4830 matches found
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
Exploit for unknown platform in category remote exploits ============================================================= Winamp Do not use Winamp ! back: http://inj3ct0r.com/sploits/186.rar index.html ----------- Load.php --------- foo.wsz foo.zip ----------------- /frame/ /maki/ /shade/ /html/...
Winamp <= 5.04 Skin File (.wsz) Remote Code Execution Exploit
No description provided by source. This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! http://www.milw0rm.com/sploits/skinhead.rar 171 Ko index.html ----------- html head /head frameset rows=",1" framespacing="0" border="0"...
Winamp 5.04 - '.wsz' Skin File Remote Code Execution
This 0day exploit is known to be circulating in the wild There is no patch for this vulnerability - Do not use Winamp ! https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/418.rar skinhead.rar - 171 Ko index.html ----------- Load.php --------- foo.wsz foo.zip...
dosMac.txt
Advisory Name Local Denial Of Service Attack Against The SecurityServer Daemon In MacOS X, MacOS X Server, And Darwin. Release Date 12-30-03 Effected Platforms Apple MacOS X, MacOS X Server, and Darwin. Author Matt Burnett [email protected] Vendor Status No patch has been released as o...
Invision Power Top Site List < 2.0 Alpha 3 - SQL Injection (PoC)
Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 2.0 Alpha 3 Website: http://www.invisionpower.com/ BID: 9229 Description: Invision Power Top Site List is a flexible site ranking script written in PHP, the popular...
[CommerceSQL] Remote File Read Vulnerability
CommerceSQL shopping cart http://commercesql.com allows remote file reading. It only needs to specially prepared page variable in index.cgi to allow reading remote files like /etc/passwd By using prepared GET page variable it allows user to read remote files Example: With...
Thread-ITSQL XSS Vulnerability
Thread-ITSQL XSS Vulnerability Published: 24 September 2003 Released: 24 September 2003 Affected Systems: Thread-ITSQL Vendor: http://www.ymonda.co.uk Issue: Remote attackers can inject XSS script. Description: ============ "Thread-ITSQL message board product is designed specifically for SQL Serv...
myserver-0.4.1.txt
Topic: MyServer 0.4.1 DOS Product: Myserver 0.4.1 http://myserverweb.sourceforge.net Note: yep, I'm on the dole, anyone wanna give me a job : Vendor Notification: Woooops, sorry i forgot ; Background: from homepage MyServer is a free and easy to configure web server. MyServer is licensed under th...
Pi3Web 2.0.1 Denial of Service - Proof of Concept
No description provided by source. / Pi3Web 2.0.1 DoS - Pr00f of concept. Vulnerable systems: Pi3Web 2.0.1 maybe others Vendor: www.johnroy.com/pi3 - http://pi3web.sourceforge.net/ Patch: no yet. Info: Pi3Web Server is vulnerable to a denial of Service. when a malformed HTTP Request is done the...
Pi3Web 2.0.1 - Denial of Service (PoC)
Pi3Web 2.0.1 - Denial of Service PoC / Pi3Web 2.0.1 DoS - Pr00f of concept. Vulnerable systems: Pi3Web 2.0.1 maybe others Vendor: www.johnroy.com/pi3 - http://pi3web.sourceforge.net/ Patch: no yet. Info: Pi3Web Server is vulnerable to a denial of Service. when a malformed HTTP Request is done the...
Microsoft Office Web Components allows arbitary user to determine whether local file exists via Chart component "Load" method
Overview Microsoft Office Web Components OWC allows a malicious script on a web page to learn if a file exists on the client's filesystem. Description OWC allows viewing of Microsoft Office documents such as spreadsheets and charts to be viewed within an HTML document in Microsoft Internet Explor...
Microsoft IIS 4.0/5.0 - SMTP Service Encapsulated SMTP Address (MS99-027)
source: https://www.securityfocus.com/bid/5213/info Microsoft Exchange 5.5 and the SMTP Simple Mail Transfer Protocol service included with IIS Internet Information Services 4.0 and 5.0 are vulnerable to an encapsulated SMTP address vulnerability. The vulnerability was originally announced in...
MacOS X SoftwareUpdate Vulnerability
---------------------------------------------------------------------------- MacOS X SoftwareUpdate Vulnerability. ---------------------------------------------------------------------------- Date: July 6, 2002 Version: MacOS 10.1.X and possibly 10.0.X Problem: MacOS X SoftwareUpdate connects to...
Using the backbutton in IE is dangerous
---..---..---..---..---..---..---..---..---..---..---..---..---- Title: Using the backbutton in IE is dangerous. Date: 2002-04-15 Software: At least Internet Explorer 6.0. Tested env: Windows 2000 pro, XP. Rating: Medium because user interaction is needed. Impact: Read cookies/local files and...
AdMentor Login Flaw
Regarding : AdMentor v2.11 and earlier Homepage: http://www.aspcode.net AdMentor allows any user to login as admin. The base path of the login is usually : http://www.someserver.com/admentor/admin/admin.a sp By using Login : ' or ''=' , and Password : ' or ''=' We create a legal query because it...
Vulnerability in Viralator proxy extension
Hi! Date: October 2001 Product: Viralator http://viralator.loddington.com/ Viralator is a perl-script to be used with the squid proxy, an apache webserver and some virus scanner software. Its purpose is to allow scanning of files downloaded through the proxy for viruses. The product has been list...
Microsoft Internet Information Server 4.0 (IIS) vulnerable to DoS when URL redirecting is enabled
Overview A vulnerability in IIS 4.0 may permit intruders to crash vulnerable IIS servers with URL redirection enabled. Description A vulnerability in Microsoft IIS 4.0 allows an attacker to crash IIS 4.0 servers if they are configured to use URL redirection. URL redirection is not used by default...
PT-2001-2418 · 3Com · 3Com Ps40 Superstack Ii
Name of the Vulnerable Software and Affected Versions: 3Com PS40 SuperStack II affected versions not specified Description: The issue allows remote attackers to perform brute force password guessing without being delayed or disconnected after providing incorrect usernames or passwords, making it...
Macromedia Flash plug-in contains buffer overflow
Overview Incorrectly formatted sound wave SWF files may cause a buffer overflow in the Macromedia Flash plug-in. Description If the length fields in an SWF file specify fewer data than are actually present in the file, processing the file may cause a buffer overflow in the Macromedia Flash plug-i...
Hexyn / Securax Advisory #17 - Bison FTP Server Directory Traversal
Hexyn / Securax Advisory 17 - Bison FTP Server Directory Traversal Topic: Bison FTP Server Directory Traversal Announced: 2001-02-17 Affects: Bison FTP Server version 4 Release 1 DISCLAIMER: THE ENTIRE ADVISORY HAS BEEN BASED UPON TRIAL AND ERROR RESULTS. THEREFORE WE CANNOT ENSURE YOU THE...