2328 matches found
Internet Explorer 'winhlp32.exe' 'MsgBox()' Remote Code Execution Vulnerability
No description provided by source. Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context of the user running the application...
cpcommerce 1.1.0 (xss/lfi) Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: cpCommerce Multiple Vulnerabilities Vendor: http://cpcommerce.cpradio.org Bugs: XSS, SQL Injection , Local File Inclusion Vulnerable Version: 1.1.0 prior versions also may be affected Exploitation: Remote...
Safari 4.0.5 - parent.close() Memory Corruption exploit (ASLR and DEP bypass)
No description provided by source. Download: http://www.exploit-db.com/sploits/safariparentclosesintsov.zip Unzip and run START.htm This exploit use JIT-SPRAY for DEP and ASLR bypass. jit-shellcode: systemnotepad 0day.html - use 0x09090101 address for CALL JITed shellcode. START.htm - iff.htm -...
phpStat <= 1.5 (setup.php) Authentication Bypass Exploit (php 2)
No description provided by source. ? / PHP Stat Administrative User Authentication Bypass POC Exploit Code by Nikyt0x - Soulblack Security Research Advisory: http://www.soulblack.com.ar/repo/papers/phpstatadvisory.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, SWP,...
Active Photo Gallery 6.2 - (Auth Bypass) Remote SQL Injection
No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.activewebsoftwares.com ? ? Software: Active Photo Gallery v 6.2 ? ? author: R3d-D3v!L ? ? Date: 17.dec.2009 ?...
TCP-IP Datalook <= 1.3 - Local Denial of Service Exploit
No description provided by source. / IP-DATALOOK Local DoS Exploit --------------------------------- INFGP - Hacking&security Research Resolve host...OK + Connecting...OK Target locked Sending bad procedure...OK Server Disconnected! Tested on Windows2000 SP4 Infos: infamous.2hell.com /...
Alteon OS BBI (Nortell) - Multiple Vulnerabilities XSS and CSRF
No description provided by source. Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: = 21.0.8.3 and may be higher =25.1.0.0 Tested on: relevant os Code : exploit code From: DSecRG research dsecr...
Oracle Document Capture 10.1.3.5 Insecure Method / Buffer Overflow
No description provided by source. Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Document Capture Versions Affected:...
Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure Vulnerability
No description provided by source. Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download...
Intruder Client 1.00 Remote Command Execution & DoS Exploit
No description provided by source. !/usr/bin/perl Intruder Command Execution DOS Exploit -------------------------------------- Infam0us Gr0up - Securiti Research ? Version: libwww-perl-5.76 + Connecting to 127.0.0.1.. + Connected + Backup for files..DONE + Build malicious pages..DONE + Open CDRo...
Linux Kernel <= 2.6.36-rc8 - RDS Protocol Local Privilege Escalation
No description provided by source. //source: http://www.vsecurity.com/resources/advisory/20101019-1/ / Linux Kernel = 2.6.36-rc8 RDS privilege escalation exploit CVE-2010-3904 by Dan Rosenberg [email protected] Copyright 2010 Virtual Security Research, LLC The handling functions for sendin...
Baby Web Server <= 2.6.2 Command Validation Exploit
No description provided by source. !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web Server --...
IBM Bladecenter Management - Multiple web application vulnerabilities
No description provided by source. DSECRG-09-054 IBM Bladecenter Management - Multiple vulnerabilities The BladeCenter management module is prone to multiple security vulnerabilities: Unauthorized Access, Directory Listing, XSS Digital Security Research Group DSecRG Advisory DSECRG-09-054...
OSSIM 2.1 - SQL Injection and xss
No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...
elkagroup Image Gallery 1.0 - Arbitrary File Upload Vulnerability
No description provided by source. Securitylab.ir Application Info: Name: elkagroup Image Gallery Dork: elkagroup - Image Gallery v1.0 - All right reserved Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type:...
phpMyFamily <= 1.4.0 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w phpMyFamily Exploit injection ============================== $banner = phpMyFamily Exploit injection \n\n============================== \n\nINFGPG-Hacking&Security Research; Greats: AresU 1st IndoSec Team,ADZ Security Team has discovered bugs...
RechnungsZentrale V2 <= 1.1.3 - Remote Inclusion Vulnerability
No description provided by source. - GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion:...
PHP Live! <= 3.2.1 (help.php) Remote Inclusion Vulnerability
No description provided by source. Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact: aneurysmincathotmaildotc...
HB CMS 1.7 - SQL Injection
No description provided by source. Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork...
w3blabor CMS 3.0.5 - Arbitrary File Upload & LFI Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research...