Orbis CMS 1.0.2 - Arbitrary File Upload

'Orbis CMS' Arbitrary Script Execution Vulnerability CVE-2010-4313 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Orbis CMS' filemanfileupload.php script that allows any authenticated user to upload a PHP script and...

Jurpopage 0.2.0 SQL Injection

========================================================= Jurpopage SQL Injection ========================================================= Exploit Title : Jurpopage SQL Injection Date : 24 Noveber 2010 Author : Suddendeath [email protected] Platform/Tested on: Windows XP 2 SP 2 myweb :...

Apache Tomcat 7.0.4 - sort orderBy Cross-Site Scripting

Apache Tomcat 7.0.4 - sort orderBy Cross-Site Scripting source: https://www.securityfocus.com/bid/45015/info Apache Tomcat is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrar...

Major Facebook Pages Compromised by Sendible App Bug

We've received several rapid-fire tips indicating a major compromise in the Facebook app Sendible. Several prominent Facebook Pages, including Google, Coca-Cola, YouTube, South Park, The Daily Show, and Team Coco, are sending out a malicious link to their followers. The link reads, "Change Your...

Qtweb Browser 3.5 Buffer Overflow

Title: Remote Buffer Overflow Qtweb Browser 3.5 Software:http://www.qtweb.net/downloads/QtWeb-setup.exe Portable Software:http://www.qtweb.net/downloads/QtWeb.exe Version: 3.5 Tested on: Windows Author: PoisonCode Published: 2010-11-10 CVE-ID: | \ / | | | | | | | | / \ \ / / | | | | '| | | | | | ...

XT:Commerce < 3.04 SP2.1 - Cross-Site Scripting

---------------------------------------------------------------------------------- Cross-Site-Scripting XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be executed. By getting the cookie of the admin, the...

D-Link DIR-300 Authentication Bypass

\n"; exit; $ch=curlinit; curlsetopt$ch, CURLOPTURL, "http://".$argv1."/toolsadmin.php"; curlsetopt$ch, CURLOPTRETURNTRANSFER, true; curlsetopt$ch, CURLOPTPORT, $argv2; curlsetopt$ch, CURLOPTPOST, 1; curlsetopt$ch,...

Linux Kernel 2.4.0 - Stack Infoleaks

//Enjoy... // //-Dan / You've done it. After hours of gdb and caffeine, you've finally got a shell on your target's server. Maybe next time they will think twice about running MyFirstCompSciProjectFTPD on a production machine. As you take another sip of Mountain Dew and pick some of the cheetos o...

Angel LMS 7.3 Cross Site Scripting

I have discovered a security exploit in Angel LMS 7.3 "Colleges and universities worldwide choose the ANGEL LMS to deliver powerful online teaching and learning experiences. ANGEL provides the comprehensive LMS features institutions need in a simple interface that promotes adoption. A recognized...

Speak Aloud DLL Hijacking Exploit (dwmapi.dll)

Exploit for windows platform in category local exploits ============================================== Speak Aloud DLL Hijacking Exploit dwmapi.dll ============================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Radio Free TV for PC DLL Hijacking Exploit

Exploit for windows platform in category local exploits ========================================== Radio Free TV for PC DLL Hijacking Exploit ========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation

Linux Kernel 2.6.36-rc8 - RDS Protocol Local Privilege Escalation // source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel Copyright 2010 Virtual Security Research, LLC The handling functions for sending and receiving RDS messages use unchecked copyuserinatomic functions...

Wiki Web Help &lt;= 0.3.3 Insecure Cookie Handling

No description provided by source. =============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software:...

Gmail JSON Hijacking Proof Of Concept

Gmail Thief by 80vul.com @import url"http://www.google.com/igrestore"; function showMailgt var w = document.styleSheets0.imports1.cssText; var re = new RegExp"accountidx3d.+?""; var reRes = re.execw; if reRes document.getElementById"whom".innerText = reRes1; var e =...

BS.Player 2.56 - .m3u .pls File Processing Multiple Remote Denial of Service Vulnerabilities

BS.Player 2.56 - .m3u .pls File Processing Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/43502/info BS.Player is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issues to cause an affected application to crash...

BlackBerry Cross Origin Bypass

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + BlackBerry Browser Cross Origin Bypass + Author : 599eme Man + Contact : [email protected]...

WAnewsletter v 2.1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-D...

A-PDF All To MP3 Coverter 1.1.0 Universal Exploit

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

NWS-Classifieds - 'cmd' Local File Inclusion

source: https://www.securityfocus.com/bid/43259/info NWS-Classifieds is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local...

Acoustica MP3 Audio Mixer 2.471 - Extended .M3U Directives (SEH)

Exploit Title: Acoustica MP3 Audio Mixer 2.471 Extended M3U directives SEH Date: September 8 2010 Author: Carlos Hollmann Software Link: http://www.acoustica.com/downloading.asp?p=1 Version: 2.471 Tested on: Windows xp sp3 running on VMware Fusion 3.1 and VirtualBox 3.2.8 CVE : / / / | | / / / | ...