1120 matches found
phusion webserver 1.0 - Directory Traversal vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/4117/info Phusion Webserver is a commercial HTTP server that runs on Microsoft Windows 9x/NT/2000 operating systems. Phusion Webserver is prone to directory traversal attacks. It is possible to break out of wwwroot using...
MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...
WFTPD Server GUI 3.21 Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9908/info WFTPD server front end GUI has been reported to be prone to a denial of service. The issue is reported to present itself if a user who is logged into the affected service issues an FTP request with a large...
Teamtek Universal FTP Server Multiple Commands Remote Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21085/info Universal FTP Server is prone to multiple remote denial-of-service vulnerabilities because the application fails to handle exceptional conditions. An attacker can exploit these issues to crash the affected...
RedHat Linux 7.0 Roaring Penguin PPPoE Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2098/info Roaring Penguin Software's PPPoE is a freeware PPP over Ethernet client often used by ADSL subscribers running Linux or NetBSD. PPPoE contains a possibly remotely exploitable denial of service vulnerability in i...
Fishyshoop <= 0.930b Remote Add Administrator Account Exploit
No description provided by source. !/usr/bin/perl James Gray [email protected] Fishyshoop Security Vulnerability use WWW::Curl::Easy; sub usage print $0 Fishyshoop root URL Desired E-Mail Desired Password\n; exit; $FSURL=shift or usage; $UNAME=shift or usage; $PASS=shift or usage; my $fishyshoop...
MS Windows GDI+ - Proof of Concept (MS08-052) (2)
No description provided by source. ------------------------------------------------------------------------------------------------------------ Operating System: XP SP2 Gdiplus.dll Version: 5.1.3102.2180 Credit: John Smith, Evil Fingers GIF Template Reference:...
eStara Softphone <= 3.0.1.46 (SIP) Remote Buffer Overflow Exploit (2)
No description provided by source. !/usr/bin/perl -s damn-hippie.pl by kokanin google estara, it shows sip stuff and a hippie Remote estara softphone exploit, executable version info = 3.0.1.2 kokanin did the research, metasploit.com did the encoded bindshell on tcp/5060 Lets face it, most users...
Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Limbo CMS = 1.0.4.2 ItemID Remote Code Execution Exploit Bug Discovered by: Coloss / Epsilon advance1atgmail.com http://coded.altervista.org/limbophp.pl /str0ke milw0rm.com use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $command = $ARGV2; $cmd =...
Vallen Zipper 2.30 - (.ZIP) Heap Overflow
No description provided by source. !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warning...
SPECTral Personal SMTP Server <= 0.4.2 - Denial of Service Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Small config If service not DoSeD try to increase this value. Number of trys for DoS. $trys = 10; Quantity signs for atack. $buf = 200000; if @ARGV 1 print \n /\n; print DoS - SPECTral Personal SMTP Server = 0.4.2 b 338 \n; print...
Psunami Bulletin Board 0.x Psunami.CGI Remote Command Execution Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote...
Picture Rating 1.0 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has...
MyBB Member.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14684/info MyBB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation could result in a compromise of the...
Lizardware CMS <= 0.6.0 - Blind SQL Injection Exploit
漏洞类型： 输入验证错误 漏洞文件： /administrator/index.php 漏洞成因： 在index.php 中，未对用户输入进行过滤从而导致注入 参考： http://www.securityfocus.com/bid/32898/solution !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use...
BlueZone Malformed .zft file Local Denial of Service
No description provided by source. !/usr/bin/perl -w Exploit Title: BlueZone Desktop Malformed .zft ffeil Local Denial of Service Date: 24-10-11 Author: Iolo Morganwg Version: BlueZone Secure FTP v5.2C1 Build 1469 Download:...
Tower Toppler 0.99.1 Display Variable Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7028/info It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the privileges of the toppler program. !/usr/bin/perl [email protected]...
Eznet 3.5.0 - Remote Stack Overflow and Denial of Service Exploit
No description provided by source. !/usr/bin/perl -w Stack Overflow in eZnet.exe - Remote Exploit Will download a trojan from any address which you provide on the target system, then will execute the trojan. For this exploit I have tried several strategies to increase reliability and performance:...
Microburst uDirectory 2.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2884/info uDirectory is an online directory and listing management system. An input validation error exists in uDirectory that may allow remote users to execute arbitrary commands on a host running the software...
PHP-Nuke KutubiSitte Module - 'kid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...