CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...

CVE-2013-3686

cgi-bin/operator/param in AirLive WL2600CAM and possibly other camera models allows remote attackers to obtain the administrator password via a list action...

MLMAuction Script - 'gallery.php?id' SQL Injection

| \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || MLMAuction Script, SQL Injection Vulnerabilities Product Page: http://www.auctionwebsitescript.com/mlmauction.html AuthorPentester: 3spi0n On...

MLM (Multi Level Marketing) Script - Multiple Vulnerabilities

Exploit for php platform in category web applications 1 SQL Injection Vulnerabilities on Demo Site + productview.php, prdid Param http://server/product/version2/productview.php?prdid='1 + productview.php, uid param http://server/product/version2/profileview.php?uid='1 2 Xss Cross Site Scripting...

Reflected XSS in JIRA Admin Panel (Delete User)

The 'name' param in jira-components/jira-webapp/src/main/webapp/secure/admin/user/views/deleteuserconfirm.jsp is not sanitised, enabling arbitrary html/script execution. A url to demonstrate this issue is:...

ClipShare 4.1.1 - Multiples Vulnerabilities

Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Last Checked: 27 March 2013 Note : to exploit th...

EasyWeb SQL Injection

Exploit Title: easyweb SQLi Vulnerability Date: 09/03/2012 Author: Persia Security Group - Prince & mafia1990 Vendor Homepage: http://www.easy-web.it/ Version: All Version Google Dork: intext:"powered by easyweb" site:it Tested on: win 2003 & 2008 server , Vista , 7 & IIS 6.0, 7.0, 7.5...

DEBIAN-CVE-2012-1165

The mimeparamcmp function in crypto/asn1/asnmime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted S/MIME message, a different vulnerability than CVE-2006-7250...

Sun Java - JRE AWT setDiffICM Buffer Overflow (Metasploit)

$Id: javasetdifficmbof.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Audiotran 1.4.2.4 - Local Overflow (SEH) (DEP Bypass)

Exploit Title: Audiotran 1.4.2.4 SEH Overflow Exploit DEP Bypass Date: 09/20/10 Credit/Bug found by : Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Author: Muhamad Fadzil Ramli - mind1355 at gmail dot com Software Link: http://www.e-soft.co.uk/Audiotran.htm Version:...

Linux Kernel <= 2.6.33.3 SCTP INIT Remote DoS

Exploit for linux platform in category dos / poc ============================================= Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and...

Mozilla Plugin parameter EnsureCachedAttrParamArrays remote code execution vulnerability

Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements...

PT-2010-1279 · Varnish · Varnish

Name of the Vulnerable Software and Affected Versions: Varnish versions prior to 2.1.0 Description: The Command Line Interface in the master process of the reverse proxy server does not require authentication for commands received through a TCP port. This allows remote attackers to execute...

中国游戏中心游戏大厅 (CGAgent.dll) ActiveX Remote Code Execution Exploit

No description provided by source. ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2...

ChinaGames (CGAgent.dll) ActiveX Remote Code Execution Exploit

Exploit for windows platform in category remote exploits ============================================================== ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit ============================================================== ChinaGames CGAgent.dll ActiveX Remote Code Execution...

ChinaGames - CGAgent.dll ActiveX Remote Code Execution

ChinaGames - CGAgent.dll ActiveX Remote Code Execution ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1...

CVE-2008-4053

Multiple cross-site scripting XSS vulnerabilities in index.php in the Bluemoon PopnupBLOG module 3.20 and 3.30 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the 1 param, 2 catid, and 3 view parameters...

CVE-2007-3572

Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the param parameter, as demonstrated by URL encoded "" backtick characters %60 sequences...