1087 matches found
CesarFTP 0.99 g Remote CWD Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7950/info A vulnerability has been reported for CesarFTP. Reportedly, an attacker may crash a target server by supplying excessive data as the argument to the 'CWD' command. This may result in the server hanging,...
Sports Clubs Web Panel 0.0.1 - Remote Game Delete Exploit
No description provided by source. !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlqueryDELETE FROM draw WHERE did='$did'; by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers...
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Exploit
No description provided by source. !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline=echo 'ingreslock stream tcp nowait root /bin/sh sh -i...
Annuaire 1Two 2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...
Camtron CMNC-200 IP Camera Denial of Service Vulnerability
No description provided by source. Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests with long...
PHP-Nuke KutubiSitte Module - 'kid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Crux Gallery <= 1.32 Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Crux Gallery = 1.32 / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: Crux Gallery Version: = 1,32 File affected: admin/ Download:...
IISPop 1.161/1.181 Remote Buffer Overflow Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6183/info IISPop is vulnerable to a denial of service caused by a buffer overflow. By sending an unusually large amount of data to IISPop on TCP port 110, the application will terminate with an access violation. Arbitrary...
phpBB Links MOD 1.2.2 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl print q phpBB = 2.0.22 - Links MOD = v1.2.2 Remote SQL Injection Exploit Bug discovered by Don Dork: allinurl:links.php?t=search or: Links MOD v1.2.2 by phpBB2.de SQL INJECTION: Exploit:...
vBulletin DoS - all version
No description provided by source. DOS Vbulletin 92% Works ; Tested on all versions! and can DOS the server Perl Script use Socket; if @ARGV 2 &usage $rand=rand10; $host = $ARGV0; $dir = $ARGV1; $host = s/http:////eg; for $i=0; $i10; $i-- $user=vb.$rand.$i; $data = s= ; $len = length $data; $foo...
Firebird 1.0 - Remote Pre-Authentication Database Name Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10446/info Firebird is reported prone to a remote buffer-overrun vulnerability. The issue occurs because the application fails to perform sufficient boundary checks when the database server is handling database names. A...
LHA 1.x Multiple extract_one Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10354/info LHA has been reported prone to multiple vulnerabilities that may allow a malicious archive to execute arbitrary code or corrupt arbitrary files when the archive is operated on. These issues are triggered in the...
Vallen Zipper 2.30 - (.ZIP) Heap Overflow
No description provided by source. !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warning...
Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Limbo CMS = 1.0.4.2 ItemID Remote Code Execution Exploit Bug Discovered by: Coloss / Epsilon advance1atgmail.com http://coded.altervista.org/limbophp.pl /str0ke milw0rm.com use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $command = $ARGV2; $cmd =...
EasyPublish 3.0 'read' Parameter Multiple SQL Injection and Cross-Site Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30307/info EasyPublish is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection and cross-site scripting vulnerabilities...
Microburst uDirectory 2.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2884/info uDirectory is an online directory and listing management system. An input validation error exists in uDirectory that may allow remote users to execute arbitrary commands on a host running the software...
MosReporter Joomla Component 0.9.3 - Remote File Include Exploit
No description provided by source. !/usr/bin/perl MosReporter Joomla Component Remote File Inclusion Exploit Download Script http://mamboxchange.com/tracker/download.php/196/805/1010/119/reportermambelfish.zip Bug Found & coded By CrackersChild [email protected] Kullanimi perl...
IP Reg <= 0.4 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...
MS Windows GDI+ - Proof of Concept (MS08-052) (2)
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
Greg Matthews Classifieds.cgi 1.0 Hidden Variable Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2019/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to execute any command on the...