AIX 530010 : U838224

The remote host is missing AIX PTF U838224 which is related to the security of the package devices.common.IBM.ethernet.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

WordPress Comment Rating Plugin 2.9.23 - Multiple Vulnerabilities

There are several vulnerabilities in this plugin. First vulnerability type is path disclosure. The issue exists due to failure in the "/wp-content/plugins/comment-rating/comment-rating-options.php" script. There is possible to generate an error which will disclose the full path of the script. In...

FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: email protected, email protected, Sunlight Software Link: http://itunes.apple.com/kr/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Version: 1....

iOS FtpDisc 1.0 - Directory Traversal

Exploit Title: FtpDisc v1.0 for iPhone / iPod touch, Directory Traversal Date: 02/22/2011 Author: R3d@l3rt, Sp@2K, Sunlight Software Link: http://itunes.apple.com/kr/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Version: 1.0 Tested on: iPhone, iPod 3GS with 4.2.1 firmware There is directory...

ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability

ZDI-11-085: Oracle Java XGetSamplePtrFromSnd Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-085 February 15, 2011 -- CVE ID: CVE-2010-4462 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Oracle -- Affected Products: Oracle Java Runtime --...

ZDI-11-040: Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability

ZDI-11-040: Microsoft Office Excel 2003 Invalid Object Type Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-040 February 7, 2011 - This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. To view mitigations...

tudou.com UTF7-BOM Cross Site Scripting

xss attacks through utf7-BOM string injection the beginning of the utf-7 BOM chascter is from Gareth Heyes's paper 《XSS Lightsabre techniques》 ---------------------start---------------------------------- CSS expressions with UTF-7 • UTF-7 BOM character can force UTF-7 in a external style sheet •...

Terminal Server Client Denial Of Service

!/usr/bin/perl Exploit Title: Terminal Server Client .rdp Dos Date: 2011-02-01 Author: D3V!L FUCKER Software Link: sudo apt-get install tsclient ^^ Version: All Version Tested on: ubuntu 10.10 press to open then chois the T-T34M.rdp file then connect ^^ C0d3d By : SarBoT511 XD print q 4bdull4h@w....

NetLink Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ====================================== NetLink Remote Arbitrary File Upload Vulnerability Download: http://sourceforge.net/projects/kp-netlink/ by lumut-- Homepage: lumutcherenza.biz ====================================== upload.php "; echo ""...

NetLink - Arbitrary File Upload

====================================== NetLink Remote Arbitrary File Upload Vulnerability Download: http://sourceforge.net/projects/kp-netlink/ by lumut-- Homepage: lumutcherenza.biz ====================================== upload.php "; echo ""; echo "Filename: ".$filename; echo "File Type:...

AOL 9.5 (rtx) Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Bug : AOL 9.5 rtx Local Buffer Overflow Exploit by sup3r Tested on : XP SP3 header1 = "\x3c\x48\x54\x4d\x4c\x3e\x3c\x46\x4f\x4e\x54\x20\x20\x53\x49\x5a" "\x45\x3d\x32\x20\x50\x54\x53\x49\x5a\x45\x3d\x31\x30\x20\x46\x41"...

Apache Axis2 code execution

Default account...

PHP Link Directory Software - sbcat_id SQL Injection

PHP Link Directory Software - sbcatid SQL Injection == |Author: BorN To K!LL - h4ck3r |Contact: [email protected] == |Script: PHP link Directory software |Version: n/a |Link: http://www.softbizsolutions.com/php-link-directory-software.php == |3xploit: path/showcats.php?sbcatid=SQL-Injection...

PHP Classified Ads Software Blind SQL Injection

== -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample: path/browsecats.php?cid=2 and substringversion,1,1=...

Multiple Web Applications | Full Path Disclosure

The following web applications are found to have full path disclosure flaws Ref: WASC-13, CWE-200. ----------------------------------------- htmlpurifier-4.2.0 phpids-0.6.5 PhpSecInfo 111WebCalendar-1.2.3 adodb aef-1.0.8 ATutor-2.0 auth b2evolution-3.3.3 bbpress-1.0.2 cftp-r80 claroline-1.9.7...

comercioplus 5.6 - Multiple Vulnerabilities

comercioplus 5.6 - Multiple Vulnerabilities Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link:...

comercioplus 5.6 - Multiple Vulnerabilities

Exploit Title: Comerciosonline CMS SQLi Google Dork: allintext: " Servicio ofrecido por ComerciosOnLine " Date: 27/01/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software Link: http://www.comerciosonline.com/index.php?p=8...

PHP Coupon Script 6.0 - bus Blind SQL Injection

PHP Coupon Script 6.0 - bus Blind SQL Injection == |Script: PHP Coupon Script |Version: 6.0 |Dork: "PHP Coupon Script v. 6.0" |Link: http://www.couponscript.com == |Author: BorN To K!LL - h4ck3r |Contact: [email protected] == |3xploit: /index.php?page=viewbus&bus=Blind-Injection |3xample:...

bsd/x86 - portbind + fork shellcode (111 bytes)

Exploit for bsd/x86 platform in category shellcode / -------------- FreeBSD/x86 - portbind shell + fork 111 bytes-------------------- AUTHOR : Tosh OS : BSDx86 Tested on FreeBSD 8.1 EMAIL : email protected / include include include char shellcode =...

Apache HTTPD mod_negotiation Filename Bruter

This module performs a brute force attack in order to discover existing files on a server which uses modnegotiation. If the filename is found, the IP address and the files found will be displayed. This module requires Metasploit: https://metasploit.com/download Current source:...