elkagroup Image Gallery 1.0 - Arbitrary File Upload Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: elkagroup Image Gallery Dork: elkagroup - Image Gallery v1.0 - All right reserved Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type:...

OSSIM 2.1 - SQL Injection and xss

No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...

Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...

HB CMS 1.7 - SQL Injection

No description provided by source. Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork...

Smadav Anti Virus 9.1 Crash PoC

No description provided by source. Exploit Title: Smadav AntiVirus - Crash PoC Date: 10/Nov/2012 Exploit Author: Mada R Perdhana [email protected] / Spentera Research Team Vendor Homepage: http://www.smadav.net & http://www.smadav.web.id Software Link: http://www.smadav.net/download Version: 9.1...

McAfee Superscan 4.0 - XSS Vulnerability

No description provided by source. Trustwave SpiderLabs Security Advisory TWSL2013-024: Cross Site Scripting XSS vulnerability in McAfee Superscan 4.0 Published: 08/02/2013 Version: 1.0 Vendor: McAfee http://www.mcafee.com/ Product: SuperScan Version affected: v4.0 Product description: SuperScan ...

Ability Server <= 2.34 Remote APPE Buffer Overflow Exploit

No description provided by source. / TESTED ON WINXP SP0 RUS c by Dark Eagle from unl0ck research team http://unl0ck.void.ru HAPPY NEW YEAR! Greetz go out to: nekd0, antiq, fl0wsec setnf, nuTshell, nosystem CoKi, reflux... / include string.h include stdio.h include winsock2.h include windows.h //...

TCPDB 3.8 - Remote Content Change Bypass Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change...

IrfanView RLE Image Decompression Buffer Overflow Vulnerability

No description provided by source. Application: IrfanView RLE Image Decompression Buffer Overflow Vulnerability Plateform: Windows Version: The vulnerabilities are confirmed in version 4.33. Other versions may also be affected. Exploitation: Remote code execution Secunia Number: SA49856 PRL:...

HP Power Manager 'formExportDataLogs' Buffer Overflow

No description provided by source. $Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

CheckPoint/Sofaware Firewall Multiple Vulnerabilities

No description provided by source. ProCheckUp Research http://procheckup.com/procheckup-labs/pr11-07.aspx PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls Vulnerability found: 3rd May 2011 Vendor informed: 20th Ju...

Safari JS JITed shellcode - exec calc (ASLR/DEP bypass)

No description provided by source. !-- JIT-SPRAY for Safari 4.0.5 - 5.0.0 JavaScript JIT SHELLCODE and spray for ASLR / DEP bypass Win x32 By Alexey Sintsov from Digital Security Research Group Special for Hack In The Box 2010 Amsterdam PAYLOAD - exec calc Tested on Windows7 and Windows XP. Sorry...

CS-Cart <= 1.3.5 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. GulfTech Security Research September 02, 2008 Vendor : CS-Cart.com URL : http://www.cs-cart.com/ Version : CS-Cart = 1.3.5 Risk : SQL Injection Description: CS-Cart Cart is a full featured online ecommerce application written in php that allows users to build, r...

PHP Live! <= 3.2.1 (help.php) Remote Inclusion Vulnerability

No description provided by source. Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact: aneurysmincathotmaildotc...

Aborior Encore Web Forum Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10040/info Encore Web Forum is reported prone to an issue that may allow a remote user to execute arbitrary commands on a system implementing the forum software. This issue is due to the application's failure to properly...

Internet Explorer 8, 9 & 10 - CInput Use-After-Free (MS14-035) - Crash PoC

No description provided by source. !-- Exploit Title: MS14-035 Internet Explorer CInput Use-after-free POC Product: Internet Explorer Vulnerable version: 8,9,10 Date: 23.06.2014 Exploit Author: Drozdova Liudmila, ITDefensor Vulnerability Research Team http://itdefensor.ru/ Vendor Homepage:...

IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow

No description provided by source. Application: IrfanView 4.33 Format PlugIn ECW Decompression Heap Overflow Plateform: Windows Exploitation: Remote code execution Secunia Number: SA49204 PRL: 2012-10 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/...

Oracle Outside-In LWP File Parsing Stack Based Buffer Overflow

No description provided by source. Application: Oracle Outside-In LWP File Parsing Stack Based Buffer Overflow Version: The vulnerabilities are reported in versions 8.3.5 and 8.3.7. Exploitation: Remote code execution Secunia Number: SA49936 PRL: 2012-25 Author: Francis Provencher Protek Research...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow (0day)

No description provided by source. / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to...

Win32 Shellcode (cmd.exe) for XP SP3 English 26 Bytes

No description provided by source. / 26 Bytes Win32 Shellcode cmd.exe for XP SP3 English Author: Hellcode Research || TCC The Computer Cheats http://tcc.hellcode.net memberz: celil 'karak0rsan unuver , murderkey, murat kaslioglu, bob from murderkey: I love you merve lol from karak0rsan: fuck u ys...