3110 matches found
Browser Navigation Download Trick
No description provided by source. Another moderately interesting tidbit, I guess... It is an important and little-known property of web browsers that one document can always navigate other, non-same-origin windows to arbitrary URLs. Perhaps more interestingly, you can also navigate third-party...
Netkamp Emlak Scripti Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25875/info Netkamp Emlak Scripti is prone to multiple input-validation vulnerabilities, including multiple HTML-injection issues and an SQL-injection issue, because the application fails to sanitize user-supplied input. A...
Safari 4.0.3 & 4.0.4 Stack Exhaustion
No description provided by source. script //Written by: Fredrik Nordberg Almroth //URL: http://h.ackack.net/ //Affected: Safari 4.0.3 & 4.0.4 - Other versions might be vulnerable aswell. a=scriptvar b=\iframe src='javascript:window.location=\boom'/iframe;while1b=b+b;document.writeb;/scr+ipt;...
Now SMS/MMS Gateway 5.5 - Remote Buffer Overflow Exploit
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Now SMS/MMS Gateway v5.5 and others ---------------------------------------- Exploit : Now SMS/MMS Gateway v5.5 Remote Buffer Overflow Exploit Exploit date : 14.04.2008 Exploit writer : Hereti...
SnackAmp 3.1.3B - SMP Buffer Overflow Vulnerability (SEH - DEP BYPASS)
No description provided by source. Exploit Title: SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH - DEP BYPASS Date: 09/24/10 Author: Muhamad Fadzil Ramli - mind1355 AT gmail DOT com Credit/Bug Found By: james AT learnsecurityonline DOT com Software Link:...
TheHostingTool 1.2.2 - Multiple CSRF Vulnerabilities
No description provided by source. !--- Title: TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Creat...
falcon cms 1.4.3 (rfi/xss) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
awzMB <= 4.2 beta 1 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip Author : S.W.A.T...
Job Site 1.0 - Multiple Vulnerabilities
No description provided by source. Jobsite logo - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...
SAMBA 2.0.7 SWAT Symlink Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1872/info The Samba software suite is a collection of programs that implements the SMB protocol for unix systems, allowing you to serve files and printers to Windows, NT, OS/2 and DOS clients. This protocol is sometimes...
YeaLink IP Phone SIP-TxxP firmware <= 9.70.0.100 - Multiple Vulnerabilities
No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : YeaLink IP Phone SIP-TxxP firmware =9.70.0.100 Multiple Vulnerabilities Date : 12-21-2012 Author : xistence...
SimpleGallery 0.1.3 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26585/info SimpleGallery is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue allows attackers to execute arbitrary HTML or script code in a...
webMethods Glue <= 6.5.1 Console Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23423/info webMethods Glue is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...
SoapUI 4.6.3 - Remote Code Execution
No description provided by source. Exploit Title: SoapUI Remote Code Execution Date: 25.12.13 Exploit Author: Barak Tawily Vendor Homepage: http://www.soapui.org/ http://www.soapui.org/ Software Link: http://www.soapui.org/Downloads/download-soapui-pro-trial.html...
XOOPS 1.0 RC3 HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5785/info Problems with XOOPS could make it possible to execute arbitrary script code in a vulnerable client. XOOPS does not sufficiently filter potentially malicious HTML code from posted messages. As a result, when a us...
NetcPlus SmartServer 3.5.1 SMTP Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/632/info There is a buffer overflow on the SmartServer3 SMTP service long MAIL FROM: that may allow an intruder to execute arbitrary code on the target server. 1 @Work SmartServer3...
2X ThinClientServer 5.0 sp1-r3497 TFTP Service - Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28504/info 2X ThinClientServer is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue allows an attacker to access arbitrary files outside...
Jokes Complete Website results.php searchingred Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute...