11989 matches found
SuperCheapCallSltd SQL Injection
| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: SuperCheapCallSltd admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : High Category:...
MySQL (Linux) - Heap Overrun (PoC)
MySQL Heap Overrun tested for the latest version of mysql server on a SuSE Linux system As seen below $edx and $edi are fully controlled, the current instruction is = 0x83a6b24 : mov %edx,%edi this means we landed in a place where 4 bytes can be controlled by 4 bytes with this function pointers a...
PayPal Community Forum Cross Site Scripting
Title: ====== Paypal Bug Bounty 27 - Community Web Vulnerability Date: ===== 2012-11-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=704 VL-ID: ===== 704 Common Vulnerability Scoring System: ==================================== 2.1 Introduction: ============= PayPal ...
CVE-2011-5370
This CVE entry is rejected/not used; reference CVE-2012-5370.
Wordfence Plugin for WordPress 'email' Parameter XSS
The version of the Wordfence plugin for WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'email' parameter in the lib/wordfenceClass.php script. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to execute...
linux/x86-64 bind-shell with netcat 131 bytes
; Title: Shellcode linux/x86-64 bind-shell with netcat ; Author : Gaussillusion ; Len : 131 byte ; Language : asm BITS 64 xor rdx,rdx mov rdi,0x636e2f6e69622fff shr rdi,0x08 push rdi mov rdi,rsp mov rcx,0x68732f6e69622fff shr rcx,0x08 push rcx mov rcx,rsp mov rbx,0x652dffffffffffff shr rbx,0x30...
MYRE Realty Manager - Multiple Vulnerabilities
MYRE Realty Manager - Multiple Vulnerabilities Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...
Multiple SQL Injection vulnerabilities in ClipBucket
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in ClipBucket, which can be exploited to perform SQL Injection attacks. 1 Multiple SQL Injections in ClipBucket: CVE-2012-5849 1.1 The vulnerability exists due to improper sanitation of input in multiple parameters within...
ZPanel 10.0.1 XSS / CSRF / SQL Injection
Exploit Title: ZPanel = 10.0.1 CSRF, XSS, SQLi, Password Reset Date: 04/11/2012 Exploit Author: pcsjj Vendor Homepage: http://www.zpanelcp.com/ Version: 10.0.1 Software Link: http://sourceforge.net/projects/zpanelcp/files/latest/download Downloads: 90,382 CVE : CVE-2012-5683 CSRF, CVE-2012-5684...
CVE-2012-4485
The CVE concerns the Drupal Gallery formatter module prior to 7.x-1.2, specifically the galleryformatter_field_formatter_view function in galleryformatter.tpl.php. The vulnerability arises from multiple XSS flaws that allow remote authenticated users with node/entity creation permissions to injec...
Zoho ManageEngine Security Manager Plus Multiple Vulnerabilities
This host is running Zoho ManageEngine Security Manager Plus and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmanageenginesecmangrplusmultvuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Zoho ManageEngine Security Manager Plus Multiple Vulnerabilities Authors: Antu Sanadi...
TECNO DYNAMICS - Sql injection / Local File Include Vulnerabilities
Exploit for php platform in category web applications Exploit Title: TECNO DYNAMICS - SQL INJECTION & LFI Date: 08/10/2012 Author: k2ll33d Vendor : http://www.tecnoglobal.com/ Version: N/A Category: webapps Google dork: "inurl:templatehome.php4 intext:Todos los Derechos Reservados" vuln: SQLI...
MyBB Remote Command Execution
No description provided by source. Exploit Title : Mybb All Versions Remote Command Execution Author : Nafsh Discovered By : Tapco Security & Research Lab Date : 3 Oct 2012 Home : http://Sec-Lab.Tap-Co.Net Contact : [email protected] Source : http://www.mybb.com/download/latest file :...
KeyWorks KeyHelp ActiveX Control Multiple Vulnerabilities
The remote host has KeyWorks KeyHelp ActiveX control installed, which is affected by multiple vulnerabilities : - Multiple stack-based buffer overflows exist that could allow an attacker to execute arbitrary code. CVE-2012-2515 - An unspecified command injection vulnerability. CVE-2012-2516 C...
Auxilium RateMyPet Arbitrary File Upload
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Auxilium RateMyPe...
Empire cms the latest version of the background to get webshell method-vulnerability warning-the black bar safety net
Don't know who did the hair too. Anyway yesterday I get a station of their own. Must share out it!!!! Due to my day that Station is the Empire cms 6.6 the latest version, so the Internet to find some of the methods are failure! Custom pages-added custom page-feel free to write a xxx. php file nam...
Thomson Wireless VoIP Cable Modem - Authentication Bypass
Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated Backup File Access, Plaintext Protocol...
[SECURITY] Fedora 18 Update: qemu-1.2.0-3.fc18
QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...
The hospital was built Station system arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
| Vulnerability file: upfile. aspx I first posted 9 8 line to 1 3 0 lines of code out ,look a bit funny! Google for: inurl:cms/Column. aspx? that inurl:cms/Column. aspx? LMID= too much,your own to find more keywords! | 0 1 | ---|--- 0 2 | function chkform ---|--- 0 3 | ---|--- 0 4 | ---|--- 0 5 |...