6620 matches found
WordPress Download Manager 2.6.8 Shell Upload
Exploit Title : WordPress Download Manager 2.6.8 Shell Upload Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : www.wpdownloadmanager.com Software Link : http://downloads.wordpress.org/plugin/download-manager.zip Date : 2014-07-11 Tested on : Linux / Mozilla Firefox / WordPress...
SMB Brute Force Logins With Default Credentials
A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component prayercenter Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comprayercenter POC :...
BEA WebLogic 7.0/8.1 Administration Console Error Page Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13794/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page. A...
cPanel 5-9 Passwd Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10505/info cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using ...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
Avirt Gateway Suite 3.3 a/3.5 Mail Server Buffer Overflow (1)
No description provided by source. source: http://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field...
Adam Ismay Print Topic Mod 1.0 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter...
XLReader 0.9 - Remote Client-Side Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11970/info A remote, client-side buffer overflow vulnerability affects xlreader. This issue is due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into static...
Oracle Application Server 9i Webcache PartialPageErrorPage Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13422/info A remote cross-site scripting vulnerability affects the Oracle Application Server 9i Webcache administration console. This issue is due to a failure of the application to properly sanitize user-supplied input...
Solaris <= 2.5.1 automount Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/235/info The automounter daemon automountd answers file system mount and unmount requests from the autofs filesystem via RPC. A vulnerability has been discovered that may allow an unauthorized user to send arbitrary...
Armida Databased Web Server 1.0 - Remote GET Request Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8017/info Armida Databased Web Server is reportedly prone to a remote denial of service when process malicious GET requests. The problem occurs when processing requests containing excessive data. Exploitation of this...
LAN Messenger <= 1.2.28 - Denial of Service Vulnerability
No description provided by source. !/usr/bin/python Exploit Title: LAN Messenger = v1.2.28 Remote Denial of Service Vulnerability Version: = v1.2.28 Date: 2012-04-28 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://lanmsngr.sourceforge.net/ Tested on: Windows XP SP3...
GnuPG 1.4.3/1.9.x Parse_User_ID Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18554/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote...
Alt-N MDaemon 8.0 IMAP Server CREATE Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14315/info Alt-N MDaemon IMAP Server is affected by a remote buffer overflow vulnerability. This issue presents itself when an attacker submits excessive data through the CREATE command subsequent to authentication This...
Microsoft Office 2000/2003/2004/XP - File Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28146/info Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Office file. Successfully exploiting this issue would allow t...
Vivvo Article Manager <= 3.2 (classified_path) File Include Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class VivvoArticleManagerRemoteFileIncludePOCBase: vulID = '63958' version = '1' vulDate = '2006-09-09' author ...
Cruiseworks 1.09 Cws.exe Doc Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20699/info Cruiseworks is prone to a remote buffer-overflow vulnerability. Specifically, the application fails to validate input passed to the 'doc' parameter of the '/scripts/cruise/cms.exe' application. Cruiseworks 1.09...
Scratcher (SQL/XSS) Multiple Remote Vulnerability
No description provided by source. + Scratcher SQL/XSS Multiple Remote Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /...
BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash t...