eSyndiCat Portal System XSS Vuln.

eSyndiCat Portal System has an xss bug in search.php can be exploited from web interface http://www.example.com/path/search.php?what=xss&searchtop.x=0&searchtop.y=0&searchtop=GO -------------------- Discovered by meto5757 Rootshell Security Group...

MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Windows TCP/IP Protocol Driver Remote Buffer Overflow Exploit ================================================================ / Windows TCP/IP source routing poc C version... by...

MailEnable Enterprise Edition ASP Version <= 2.0

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disab...

acFTP FTP Server 1.4 - USER Remote Buffer Overflow (PoC)

acFTP FTP Server 1.4 - USER Remote Buffer Overflow PoC ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A"...

acFTP FTP Server <= 1.4 (USER) Remote Buffer Overflow PoC

No description provided by source. ===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl ip use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A" x 4700; if$ARGV0...

acFTP FTP Server 1.4 - 'USER' Remote Buffer Overflow (PoC)

===== acFtpd BoF Crash Exploit ===== There is a Buffer overflow at the USER command in acFtpd. Vuln found by: Preddy RootShell Security Group Usage: acdos.pl use IO::Socket; use Win32; use strict; my$i = ""; my$socket = ""; my $overflow = "A" x 4700; if$ARGV0 == "" print "\n"; print " ===== acFtp...

Invision Vulnerabilities, including remote code execution

Several Invision Flaws 2.1.5 and possibly earlier --------------------------------------------------- IceShaman & Wells HackThisSite.org 1 Code execution sources/actionpublic/search.php line 1261 $this-output = pregreplace "value="'$this-ipsclass-input'lastdate'"'i", "1 selected='selected'",...

mpg123 0.59r Malformed mp3 (SIGSEGV) Proof of Concept

Exploit for linux platform in category dos / poc ===================================================== mpg123 0.59r Malformed mp3 SIGSEGV Proof of Concept ===================================================== !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind ...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

mpg123 0.59r - Malformed .mp3 SIGSEGV PoC !/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug...

mpg123 0.59r - Malformed .mp3 (SIGSEGV) (PoC)

!/usr/bin/perl Affected product: mpg123-0.59r - http://mpg123.de I'm not sure what kind of vulnerability is it, but the program receives a SIGSEGV when I play it. My gdb skillz r p00r, but anybody with more experience than me can find the real bug. $./mpg1DoS3 0 | mpg123 - - switch tells mpg123 t...

qwikiXSS.txt

Software - QwikiWiki Version - v1.4 Type - XSS Vulnerability Powered by QwikiWiki v1.4 - www.qwikiwiki.com Examples: http://host/index.php?page=" http://host/index.php?page=" Found by Dr^Death of Suicide Scene Internet Security Group 2006...

QwikiWiki v1.4 XSS Vulnerability

Software - QwikiWiki Version - v1.4 Type - XSS Vulnerability Powered by QwikiWiki v1.4 - www.qwikiwiki.com Examples: http://host/index.php?page="body bgcolor="black"/body http://host/index.php?page="alertdocument.cookie;/script Found by Dr^Death of Suicide Scene Internet Security Group 2006...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

simpleBlogXSS.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

[SA18535] My Amazon Store Manager "q" Cross-Site Scripting Vulnerability

TITLE: My Amazon Store Manager "q" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18535 VERIFY ADVISORY: http://secunia.com/advisories/18535/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: My Amazon Store Manager 1.x http://secunia.com/product/6880/...

[SA18469] Netbula Anyboard "tK" Cross-Site Scripting Vulnerability

TITLE: Netbula Anyboard "tK" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18469 VERIFY ADVISORY: http://secunia.com/advisories/18469/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Netbula Anyboard 9.x http://secunia.com/product/2070/ DESCRIPTION:...

simpleBlog21.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

[SA18360] phpChamber "needle" Cross-Site Scripting Vulnerability

TITLE: phpChamber "needle" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18360 VERIFY ADVISORY: http://secunia.com/advisories/18360/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpChamber http://secunia.com/product/6761/ DESCRIPTION: Preddy has...

[SA18309] Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability

TITLE: Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18309 VERIFY ADVISORY: http://secunia.com/advisories/18309/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Next Generation Image Gallery 0.x...

[SA17240] MailSite Express Attachment Upload Vulnerability

TITLE: MailSite Express Attachment Upload Vulnerability SECUNIA ADVISORY ID: SA17240 VERIFY ADVISORY: http://secunia.com/advisories/17240/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MailSite 6.x http://secunia.com/product/5898/ DESCRIPTION: Soroush dalili has...