WordPress Download Manager 2.6.8 Shell Upload

Exploit Title : WordPress Download Manager 2.6.8 Shell Upload Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : www.wpdownloadmanager.com Software Link : http://downloads.wordpress.org/plugin/download-manager.zip Date : 2014-07-11 Tested on : Linux / Mozilla Firefox / WordPress...

SMB Brute Force Logins With Default Credentials

A number of known default credentials are tried for the login via the SMB protocol. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

cPanel 5-9 Passwd Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10505/info cPanel is reportedly affected by a remote SQL injection vulnerability in the passwd script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using ...

Samhain Labs 1.x HSFTP Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9715/info hsftp has been found to be prone to a remote print format string vulnerability. This issue is due to the application improper use of a format printing function. Ultimately this vulnerability could allow for...

list Web (addlink.php id) Remote SQL Injection Vulnerability

No description provided by source. | | list Web addlink.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoMhttp://WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://maker.ir | |...

xtell 1.91.1/2.6.1 - Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4193/info xtell is a simple network messaging program. It may be used to transmit terminal messages between users and machines. xtell is available for Linux, BSD and most other Unix based operating systems. Multiple buffe...

TinyMCE 2.0.1 - (index.php menuID) Remote SQL Injection Vulnerability

No description provided by source. removed from the frontend, the product affected isn't TinyMCE. if you know which CMS this is please contact me /str0ke TinyMCE Remote SQL Injection Prodcut: TinyMCE Version 2.0.1 Home : http://tinymce.moxiecode.com Vunlerability : 2/ SQL Injection Risk : high !!...

alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL...

ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...

Nullsoft SHOUTCast 1.8.9 - Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4934/info Nullsoft SHOUTcast Server is used to broadcast Shoutcast music. SHOUTcast Server is available for Windows, Linux and a number of other Unix based platforms. A remote buffer overflow vulnerability has been report...

BEA WebLogic 7.0/8.1 Administration Console Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13794/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page. A...

Avirt Gateway Suite 3.3 a/3.5 Mail Server Buffer Overflow (1)

No description provided by source. source: http://www.securityfocus.com/bid/755/info The Avirt Mail Server 3.3a and 3.5 packages are vulnerable to a remote buffer overflow vulnerability. The buffer overflow can be initiated by passing 856 characters in the password field...

BolinTech Dream FTP Server 1.0 User Name Format String Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/9600/info It has been reported that Dream FTP Server may be prone to a remote format string vulnerability when processing a malicious request from a client for a username during FTP authentication. The issue could crash t...

Esselbach Storyteller CMS System 1.8 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Esselbach Storyteller CMS System Version 1.8 page.php Remote SQL Injection Vulnerability Date: March, 9th 2011 GMT +7 Author: Shamus Software Link: http://www.esselbach.com/ Version : Esselbach Storyteller CMS System Version 1.8 Tested on: windows...

Apple Mac OS X 10.4.8 - DMG UFS FFS_MountFS Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attack...

GnuPG 1.4.3/1.9.x Parse_User_ID Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18554/info GnuPG is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This issue may allow remote...

elkagroup (pid) Remote SQL Injection Vulnerability

No description provided by source. elkagroup pid Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoMhttp://WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script : http://www.elkapax.com & http://www.elkagroup.com ||| DorK : Powered by :...

DGNews 2.1 - SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is admin===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

Joomla Component prayercenter <= 1.4.9 (id) SQL Injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component prayercenter Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comprayercenter POC :...

Adam Ismay Print Topic Mod 1.0 - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter...