Google Desktop Search Remote Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11541/info Google Desktop Search is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize HTML tag content. An attacker may leverage this issue...

doorGets CMS - CSRF Vulnerability

No description provided by source. Title: Doorgets CSRF Vulnerability Author: n0pe Software Link: http://www.doorgets.com/ Download: http://www.doorgets.com/?sourcescms Tested: BackBox Linux 3 With this vulnerability you can change the configuration of the site. Proof of concept: html body form...

Sun Solaris <= 2.6 power management Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/160/info A vulnerability exists in Sun's power management software under Solaris versions 2.4-2.6 although only 2.6 as part of the main distribution. The sys-suspend program is initiated when a user runs the program, or...

MS IE 4/5/5.5/5.0.1 external.NavigateAndFind() Cross-Frame Vulnerability

No description provided by source. Microsoft Internet Explorer 4.0 for WfW/Windows 3.1/Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5,Internet Explorer 5.0.1,Internet Explorer for Unix 5.0 external.NavigateAndFi...

Kolibri+ Webserver 2 - (GET Request) Remote SEH Overwrite Exploit

No description provided by source. !/usr/bin/python Could not get this to work on XP SP3. php5ts.dll is the only module with safe seh off but could not get the pop pop ret to work correctly despite the large number of usable addresses that were tested. $ ./kolibri.py 192.168.1.146 8080 Kolibri+...

Jurpopage 0.2.0 - SQL Injection

No description provided by source. ========================================================= Jurpopage SQL Injection ========================================================= Exploit Title : Jurpopage SQL Injection Date : 24 Noveber 2010 Author : Suddendeath [email protected] Platform/Test...

Job Site 1.0 - Multiple Vulnerabilities

No description provided by source. Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

com_loudmouth Mambo Component <= 4.0j - Include Vulnerability

No description provided by source. Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/7911/comloudmouth-4.0j.zip bug found in file abbc.class.php : include...

McGallery 1.0/1.1/2.2 index.php language Parameter Traversal Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabiliti...

awzMB <= 4.2 beta 1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip Author : S.W.A.T...

Pixel8 Web Photo Album 3.0 - Remote SQL Injection Vulnerability

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : Pixel8 Web Photo Album v3.0 download : null Demo : http://www.jayeshp.com/Pixel8/Files/Demo.asp Exploit...

D.R. Software Audio Converter 8.1 - DEP Bypass Exploit

No description provided by source...

Linux Kernel < 2.6.29 exit_notify() Local Privilege Escalation Exploit

No description provided by source. !/bin/sh gw-notexit.sh: Linux kernel 2.6.29 exitnotify local root exploit by Milen Rangelov gat3way-at-gat3way-dot-eu Based on 'exitnotify' CAPKILL verification bug found by Oleg Nestorov. Basically it allows us to send arbitrary signals to a privileged suidroot...

Havalite CMS 1.1.7 - Unrestricted File Upload Exploit

No description provided by source. ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : Havalite CMS...

D-Link DSL-2640B Authentication Bypass

No description provided by source...

uTorrent <= 2.0.3 DLL Hijacking Exploit (plugin_dll.dll)

No description provided by source. / Exploit Title: uTorrent = 2.0.3 DLL Hijacking Exploit plugindll.dll Date: 24/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://www.utorrent.com/downloads Version: 2.0.3 and prior Tested on: Windows 7 x86 6.1.7600 Compile and...

Kayako eSupport 3.04.10 - XSS/CSRF Vulnerabilities

No description provided by source. + Exploit Title : kayako xss/xsrf Remote Vulnerabilities + Author : By D3V!L FUCKER + Script Link : http://www.kayako.com/solutions/esupport/ + Version : Kayako eSupport v3.04.10 + Tested on : linux ubuntu 9.10 + Code : +++++++++++++++++++++++++...

Devana SQL Injection vulnerability

No description provided by source. Exploit Title: Devana SQL Injection vulnerability Date: 28.03.2010 Author: Valentin Category: webapps/0day Version: Tested on: Debian lenny, Apache2, MySQL5 CVE : Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel ...

Stelian Pop dump 0.4 restore Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1330/info A buffer overflow exists in the 'restore' program, part of the dump 0.4b15-1 package, distributed with RedHat Linux 6.2. By supplying a long string containing machine executable code at the prompt for a tape nam...

Bonza Cart <= 1.10 Admin Password Changing Exploit

No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...