ViArt Shop 4.0.5 - Cross-Site Request Forgery

+-------------------------------------------------------------------------+ Software : viart shop 4.0.5 Author : Or4nG.M4N Date : n/a Dork : inurl:"powered by viart shop 4.0.5" Software Link : http://www.viart.com/ +-------------------------------------------------------------------------+...

CompactCMS 1.4.1 Cross Site Scripting / File Disclosure

Exploit Title: CompactCMS 1.4.1 Multiple Vulnerabilities Google Dork: intext:"Maintained with CompactCMS.nl" intitle:"Print: " Date: 17-12-2010 Author: NLSecurity Software Link: http://files.compactcms.nl/stable/ Version: CompactCMS 1.4.1 Credits: http://www.nlsecurity.org/ Extra: irc.6667.eu mai...

openSite v0.2.2 beta Local File Inclusion Vulnerbility

Exploit for php platform in category web applications opensite-v0.2.2-beta === Local File Include vuln By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/contentone/files/openSite/opensite-v0.2.2-beta/opensite-v0.2.2-beta.zip/download...

CVE-2010-4538

Buffer overflow in the sectenttecdmxda function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted ENTTEC DMX packet with Run Length Encoding RLE compression...

PolyVision RoomWizard insecurely stores Sync Connector Active Directory credentials and uses default administrative password

Overview The PolyVision RoomWizard web based scheduling system with touch screen display contains two vulnerabilities that allow an unauthorized user to access the device console and Sync Connector Active Directory credentials. Description The PolyVision RoomWizard is a touch screen scheduling...

Nucleus v3.61 Multiple Remote File Include

Exploit for php platform in category web applications Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y...

Sahana Agasti <= 0.6.4 Multiple Remote File Inclusion

Exploit for php platform in category web applications Sahana Agasti = 0.6.4 Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Script site: http://www.sahanafoundation.org/ Download: https://launchpad.net/sahana-agasti/ Bug: 25 global $global; 26...

Calibre Cross Site Scripting and Directory Traversal Vulnerabilities

Calibre is prone to a cross-site scripting vulnerability and a directory- traversal vulnerability because it fails to sufficiently sanitize user- supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Sahana Agasti 0.6.4 Remote File Inclusion

Sahana Agasti = 0.6.4 Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Script site: http://www.sahanafoundation.org/ Download: https://launchpad.net/sahana-agasti/ Bug: 25 global $global; 26 requireonce$global'approot'.'inc/libsecurity/libacl.inc'; 27...

Sahana Agasti 0.6.4 - Multiple Remote File Inclusions

Sahana Agasti 0.6.4 - Multiple Remote File Inclusions Sahana Agasti = 0.6.4 Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Script site: http://www.sahanafoundation.org/ Download: https://launchpad.net/sahana-agasti/ Bug: 25 global $global; 26...

Microsoft Windows - Class Handling (MS10-073)

Microsoft Windows - Class Handling MS10-073 include / Source: http://mista.nu/blog/2010/12/01/windows-class-handling-gone-wrong/ / int mainint argc, char argv WNDCLASSA Class = 0; CREATESTRUCTA Cs = 0; FARPROC MenuWindowProcA; HMODULE hModule; HWND hWindow; Class.lpfnWndProc = DefWindowProc;...

amoeba CMS 1.01 - Multiple Vulnerabilities

!/usr/bin/python """ Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the web application. In one particular SQLi the...

IrfanView 4.27 - JP2000.dll plugin DoS

Exploit for windows platform in category dos / poc done by BraniX www.hackers.org.pl found: 2010.08.18 published: 2010.12.27 tested on: Windows XP SP3 Home Edition App: IrfanView 4.27 DoS, Integer division by zero in module JPEG2000.dll iview32.exe MD5: 58150C1AC5B86C1A6B5E15FE1C3A870D JPEG2000.d...

Iran's Intelligence Minister Admits to Hacking Opposition Emails

Iran's Intelligence Minister, Heydar Moslehi, has publicly admitted to hacking the emails of opposition members. Iranian news agencies, including ILNA, quoted Moslehi stating that emails were the primary communication tool for opposition members during last year's postelection protests. The...

Web@All 1.1 Remote Admin Settings Change Exploit

=========================================== Web@all Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: web@all 1.1 web@all is a CMS which is not similar to general CMS, you can build it easyly by yourself...

OpenAuto 1.6.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...

iDevSpot iDevCart 1.0 Local File Inclusion

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- iDevSpot...

Microsoft WMI Administrative Tools WBEMSingleView.ocx ActiveX control vulnerability

Overview The ActiveX control, WBEMSingleView.ocx, that is a part of the WMI Administrative Tools package contains a vulnerability. Description The AddContextRef and ReleaseContext functions of the WMI Object Viewer control can be passed an object pointer from an attacker that results in arbitrary...

ViRobot Desktop 5.5 / Server 3.5 Privilege Escalation

Hauri ViRobot Desktop 5.5 & ViRobot Server 3.5 VRsecos.sys =2008.8.1.1 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS Hauri ViRobot Desktop 5.5 and below Hauri ViRobot Server 3.5 and below DETAILS: VRsecos.sys create a device called...

Easy Online Shop SQL Injection

----------------------------Information------------------------------------------------ +Name : Easy Online Shop = SQL injection Vulnerability Proof of Concept +Autor : Easy Laster +Date : 17.12.2010 +Script : Easy Online Shop +Vendor : http://www.mhproducts.de/ +Price : 8,90 € +Language : PHP...