IlohaMail Webmail Stored XSS

No description provided by source. !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...

Odin Secure FTP 4.1 Stack Buffer Overflow (LIST)

No description provided by source. $Id: odinlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

InvisionPower CMS Links To Titles 3.0 Cross Site Scripting

InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...

[DCA-0006] Baby ASP Web Server DoS

DCA-0006 Software - Baby ASP Server Vendor Product Description - This program was build as an alternative for Microsoft's IIS. The main goal was to design a simple web server with support for ASP. Setting up Baby ASP Web Server is very easy: copy the executable to a directory of your choice, set...

WarFTPd 1.82.00-RC12 - 'LIST' Format String Denial of Service

Vulnerability : War FTP Daemon Format String DoS LIST command Detected by : corelanc0d3r corelanc0d3ratgmaildotcom Type : remote DoS OS : Windows Product : Jgaa's War FTP Daemon Versions affected : 1.82 RC 12 Download link : http://www.warftp.org/?menu=344...

CVE-2008-1304

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 inviteemail parameter in an invite action to wp-admin/users.php and the 2 to parameter in a sent action to wp-admin/invites.php...

CVE-2008-1304

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 inviteemail parameter in an invite action to wp-admin/users.php and the 2 to parameter in a sent action to wp-admin/invites.php...

Design/Logic Flaw

The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as demonstrated by a SAY command. NOTE: the security impact of this violation is no...

major_rls51.txt

MajorSecurity Advisory 51Virtual Hosting Control System - Session fixation Issue Details ======= Product: Virtual Hosting Control System Affected version: 2.4.7.1 and prior Remote-Exploit: yes Vendor-URL: http://www.vhcs.net Vendor-Status: informed Advisory-Status: published Credits ============...

Microsoft Windows - NAT Helper Components Remote Denial of Service (Perl)

Microsoft Windows - NAT Helper Components Remote Denial of Service Perl !/usr/bin/perl Microsoft Windows NAT Helper Components Remote DoS Exploit 2 .details -------- Exploit192.168.0.2 -- Microsoft NAT192.168.0.1 -- ..Internet.. .info ----- code by x82 bug by h07 .greetz ------- ... goes out to...

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...