602Pro LAN SUITE 2002 Telnet Proxy Localhost Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5416/info The 602Pro LAN SUITE 2002 Telnet Proxy is reported to be prone to a denial of service condition. It is possible for proxy users to use the loopback interface to connect to localhost. If a large number of these...

Model Agentur Script SQL Injection Vunerability

No description provided by source. Exploit Title: Model Agentur Script SQL Injection Vunerability Platform: php Date: 05.02.2011 Author: NoNameMT Software Link: http://www.media-products.de/model-agentur-p-269.html AND http://www.media-products.de/model-agentur-v2-p-420.html Price: 19,95 � / 29,9...

CMS Firebrand Tec Local File Inclusion Vulnerability

No description provided by source. ====================================================================== L.F.I Firebrand Technologies L.F.I ====================================================================== Exploit Title : CMS Firebrand Tec Local File Inclusion Vulnerability Date : 04/24/201...

new advisore stack ver 1.1 - Directory Traversal

No description provided by source. =============================================================================================== L.F.ISTACK version 1.1L.F.I =============================================================================================== Author : R3VANBASTARD Download:...

Acc PHP eMail 1.1 - CSRF

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc PHP eMail v1.1 - CSRF // Author Info x Author: bi0 x Contact: [email protected] x Homepage :...

Zomplog <= 3.8.2 (force_download.php) File Disclosure Vulnerability

No description provided by source. Name: Zomplog 3.8.2 = file disclouse Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: powered by zomplog Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah milw0rm.com 2008-05-...

LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit

No description provided by source. !/usr/bin/perl LightNEasy sql/no-db = 2.2.x system config disclosure exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://www.lightneasy.org ------------------------------ it works with magicquotesgpc=off short explanation:...

ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability

No description provided by source. // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : powered by clipshare VERSION : less than v3.0.1 EXPLOIT :...

KDE Konqueror 3.5 JavaScript IFrame Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22814/info KDE Konqueror is prone to a remote denial-of-service vulnerability because of an error in KDE's JavaScript implementation. An attacker may exploit this vulnerability to cause Konquerer to crash, resulting in...

PHP Chat for 123 Flash Chat Remote File Inclusion Vulnerability

No description provided by source. Exploit Title: phpchat Remote File inclusion Vulnerability Date: 2010/07/20 Author: HaCkEr arar Email: [email protected] My Sites : www.vbspiders.com Script home: http://www.opensourcescripts.com/dir/PHP/Chat/phpchatmodulefor123flashchat4902.html Tested on: Windows...

Blox CMS SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Blox CMS SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Script Home:...

Scribe <= 0.2 (index.php page) Local File Inclusion Vulnerability

No description provided by source. scribe 0.2 local file inclusion vulnerability download http://sourceforge.net/projects/scribe/ author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/0.2/index.php?page=../../../../../../../../../../etc/passwd%00 milw0rm.com 2008-02-14...

php video script SQL Injection Vulnerability

No description provided by source. Exploit Title: php video script SQL Injection Vulnerability Date: 2011-25-11 Author: longrifle0x Home page: www.security-research.ge software: PHP video script Download:http://www.alurian.com/php-video-script/ Tools: SQLMAP Drok: Copyright ? PHP Video Script...

Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2170-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2170-1 advisory. Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to...

USN-2170-1 mysql-5.5 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.37. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the...

Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure

Kemana Directory 1.5.6 - kemanaadminpasswd Cookie User Password Hash Disclosure Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with...

exploit for old rlpdaemon bug

!/opt/perl5/bin/perl -w HP-UX rlpdaemon local exploit Bulletin HPSBUX0111-176 November 2001 For use only on machines where you have legitimate root. This attempts to add junk including "localhost +" to /.rhosts. Obvious variants could include /etc/passwd. use IO::Socket; $PORT = 9000; pick...

HP-UX rlpdaemon Local .rhosts Append

!/opt/perl5/bin/perl -w HP-UX rlpdaemon local exploit Bulletin HPSBUX0111-176 November 2001 For use only on machines where you have legitimate root. This attempts to add junk including "localhost +" to /.rhosts. Obvious variants could include /etc/passwd. use IO::Socket; $PORT = 9000; pick...

HackerOne: DNS Misconfiguration

Your localhost.hackerone.com has address 127.0.0.1 and this may lead to "Same- Site" Scripting. Here is detailed description of this minor security issue by Tavis Ormandy: http://www.securityfocus.com/archive/1/486606/30/0/threaded...

Updated chrony package fixes security vulnerability

Updated chrony package fixes security vulnerability: In the chrony control protocol some replies are significantly larger than their requests, which allows an attacker to use it in an amplification attack CVE-2014-0021. Note: in the default configuration, cmdallow is restricted to localhost, so...