3227 matches found
TextAds 2.08 Script Cross Site Scripting Vulnerability
No description provided by source. =========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting...
WordPress ProPlayer Plugin 4.7.9.1 - SQL Injection
No description provided by source. Exploit Title : WordPress ProPlayer Plugin SQL Injection Exploit Author : Ashiyane Digital Security Team Plugin Link : http://wordpress.org/plugins/proplayer/ Home : www.ashiyane.org Security Risk : High Version : 4.7.9.1 Dork :...
Joomla Component QuickTime VR 0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Joomla Component QuickTime VR v 0.1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers ComponentName: QuickTime VR...
Power Tab Editor 1.7 (Build 80) - Buffer Overflow
No description provided by source. Exploit Title : Power Tab Editor v1.7 Build 80 Date : 07/06/2010 Author : Sud0 Bug found by : Sud0 Software Link : http://www.power-tab.net/guitar.php Version : v1.7 Build 80 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thanks to my wif...
Irola My-Time 3.5 - Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...
Axous 1.1.0 - SQL Injection Vulnerabilitiy
No description provided by source. Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected]...
SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass
No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...
PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...
TSguestbook 2.1 Message Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, an...
eZip Wizard 3.0 (.zip) SEH
No description provided by source. !/usr/bin/perl Software : eZip Wizard 3.0 .zip Author : Lincoln & corelanc0d3r Discovered by : fl0 fl0w Reference : http://www.exploit-db.com/exploits/8180 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team & fl0...
QuickZip 4.x (.zip) 0day Local Universal Buffer Overflow PoC Exploit
No description provided by source. !/usr/bin/python Exploit Title : QuickZip 4.x .zip 0day Local Universal Buffer Overflow PoC Exploit Date : 9/3/2010 Author : corelanc0d3r & mrme Bug found by : corelanc0d3r http://corelan.be:8800/ Software Link : http://www.quickzip.org/downloads.html Version :...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
No description provided by source. ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host=localhost; $path=/phpnuke/; $prefix=nuke; $port=80; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data=query=fooaa&eid=foo'//UNION SELECT pwd as title FR...
Audiotran 1.4.2.4 SEH Overflow Exploit
No description provided by source. Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
Harpia CMS <= 1.0.5 - Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------- Harpia CMS = 1.0.5 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remote : Ye...
cutenews aj-fork <= 167f (cutepath) Remote File Include Vulnerability
No description provided by source. =========================================================================================================== DeltasecurityTEAM www.Deltasecurity.ir =========================================================================================================== Portal...
SyncBack Freeware 3.2.20.0
No description provided by source. !/usr/bin/ruby Software : SyncBack Freeware V3.2.20.0 Author : Lincoln Date : May 19, 2010 Reference : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-041 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team...
Wordpress page-flip-image-gallery plugins Remote File Upload
No description provided by source. Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...
Wordpress Lazy SEO plugin 1.1.9 - Shell Upload Vulnerability
No description provided by source. Exploit Title : Wordpress Lazy SEO plugin Shell Upload Vulnerability Exploit Author : Ashiyane Digital Security Team Google Dork: : inurl:/wp-content/plugins/lazy-seo/ Date: 2013/09/21 Vendor Homepage : http://wordpress.org/plugins/lazy-seo Software Link :...
DodosMail <= 2.0.1 (dodosmail.php) Remote File Include Vulnerability
No description provided by source. --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- DodosMail = 2.0.1dodosmail.php Remote File Include...
ZipCentral (.zip) SEH Exploit
No description provided by source. !/usr/bin/python Title: ZipCentral .zip SEH exploit Author: TecR0c - http://tecninja.net/blog & http://twitter.com/TecR0c Download: http://downloads.pcworld.com/pub/new/utilities/compression/zcsetup.exe Platform: Windows XP sp3 En VMWARE Greetz to: Corelan...