vulnerability
No description provided by source. GlossWord v1.8 u script deil ! -- http://glossword.info/ ! Site : http://sourceforge.net/projects/glossword/ Author : BeyazKurt - [email protected] kimse eyimde deil ! Download : http://sourceforge.net/projects/glossword/...
Code injection
The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...
CVE-2007-1693
The SIP channel module in Yet Another Telephony Engine Yate before 1.2.0 sets the callerinfouri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service NULL dereference and application crash via a Call-Info header without a purpose...
MagicISO <= 5.4(build239) .cue File Heap Overflow PoC
Exploit for linux platform in category dos / poc ===================================================== MagicISO = 5.4build239 .cue File Heap Overflow PoC ===================================================== !/usr/bin/env ruby Credits to n00b for finding this bug. Magic iso has a stacked based...
