Limny v2.0 Change Email and Password CSRF Exploit

Exploit for unknown platform in category web applications ================================================= Limny v2.0 Change Email and Password CSRF Exploit ================================================= /????????????????????????????\ :Limny 2.0 Change Pass CSRF : / /Discovered By: \ |Luis...

Limny 2.0 - Cross-Site Request Forgery (Change Email and Password)

Limny 2.0 - Cross-Site Request Forgery Change Email and Password /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ :Limny 2.0 Change Pass CSRF : / /Discovered By: \ |Luis Santana | / Overview ¯¯¯¯¯¯¯¯¯¯ The Limny 2.0 CMS is vulnerable to a Cross-Site-Request Forgery exploit which allows for a malicious attacker to...

Limny 2.0 - Cross-Site Request Forgery (Create Admin User)

Limny 2.0 - Cross-Site Request Forgery Create Admin User /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ :Limny 2.0 CSRF : / /Discovered By: \ |Luis Santana | / Overview ¯¯¯¯¯¯¯¯¯¯ The Limny 2.0 CMS is vulnerable to a Cross-Site-Request Forgery exploit which allows for a malicious attacker to create their own...

blog ink - Bypass Setting

======================================================================================== | Title : blog ink By Pass Setting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : powered by blog ink | Dork : Powered by PHP Melody 1.5.3 | Teste...

SOMPL Player Buffer Overflow

Exploit for unknown platform in category local exploits ============================ SOMPL Player Buffer Overflow ============================ Exploit Title : SOMPL Player Buffer Overflow Date : 20 January 2010 Author : Rick2600 Software Link :...

SOMPL Player 1.0 - Local Buffer Overflow

Exploit Title : SOMPL Player Buffer Overflow Date : 20 January 2010 Author : Rick2600 ricks2600atgmaildotcom Bug found by : Rick2600 ricks2600atgmaildotcom Software Link : http://www.softpedia.com/progDownload/SOMPL-Download-144999.html Version : 1.0 Issue fixed in: ??? OS : Windows Tested on : X...

Google SketchUp 7.1.6087 Memory Corruption

!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...

Google SketchUp 7.1.6087 - 'lib3ds' 3DS Importer Memory Corruption

!/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download: http://download.cnet.com/Google-SketchUp/3000-66774-11097712.html Greetz to: Corelan Security...

Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption

Google SketchUp 7.1.6087 - lib3ds 3DS Importer Memory Corruption !/usr/bin/python Google SketchUp = v7.1.6087 'lib3ds' 3DS Importer Memory Corruption Code by: mrme Found by Corelabs Advisory: http://www.coresecurity.com/content/google-sketchup-vulnerability Download:...

TurboFTP Server 1.00.712 - Remote Denial of Service

TurboFTP Server 1.00.712 - Remote Denial of Service Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe...

TurboFTP Server 1.00.712 Denial Of Service

Exploit Title : TurboFTP Server 1.00.712 Remote DoS Date : 30 december 2009 Author : corelanc0d3r corelanc0d3ratgmaildotcom Bug found by : corelanc0d3r corelanc0d3ratgmaildotcom Software Link : http://www.tbsoftinc.com/download/tbftpsrv.exe Version : 1.00.712 Issue fixed in: 1.00.720 OS : Windows...

iPhone / iPod - Udisk FTP Basic Edition Remote 0day DoS Exploit

Exploit for unknown platform in category dos / poc =================================================================== Apple iPhone/iPod - Udisk FTP Basic Edition Remote 0day DoS Exploit ===================================================================...

iOS Udisk FTP Basic Edition - Remote Denial of Service

!/usr/bin/python Apple Iphone/Ipod - Udisk FTP Basic Edition Remote 0day DOS exploit Found by: Steven Seeley mrme seeleymagic at hotmail dot com Homepage: http://6tags.com/n/ Price: $4.99 Download: From the app store use your itunes account Tested on: Iphone 3G - firmware 3.1.2 Darwin kernel Gree...

Drupal 6.15 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Title: 0day Drupal = 6.15 Multiple Permanent XSS Date: 07 01 2009 Author: Emanuele 'emgent' Gentili Software Link: http://ftp.drupal.org/files/projects/drupal-6.15.tar.gz Version: Drupal = 6.15 CVE : N/A Code : http://www.backtrack.it/emgent/exploits/DrupalMultiplePermanentXss-20090107.tx...

CentOS 5 : kernel (CESA-2008:0885)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CentOS 5 : udev (CESA-2009:0427)

Updated udev packages that fix one security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. udev provides a user-space API and implements a dynamic device directory, providing only the...

CentOS 5 : kernel (CESA-2009:1222)

Updated kernel packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux operating...

Up,Phpaw,05 XSS / Shell Upload

======================================================================================== | Title : Up,Phpaw,05 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 4 | High : 4 |...

X7CHAT 1.3.6b - Arbitrary Add Admin

X7CHAT 1.3.6b - Arbitrary Add Admin + Author : d4rk-h4ck3r + Email : [email protected] + Site : www.vbspiders.com/vb + Team : Tunisian Security TeaM + Dork : powered by x7 chat 1.3.6b Exploit-DB Notes Vendor has already addressed this issue and even provided a solution in Docs/INSTALL.txt: "After finishi...

Quick Player v1.2 Unicode Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================= Quick Player v1.2 Unicode Buffer Overflow Exploit ================================================= Title: Quick Player v1.2 Unicode Buffer Overflow Exploit CVE-ID: OSVDB-ID: Author: mrme...