1270 matches found
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007...
Cisco IOS 11.x/12.0 ICMP Redirect Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4786/info IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. It has been reported that it is possible to cause a denial of service in some Cisco routers by sending a...
Exim Sender 3.35 Verification Remote Stack Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail...
HTML Creator & Sender <= 2.3 build 697 Local BOF Exploit (SEH)
No description provided by source. !/usr/bin/env python HTML Creator & Sender = v2.3 Build 697 Local Buffer Overflow Exploit SEH Coded By: DrIDE Based On: http://www.milw0rm.com/exploits/9446 Testd On: Windows XP SP2 Download: http://www.html-email.net/ Usage: Browse to file, enter anything for...
HTML Email Creator & Sender 2.3 - Local Buffer Overflow PoC (SEH)
No description provided by source. /0day HTML Email Creator & Sender v2.3 Local Buffer OverflowSeh Poc Debugging info Seh handler is overwriten , the offset is at 60 bytes in our buffer so you have to build your buffer as follows: PONTER TO NEXT SEH-------SEH HANDLER----NOP------SHELLCODE | | | |...
Form Sender 1.0 Processform.PHP3 Failed Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14326/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...
FForm Sender 1.0 Processform.PHP3 Name Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14324/info A cross-site scripting vulnerability affects Form Sender. This issue is due to a failure of the application to properly sanitize user-supplied URI input that will be output in dynamically generated Web pages...
SEES (Social Enginnering Email Sender) - A Social Engineering Attack/Audit Tool for Spear Phishing
What is SEES? Most of the companies nowadays have their firewalls, threat monitoring and prevention security appliances setup. With these mechanisms in place, security precautions are taken and incidents are monitored. Inbound traffic being restricted, SEES on the other hand is developed for...
[EMS] E-mail Spoofer
E-mail Spoofer is a tool designed for penetration testers who need to send phishing e-mails. It allows to send mails to a single recipient or a list, it supports plain text/html email formats, attachments, templates and more… Features Support for Plain text and HTML E-mail Templates Spoofing Send...
Wordpress WP Realty Plugin - eMail Sender Vulnerability
Exploit Title: Wordpress - wp-realty - eMail Sender Google Dork: inurl:"/wp-content/plugins/wp-realty/" Vendor: http://wprealty.org/ Date: 10/08/2013 Exploit Author: Napsterakos Link: http://localhost/wp-content/plugins/wp-realty/ Exploit:...
Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013
Medium Alert ID: 31173 First Published: 2013 October 9 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a bank payment information for the recipient. The text in the email message attempts to convince the recipient...
Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS
Opolis.eu suffers from cross site request forgery, cross site scripting, denial of service, and remote blind SQL injection vulnerabilities. The vendor has not responded to the researchers reports of these issues...
Oracle Linux 4 : sendmail (ELSA-2011-0262)
From Red Hat Security Advisory 2011:0262 : Updated sendmail packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base...
CVE-2011-1182
CVE-2011-1182 affects the Linux kernel’s signal handling: kernel/signal.c before 2.6.39 allows local users to spoof the UID and PID of a signal sender via sigqueueinfo. Affected in MiracleLinux 3 (kernel 2.6.18-274.1.AXS3) per AXSA-2011-313:06; the issue is described as a kill-signal spoofing vul...
dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received
The dbusgproxymanagerfilter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal...
CVE-2013-0292
The dbusgproxymanagerfilter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal...
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting
Roundcube Webmail 0.8.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: Roundcube Webmail Stored XSS. Date: 14/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://roundcube.net Software Link:...
wordpress Diary/Notebook theme email spoofing vulnerability-vulnerability warning-the black bar safety net
WordPress this Diary/Notebook theme is to have site5 design of a personal Journal blog system theme. The recent burst of the email spoofing vulnerability. Attach the perl script Exp: !/ usr/bin/perl Exploit Title: Diary/Notebook Site5 WordPress Theme - Email Spoofing Date: 15.07.2012 Exploit...
CVE-2012-0796
class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 and other products, allows remote authenticated users to inject arbitrary e-mail headers via vectors involving a crafted 1 From: or 2 Sender: header...
PT-2012-2873 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9.x through 1.9.15 Moodle versions 2.0.x through 2.0.6 Moodle versions 2.1.x through 2.1.3 Moodle versions 2.2.x through 2.2.0 Description: The issue allows remote authenticated users to inject arbitrary e-mail headers via...