Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion

Exploit for php platform in category web applications ================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion ================================================================== bug found by Jose Luis Gongora Fernandez...

Simple Forum PHP - Multiple Vulnerabilities

Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new details: you can insert html/javascript codes...

Fedora 12 : uzbl-0-0.16.20100626gitafc0f873e.fc12 (2010-12276)

Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...

isolate -- local root exploit

Isolate currently suffers from some bad security bugs! These are local root privilege escalation bugs. Thanks to the helpful person who reported them email Chris if you want credit!. We're working to fix them ASAP, but until then, isolate is unsafe and you should uninstall it. Sorry!...

AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection

AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...

ActiTime 2.0-MA CSRF Vulnerability

Exploit for php platform in category web applications ================================== ActiTime 2.0-MA CSRF Vulnerability ================================== |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / //...

Arbitrary UNC file read in IE 8

Internet Explorer is vulnerable to a drive-by arbitrary UNC file read, with the usual consequences local account password disclosure, etc. as in IE6 before SP1. It is in ICMFilter, which is accessible via the CSS filter property. Sample exploit code: div...

XSS bug in US Robotics firmware USR5463-v0_06.bin

Hi! This bug was finded in the USR5463 802.11g Wireless Router. !-- Author: SH4V BUG: permanent XSS Firmware: USR5463-v001.bin - USR5463-v006.bin Router: USR5463 802.11g Wireless Router Company: US Robotics Just change http://192.168.2.1/ by your current gateway. -- form...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 6772)

Mozilla XULrunner was upgraded to 1.9.0.17 fixing some bugs and regressions. The following security bug has been fixed : - The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service application...

HTMLDOC 1.9.x-r1629 local .html buffer overflow(win32) exploit

Exploit for unknown platform in category local exploits ============================================================== HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32 exploit ============================================================== /HTMLDOC 1.9.x-r1629 local .html buffer overflowwin32...

Kantaris 0.5.6 - Local Denial of Service (PoC)

Kantaris 0.5.6 - Local Denial of Service PoC !/usr/bin/perl Kantaris 0.5.6 local Denial of service Poc Author: Anonymous How i find this bug: I was looking for mkv player because i downloaded 13 seasons of south park. I found Kantaris player and decided to chek it's security. Bug info:Kantaris...

Yonja Shell Upload

..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb:::: ::::d8:::::::::::indoushka:::::::::::8b::::...

Jax Guestbook 3.50 - Admin Login

Jax Guestbook 3.50 - Admin Login Exploit Title: Jax Guestbook 3.50 Admin Login Exploit Date: December 23rd, 2009 Author: Sora Software Link: http://script.wareseeker.com/ASP-NET/jax-guestbook-3.50.zip/32956d53cf Version: 3.50 Tested on: Windows and Linux ------------------------------------------...

MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption

This module exploits a vulnerability in the getElementsByTagName function as implemented within Internet Explorer. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule HttpClients::IE, :uaminver =...

FreeBSD 8.0 Run-Time Link-Editor (RTLD) - Local Privilege Escalation

FreeBSD 8.0 Run-Time Link-Editor RTLD - Local Privilege Escalation Discovered & Exploited by Nikolaos Rangos also known as Kingcope. Nov 2009 "BiG TiME" "Go fetch your FreeBSD r00tkitz" // http://www.youtube.com/watch?v=dDnhthI27Fg There is an unbelievable simple local r00t bug in recent FreeBSD...

PHP-Nuke 8.0 - News Module Cross-Site Scripting / HTML Code Injection

Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 10 FEDORA-2009-9973 (BackupPC)

The remote host is missing an update to BackupPC announced via advisory FEDORA-2009-9973. OpenVAS Vulnerability Test $Id: fcore20099973.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9973 BackupPC Authors: Thomas Reinke Copyright: Copyright c 2009...

PHP 5.3.0 - 'pdflib' Arbitrary File Write

Description: ------------ Via this bug , attacker can save a file in path that not allowed in openbasedir . Reproduce code: --------------- / if!isset$PATH,$VALUE die'/expl.php?p=pathuwantsavefile/filename&v=valueuwantsav einfile'; $IRCRASH = pdfnew; pdfopenfile$IRCRASH,$PATH;...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...