PT-2014-3556

Name of the Vulnerable Software and Affected Versions FreeRDP affected versions not specified Description The issue is related to multiple integer overflows in the client/X11/xf graphics.c file of FreeRDP. This occurs when the width and height are passed to either the xf Pointer New or xf Bitmap...

Daphne - Tool for killing, controlling and debugging processes in Windows

Daphne is a small application for killing, controlling and debugging Windows’ processes. It was born to kill a windows process and became almost a task manager replacement. You can kill a process by dragging the mouse over the windows, by right-clicking the process in the main process list, or by...

CVE-2014-3491

Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...

Qool CMS 2.0 RC2 - Multiple Vulnerabilities

No description provided by source. ?!-- Qool CMS v2.0 RC2 XSRF Add Root Exploit Vendor: Qool CMS Product web page: http://www.qool.gr Affected version: 2.0 RC2 Codename: Sommige Summary: Qool CMS is a content management system that helps web masters be more productive. Qool has been built with bo...

Mini HTTPD 1.21 - Stack Buffer Overflow POST Exploit

No description provided by source. !/usr/bin/python Title: Mini HTTPD stack buffer overflow POST exploit Author: TheColonial Date: 20 Feb 2013 Software Link: http://www.vector.co.jp/soft/winnt/net/se275154.html Vendor Homepage: http://www.picolix.jp/ Version: 1.21 Tested on: Windows XP Profession...

Aztek Forum 4.0 - Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; / header Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435...

Constructr CMS 3.03 Arbitrary File Upload

No description provided by source. !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and...

kalimat new system 1.0 - (index.php) SQL Injection

No description provided by source. ===================================== | kalimat v 1.0 admin by pass index.php ===================================== Author: ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:Kalimat news system v 1.0 demo:...

Mailspect Control Panel 4.0.5 - Multiple Vulnerabilities

No description provided by source. Document Title: ============ Mailspect Control Panel version 4.0.5 Multiple Vulnerabilities Release Date: =========== June 21, 2014 Product & Service Introduction: ======================== Mailspect is the email security and archiving brand of RAE Internet Inc.,...

dotProject 2.1.5 CSRF Vulnerability

No description provided by source. Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt !------------------------------------------------------------------------ Software................dotProject 2.1.5 Vulnerability...........Cross-site Request Forgery...

CuteNews 1.4.6 index.php New User Creation CSRF

No description provided by source. source: http://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that...

FileCOPA FTP Server <= 1.01 (USER) Remote Pre-Auth DoS

No description provided by source. FILECOPA DOS www.filecopa.com Found Jan 19 2006, Tested again on the new release 6 April 2006 BY Bigeazer http://blacksecurity.org They are selling this software for $39.95... oh well.. maybe they shoud fix it first? It appears that FileCopa does not handle alot...

New-CMS 1.08 Multiple Local File Include and HTML-Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38307/info New-CMS is prone to multiple local file-include vulnerabilities and an HTML-Injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include...

FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability

No description provided by source. Document Title: =============== FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1231 Release Date: ============= 2014-03-20 Vulnerability Laboratory ID VL-ID:...

Hosting Controller <= 0.6.1 Unauthenticated User Registeration (2nd)

No description provided by source. / Hosting Controller = v6.1 exploit sileHOSTCxpl This exploit utilize two ways for exploiting vulnerability present into Hosting Controller. This exploit create new user with relative passwd and registered your host with mail server into Hosting Controller...

New-CMS - Multiple Vulnerability

No description provided by source. Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto fulgur Fontanella Author URL: ictsec.wordpress.com...

Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ---------------------------------------------------------- Libera CMS = 1.12 Cookie Remote SQL Injection Exploit Perl Exploit - Add a new admin with your credentials! Author: StAkeR - StAkeRathotmaildotit...

Vanilla Forums LatestComment 1.1 Plugin Persistent XSS

No description provided by source. Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

AdaptCMS_Lite_1.5 2009-07-07

No description provided by source. =========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download :...

Lithtech Engine (new protocol) - Socket Unreacheable DoS

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...