3110 matches found
Slackware Linux 3.4 makebootdisk temporary file Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/78/info makebootdisk creates the file /tmp/return insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/return to any file and wait for root to run the program. This will clober the targe...
NX5Linkx 1.0 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20010/info NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit these issue...
Net Clubs Pro 4.0 imessage.cgi username Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17622/info Net Clubs Pro is prone to multiple cross-site scripting vulnerabilities. These issues are due to the application's failure to properly sanitize user-supplied input. An attacker may leverage these issues to have...
X11R6 3.3.3 Symlink Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/326/info There is a symlink vulnerability known to exist under most modern linux and NetBSD distributions. It involves /tmp/.X11-unix and the tendency to follow to/overwrite the file pointed to if a symlink. It may be...
Elm < 2.5.8 (Expires Header) Remote Buffer Overflow Exploit
No description provided by source. / Exploit code for the bug posted by Ulf Harnhammar metaurtelia.com http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html Probably you will need to change SYSLOC and STRLOC to work on your box / include stdio.h include stdlib.h include string.h...
SimpleServer:WWW 1.0.7/1.0.8/1.13 Hex Encoded URL Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3112/info SimpleServer:WWW is a freely available HTTP daemon available from AnalogX. It is designed for simplicity of operation. A problem with the web server could allow a remote user to execute arbitrary commands, and...
Dokeos <= 1.8.0 (my_progress.php course) Remote SQL Injection Exploit
No description provided by source...
Allomani - Super Multimedia 2.5 - CSRF Add Admin Account
No description provided by source. Exploit Title: Allomani - Super Multimedia v2.5 - CSRF Add Admin Account Date: 29-06-2010 Author: G0D-F4Th3r Software Link: http://allomani.com Version: 2.5 html body onload=javascript:fireForms form method=POST name=form0 action=...
UtilMind Mail List 1.7 - Users Can Execute Commands
No description provided by source. !/usr/bin/perl -w Mailing List & News Version 1.7 / PoC Exploit. UtilMind Solutions / http://www.utilmind.com/ Actually a pretty amusing exploit to write! The 'openMAIL, |$mailprog $address' ... code sends e-mail to those who are on the mailing list - and the...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
xmlrpc.php Library <= 1.3.0 - Remote Command Execute Exploit (3)
No description provided by source. !/usr/bin/perl -w XML-RPC Remote Command Execution Exploit By Mike Rifone This works on da phpxmlrpc, and da PEAR XMLRPC too! All you need is to put the url to the server and u get shell Dis is my first exploit but hey it works :D Mike@Rifone use LWP::UserAgent;...
Oracle 9i/10g Evil Views - Change Passwords Exploit
No description provided by source. -- -- bunkerview.sql -- -- Oracle 9i/10g - evil view exploit CVE-2007-3855 -- Uses evil view to perform unauthorized password update -- -- by Andrea bunker Purificato - http://rawlab.mindcreations.com -- 37F1 A7A1 BB94 89DB A920 3105 9F74 7349 AF4C BFA2 -- -- Th...
Arab Network Tech. (ANT) CMS - SQL Injection
No description provided by source. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::: Exploit Title : Arab Network Tech. ANT CMS SQL Injection Author : Tr0y-x Script Site : www.antpage.comhttp://www.antpage.com/ Version : All Versions Tested on : Windows & Linux...
Docebo <= 3.5.0.3 (lib.regset.php/non-blind) SQL Injection Exploit
No description provided by source. ?php printr' ----------------------------------------------------------------------------- Docebo Suite = 3.5.0.3 lib.regset.php/non-blind SQL injection exploit by rgod bug found by EgiX working with Mysql = 4.1 PHP 5.X needed by Docebo regardless of php.ini...
All browsers 0day Crash Exploit
No description provided by source. =============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ -...
IPTBB <= 0.5.4 (viewdir id) Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
Magic Photo Storage Website include/config.php _config[site_path] Parameter Remote File Inclusion
No description provided by source...
AContent 1.3 - Local File Inclusion
No description provided by source. Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on:...
Sun SunVTS 4.x PTExec Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2898/info SunVTS is the Sun Validation Test Suite, distributed and maintained by Sun Microsystems. The SunVTS is used to test various components of OEM Sun hardware, and can also be used to stress-test components and...
Sambar Server 4.x/5.0 Insecure Default Password Protection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3095/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar Server provides insecure default protection for user passwords. The default password decryption algorithm employs only...