Havij 1.10 - Persistent Cross-Site Scripting

Havij 1.10 - Persistent Cross-Site Scripting Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon...

E-book Store - Multiple Vulnerabilities

E-book Store - Multiple Vulnerabilities ======================================================================================== | Title : E-book Store Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/ | Tested...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 addNewDept, 2 deptId, or 3 deptDesc parameter to tvserver/server/user/addDepartment.jsp; or the 4 firstName, 5 lastName, or 6 email...

VulnCheck KEV: CVE-2007-2496

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

DEBIAN-CVE-2010-1160

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim...

CVE-2010-1160

GNU nano before 2.2.4 is vulnerable: a file is overwritten during save without verifying the destination file change, enabling a local user-assisted symlink attack to overwrite an attacker-owned file. Impact: local privilege or integrity risk when editing files. Affected component: nano (pre-2.2....

CVE-2010-1160

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim...

Remote file inclusion

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name...

ldap-search NSE Script

Attempts to perform an LDAP search and returns all matches. If no username and password is supplied to the script the Nmap registry is consulted. If the ldap-brute script has been selected and it found a valid account, this account will be used. If not anonymous bind will be used as a last attemp...

ldap-brute NSE Script

Attempts to brute-force LDAP authentication. By default it uses the built-in username and password lists. In order to use your own lists use the userdb and passdb script arguments. This script does not make any attempt to prevent account lockout! If the number of passwords in the dictionary excee...

PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)

PHP Product Catalog - Cross-Site Request Forgery Change Administrator Password /\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack -----------------------------------------------------------------...

PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)

/\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack ------------------------------------------------------------------------------------------ EOF...

CVE-2009-4143

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...

CVE-2009-4143

PHP before 5.2.12 does not properly handle session data, which has unspecified impact and attack vectors related to 1 interrupt corruption of the SESSION superglobal array and 2 the session.savepath directive...

PHP session.save_path 存在安全绕过漏洞

No description provided by source...

Cisco switch password-cracking-vulnerability warning-the black bar safety net

Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...

Spider Solitaire PoC

Exploit for unknown platform in category local exploits ==================== Spider Solitaire PoC ==================== Title: Spider Solitaire PoC CVE-ID: OSVDB-ID: Author: SirGod Published: 2009-10-15 Verified: yes view source print? 0day.today 2018-03-19...

Spider Solitaire - Denial of Service (PoC)

Spider Solitaire - Denial of Service PoC...

Spider Solitaire PoC

No description provided by source. ?php / Spider Solitaire Windows XP SP2 Local Crash PoC By SirGod www.insecurity.ro www.twitter.com/SirGod Loading a corrupt save filespider.sav will result in a local crash of Spider Solitaire / $username="pwn"; //Replace with your computer username...

CDBurnerXP 4.2.4.1351

No description provided by source. !/usr/bin/env python CDBurnerXP v 4.2.4.1351 Local Crash PoC Found By: DrIDE Tested On: XPSP3, 7RC Usage: Create New Data Disc, Add a Folder, Paste to Rename Folder, Click Save Compilation as ISO Notes: Super lame and most likely not exploitable. ''' Error...