Digital College 1.0 Arbitrary Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Novell ZENworks Configuration Management UploadServlet Remote Code Execution

Added: 05/10/2010 BID: 39114 OSVDB: 63412 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a client/server...

CGI Generic Path Traversal (extended test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local file inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

OpenJDK Loader-constraint table allows arrays instead of only the base-classes (6626217)

Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

MX Simulator Server Remote Buffer Overflow PoC

Exploit for windows platform in category remote exploits ============================================== MX Simulator Server Remote Buffer Overflow PoC ============================================== / MX Simulator Server 2010-02-06 Remote Buffer Overflow PoC This PoC will executes the calc.exe...

Vulnerabilities in ArcManager

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Denial of Service уязвимостях в системе ArcManager. Уязвимости имеют место в скрипте капчи CaptchaSecurityImages.php, который используется в данной системе. Об уязвимостях в CaptchaSecurityImages я уже сообщал...

CVE-2010-0933

The vulnerability CVE-2010-0933 affects Perforce Server 2008.1 and is a directory traversal flaw that allows remote authenticated users to create arbitrary files by supplying a .. (dot dot) sequence in the argument to the p4 add command. Core details consistently reported across sources (NVD, Red...

CMS by MyWorks Multiple Vulnerabilities

No description provided by source. CMS by MyWorks SQL/ XSS Vulnerability ======================================================== Author : Palyo34 Home : www.1923Turk.com Script : CMS by MyWorks Script site: http://www.myworks.spb.ru/ === Exploit === http://server/catalog/good.php?goodid= SQL...

Erotik Auktionshaus - news.php SQL Injection

Erotik Auktionshaus - news.php SQL Injection Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to...

SongForever clone Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================ SongForever clone Shell Upload Vulnerability ============================================ ======================================================================================== | Title :...

vBulletin v 2.3 .* SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== vBulletin v 2.3 . SQL Injection Vulnerability ============================================== Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Versio...

vBulletin 2.3.x - SQL Injection

Title: vbulletin Vulnerability versions 2.3 . - SQL injection. Author: Discovered by ROOTEGY Version: vBulletin Version 2.3 =========================================================== www.sec-war.com =========================================================== Vulnerability versions 2.3 . - SQL...

BlaB! 2.1b2 Backup Disclosure

======================================================================================== | Title : BlaB! 2.1b2 Backup files Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 | High :...

CVE-2009-4500

The processtrap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote attackers to cause a denial of service crash via a crafted request with data that lacks an expected : colon separator, which triggers a NULL pointer dereference...

Live Help 2.6.0 Final XSS Vulnerability

No description provided by source. ======================================================================================== | Title : Live Help 2.6.0 Final Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi -...

Image File Upload Upload Shell Vulnerability

Exploit for unknown platform in category web applications ============================================ Image File Upload Upload Shell Vulnerability ============================================ ======================================================================================== | Title : Image...

PHPhotoalbum 0.5 - SQL Injection

PHPhotoalbum 0.5 - SQL Injection Title: PHPhotoalbum Remote sql injection Vulnerability Tested on: windows http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+user+from+mysql.user-- http://server/PHPhotoalbum/thumbnails.php?album=-1+union+select+loadfile/directory...

eWebquiz 8 - Blind SQL Injection

eWebquiz 8 - Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: multi Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: eWebquiz v 8 author: R3d-D3v!L Date: 18.dec.2009 T!ME: 12:00 am ? Home: WwW.xP10.ME ?...

Link Up Gold CSRF - Create Administrator Account

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Link Up Gold - CSRF Create Administrator Account // Author Info x Author: bi0 x Contact:...

Kide Shoutbox v0.4.6 XSS & AXFR

Exploit for unknown platform in category web applications =============================== Kide Shoutbox v0.4.6 XSS & AXFR =============================== Exploit : Go to the shoutbox and type: red text or hi or 3xplo!t :...