quickshare file share 1.2.1 - Directory Traversal (1)

!/usr/bin/python Exploit Title: QuickShare File Share 1.2.1 Directory Traversal Vulnerability Date: 02/03/2011 Author: modpr0be Software Link: http://www.quicksharehq.com/files/qfssetup.exe Vulnerable version: 1.2.1 Tested on: Windows XP SP3 VMware Player 3.1.3 build-324285 CVE : N/A...

PT-2011-1357

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Corporate Edition versions prior to 10.1 MR10 Symantec System Center versions 10.x Symantec Quarantine Server versions 3.5 through 3.6 Description The issue allows remote attackers to execute arbitrary programs by sending a...

Windows Gather SMB Share Enumeration via Registry

This module will enumerate configured and recently used file shares. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather SMB Share Enumeration via Registry', 'Description' = %q This...

Unfixed XSS vulnerability at www.edumedia-share.com

Security researcher b0x, has submitted on 01/07/2011 a cross-site-scripting XSS vulnerability affecting www.edumedia-share.com, which at the time of submission ranked 3683981 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

Ace Video Workshop 1.2.0.0 - ir50_lcs.dll DLL Loading Arbitrary Code Execution

Ace Video Workshop 1.2.0.0 - ir50lcs.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/45675/info Ace Video Workshop is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable...

Ace Video Workshop 1.2.0.0 - 'ir50_lcs.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45675/info Ace Video Workshop is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a special...

ImgBurn 2.4 - dwmapi.dll DLL Loading Arbitrary Code Execution

ImgBurn 2.4 - dwmapi.dll DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/45657/info ImgBurn is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file fr...

ImgBurn 2.4 - 'dwmapi.dll' DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/45657/info ImgBurn is prone to an arbitrary-code-execution vulnerability. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location that contains a specially crafted...

Adobe Photoshop CS5 Insecure Library Loading Code Execution (APSB10-30; CVE-2010-3127)

Adobe Photoshop CS5 is a graphics editing program that features a 3D engine. A library-loading vulnerability has been identified in Adobe Photoshop CS5. This vulnerability is due to the application insecurely loading certain librairies from the current working directory, which could allow attacke...

Social Share 2010-06-05 Cross Site Scripting

www.eVuln.com advisory: "search" - Non-persistent XSS in Social Share Summary: http://evuln.com/vulns/169/summary.html Details: http://evuln.com/vulns/169/description.html -----------Summary----------- eVuln ID: EV0169 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Typ...

www.eVuln.com : HTTP Response Splitting in Social Share

www.eVuln.com advisory: HTTP Response Splitting in Social Share Summary: http://evuln.com/vulns/168/summary.html Details: http://evuln.com/vulns/168/description.html -----------Summary----------- eVuln ID: EV0168 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Type: HTT...

Social Share - search Cross-Site Scripting

Social Share - search Cross-Site Scripting source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Social Share - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45566/info Social Share is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Social Share 2010-06-05 HTTP Response Splitting

www.eVuln.com advisory: HTTP Response Splitting in Social Share Summary: http://evuln.com/vulns/168/summary.html Details: http://evuln.com/vulns/168/description.html -----------Summary----------- eVuln ID: EV0168 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Type: HTT...

Social Share 2010-06-05 SQL Injection

www.eVuln.com advisory: Authentication Bypass by SQL Injection in Social Share Summary: http://evuln.com/vulns/167/summary.html Details: http://evuln.com/vulns/167/description.html -----------Summary----------- eVuln ID: EV0167 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level...

Social Share - Username SQL Injection

Social Share - Username SQL Injection source: https://www.securityfocus.com/bid/45536/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker t...

www.eVuln.com : "postid" SQL Injection in Social Share

www.eVuln.com advisory: "postid" SQL Injection in Social Share Summary: http://evuln.com/vulns/166/summary.html Details: http://evuln.com/vulns/166/description.html -----------Summary----------- eVuln ID: EV0166 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: medium Type: S...

www.eVuln.com : Authentication Bypass by SQL Injection in Social Share

www.eVuln.com advisory: Authentication Bypass by SQL Injection in Social Share Summary: http://evuln.com/vulns/167/summary.html Details: http://evuln.com/vulns/167/description.html -----------Summary----------- eVuln ID: EV0167 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level...

Social Share - 'Username' SQL Injection

source: https://www.securityfocus.com/bid/45536/info Social Share is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access o...

Social Share 2010-06-05 SQL Injection

www.eVuln.com advisory: "postid" SQL Injection in Social Share Summary: http://evuln.com/vulns/166/summary.html Details: http://evuln.com/vulns/166/description.html -----------Summary----------- eVuln ID: EV0166 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: medium Type: S...