984 matches found
FSD 2.052/3.000 sysuser.cc sysuser::exechelp Function HELP Command Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/25883/info FSD is prone to multiple remote buffer-overflow vulnerabilities because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues to execute arbitrary...
Mountain Network Systems WebCart 8.4 Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3453/info Mountain Network Systems WebCart is a cgi based online shopping suite. An error in the webcart.cgi script allows a remote user to pass an arbitrary shell command which will be executed by the script. WebCart...
FtpLocate <= 2.02 (current) Remote Command Execution Exploit
No description provided by source. Alot of code for a cgi | vuln. /str0ke !/usr/bin/perl FtpLocate = 2.02 current remote exploit VERY PRIVATE VERSION DO NOT DISTRIBUTE newbug Tseng at chroot.org sub mysocket my $s=IO::Socket::INET-newPeerAddr = $host, PeerPort = 80, Proto = tcp or die socket: ; s...
ActivePerl 5.6.1 perlIIS.dll Buffer Overflow Vulnerability (3)
No description provided by source. source: http://www.securityfocus.com/bid/3526/info ActivePerl is an implementation of the Perl scripting language for Microsoft Windows systems developed by Activestate. ActivePerl allows for high-performance integration with IIS using a DLL called 'perlIIS.dll'...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
Invision Power Board 2.0.0 - 2.0.2 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket;...
ProFTPD mod_sftp Integer Overflow DoS PoC
No description provided by source. ProFTPD modsftp Integer Overflow by Kingcope reference: http://www.castaglia.org/proftpd/modules/modsftp.html Exploit Title: ProFTPD modsftp Integer Overflow Date: 7 February 2011 Author: Kingcope Software Link:...
Convert-UUlib 1.04/1.05 Perl Module Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13401/info Convert-UUlib Perl module is prone to a remotely exploitable buffer-overflow vulnerability. A remote attacker may leverage this condition to overwrite sensitive program control variables and thus gain control o...
phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use LWP::Simple; print \n; print \n; print \n; print phpMyAgenda 3.1 Multiple Remote Vulnerabilities Exploit \n; print Bug found By : Ashiyane Corporation \n; print Email: Nima Salehi nimaatashiyane.ir \n; print Web Site :...
cURL 6.1 - 7.4 - Remote Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1804/info Curl is an open-source utility for sending or receiving files using URL syntax. A vulnerability exists in the version of curl included with Debian GNU/Linux 2.2 and FreeBSD prior to 4.2 release. Note that cURL...
Roger Wilco 1.4.1 - Remote Server Side Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8566/info A vulnerability has been reported for various Roger Wilco server releases. The problem occurs server-side, and can be triggered when processing malformed client packets. Specifically, when connecting to a server...
FreePBX 2.11.0 - Remote Command Execution
No description provided by source. !/usr/bin/perl use strict; use warnings; use IO::Socket::INET; Exploit Title: FreePBX 2.9,2.10,2.11,12 Remote Command Execution Google Dork: n/a Date: 2/25/14 Exploit Author: @0x00string Vendor Homepage: http://www.freepbx.org/ Software Link:...
WFTPD 2.4.1RC11 REST Command Malformed File Write DoS
No description provided by source. source: http://www.securityfocus.com/bid/1506/info WFTPD versions prior to 2.4.1RC11 suffer from a number of vulnerabilities. 1 Issuing a STAT command while a LIST is in progress will cause the ftp server to crash. 2 If the REST command is used to write past the...
MemHT Portal <= 4.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code $checktitle...
Pizzis CMS <= 1.5.1 (visualizza.php idvar) Blind SQL Injection Exploit
No description provided by source. --+++=============================================================+++-- --+++====== Pizzis CMS = 1.5.1 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use...
Microsoft Windows 2000/2003 Recursive DNS Spoofing Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/25919/info Microsoft Windows DNS Server is prone to a vulnerability that permits an attacker to spoof responses to DNS requests. A successful attack will corrupt the DNS cache with attacker-specified content. This may aid...
PunBB Affiliates Mod <= 1.1 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod = v1.1 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90 & UltraSound, WaRWolFz Crew Product: http://www.punres.org/desc.php?pid=328 use strict; use LWP::UserAgent; u...
Duyuru Scripti Goster.ASP SQL injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22910/info Duyuru Scripti is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability could permit remot...
Woltlab Burning Board <= 2.3.5 (links.php) SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 = links.php SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Exploit by | 666 SR-Crew Bug by | x82 Googledork | inurl:/wbb2/links.php?cat Usage | links.pl...
Zomplog <= 3.7.6 - Local File Inclusion Vulnerabilty (win32)
No description provided by source. Made by Bl0od3r tech-bl0od3r.blogspot.com use IO::Socket; use Switch; $port = 80; $target = @ARGV0; $folder = @ARGV1; @paths= ../../../../../var/log/httpd/accesslog, ../../../../../var/log/httpd/errorlog, ../apache/logs/error.log, ../apache/logs/access.log,...