CVE-2011-0266

creationtimestamp| type| source ---|---|--- 2011-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17028 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmnnmrptconfignameparams.rb 2025-02-06...

Windows Gather Dump Recent Files lnk Info

The dumplinks module is a modified port of Harlan Carvey's lslnk.pl Perl script. This module will parse .lnk files from a user's Recent Documents folder and Microsoft Office's Recent Documents folder, if present. Windows creates these link files automatically for many common file types. The .lnk...

AVIPreview 0.26 Alpha Denial Of Service

done by BraniX www.hackers.org.pl found: 2011.03.15 published: 2011.03.15 tested on: Windows XP SP3 Home Edition App: AVIPreview 0.26 Alpha App Url: http://www.divx-digest.com/software/avipreviewaj.html AVIPreview.exe MD5: 399ab43edd26c655d0876dc5ddcaa3a7 DoS is caused by Access Violation...

CVE-2011-0647

creationtimestamp| type| source ---|---|--- 2011-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41704 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/emc/replicationmanagerexec.rb 2025-02-06 03:13:40+00:00|...

MyBB 1.6.2 Stored XSS Vulnerability

Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...

MyBB 1.6.2 Cross Site Scripting

MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XSS code as the title any user with any level of...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

CVE-2008-4830

creationtimestamp| type| source ---|---|--- 2010-12-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16493 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/enjoysapguicompdownload.rb 2025-02-06...

CVE-2009-3849

creationtimestamp| type| source ---|---|--- 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16780 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hpnnmsnmp.rb 2025-02-06 03:13:39+00:00| seen|...

mysql security update

5.0.77-4.4 - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682, CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838, CVE-2010-3839, CVE-2010-3840 Resolves: 645642 - Backpatch strmov fix so that code can be tested on more recent platforms...

DZCP (deV!L_z Clanportal) 1.5.4 - Local File Inclusion

Vulnerability ID: HTB22656 Reference: http://www.htbridge.ch/advisory/lfiindzcp.html Product: DZCP Vendor: dzcp.de http://www.dzcp.de Vulnerable Version: 1.5.4 Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Fixed by Vendor Risk level: High Credit: High-Tech...

Clansphere 2010 Cross Site Scripting / SQL Injection

Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : [email protected] Software Link: Download:http: http://sourceforge.net/projects/clansphere/ Version: all Tested on: WinXp sp3 Risk : HIGHT Description : clansphere offers some nice features for you to...

MyBB TagCloud 2.0 Cross Site Scripting

==================================================== MYBB TagCloud 2.0 cross site scripting vulnerability ==================================================== Author: http://www.3ethicalhackers.com Discovered by: http://www.3ethicalhackers.com Original post: http://www.3ethicalhackers.com...

SQL injection vulnerability in BXR

Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Typ...

CVE-2006-5745

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16532 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06071xmlcore.rb 2025-02-06 03:13:38+00:00| see...

Clear Web Browser History

From the Tools menu, select Clear Recent History. This opens a second window with checkboxes to let you decide what to clear from the browser’s history. You can decide to wipe browsing and download history, cookies, cache, active logins or site preferences. This screen also allows you to set a ti...

Conficker Worm Is Still a Threat

Just because there have been no big attacks linked to Conficker since April 2009, it is dangerous to assume that nothing is happening, said the director of the Conficker Working Group, Rodney Joffe. Read the full article. Infosecurity...

XSS vulnerability in EasyPublish CMS

Vulnerability ID: HTB22356 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityineasypublishcms.html Product: EasyPublish CMS Vendor: Escio AS Vulnerable Version: Current at 23.04.2010 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripti...

CVE-2009-3853

creationtimestamp| type| source ---|---|--- 2010-05-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16421 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibmtsmcadping.rb 2025-02-06 03:13:39+00:00| seen|...