3215 matches found
CA BrightStor Backup 11.5.2.0 (Mediasvr.exe) Remote Code Exploit
No description provided by source. !/usr/bin/python Computer Associates CA Brightstor Backup Mediasvr.exe Remote Code Exploit Previously Unknown There seems to be an design error in the handling of RPC data with xdr procedures across several .dll's imported by Mediasvr.exe. Four bytes from an RPC...
caid-msgeng.txt
!/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflow vulnerability as described in LS-20060330.pdf on...
CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow
CA BrightStor ARCserve - msgeng.exe Remote Stack Overflow !/usr/bin/python This one was listed in the SANS TOP 20 and I needed an exploit for analysis. I couldnt find a reliable exploit for my analysis and so came up with this. Remote exploit for the CA BrightStor msgeng.exe service stack overflo...
SaphpLesson v3.0 SQL Injection Exploit
//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...
Unfixed XSS vulnerability at www.doldurkupu.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.doldurkupu.com, which at the time of submission ranked 5625340 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at festivallerimiz.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting festivallerimiz.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...
Fixed XSS vulnerability at www.icu-project.org
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.icu-project.org, which at the time of submission ranked 411508 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.indirbunu.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.indirbunu.com, which at the time of submission ranked 6898460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at nursingcenter.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting nursingcenter.com, which at the time of submission ranked 173148 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...
Unfixed XSS vulnerability at www.turizmhaberleri.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.turizmhaberleri.com, which at the time of submission ranked 394768 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...
Unfixed XSS vulnerability at www.videozel.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.videozel.com, which at the time of submission ranked 6181360 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is current...
Unfixed XSS vulnerability at www.japantravelinfo.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.japantravelinfo.com, which at the time of submission ranked 411637 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
Unfixed XSS vulnerability at www.firmaekle.com
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.firmaekle.com, which at the time of submission ranked 2292456 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...
Unfixed XSS vulnerability at roundrockchamber.org
Security researcher M-Ray, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting roundrockchamber.org, which at the time of submission ranked 2714412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...
MOAB-25-01-2007.rb.txt
!/usr/bin/ruby c Copyright 2007 Lance M. Havok Proof of concept for MOAB-25-01-2007. require 'socket' webport = ARGV0 || 80.toi puts "++ Starting HTTP server at port webport." webserver = TCPServer.newnil, webport while session = webserver.accept randclen = rand80 useragent =...
Apple Mac OSX 10.4.8 - 'UserNotificationCenter' Local Privilege Escalation
!/usr/bin/ruby Copyright c 2007 Kevin Finisterre Lance M. Havok All pwnage reserved. "Exploit" for MOAB-22-01-2007: All your crash are belong to us. require 'fileutils' bugselected = ARGV0 || 0.toi INPUTMANAGERURL = "http://projects.info-pull.com/moab/bug-files/MOAB-22-01-2007im.tar.gz" keeping a...
DEBIAN-CVE-2007-0262
WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...
mcore-mdb.txt
M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...