ColdFusion 8.0.1 - Arbitrary File Upload / Execution (Metasploit)

$Id: coldfusionfckeditor.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure

Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/20...

ColdFusion 8.0.1 Arbitrary File Upload And Execute

$Id: coldfusionfckeditor.rb 10874 2010-11-02 23:51:17Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security-Assessment.com Advisory: Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass

, , . .' '. ', . , '. , ., , / / / ==/ / / / / / / | Y Y / /| / /||| / / /.-. / /:wq x.0 '=.|w|.=' ='"=. presents.. Oracle JRE - java.net.URLConnection class – Same-of-Origin SOP Policy Bypass PDF: http://www.security-assessment.com/files/advisories/OracleJREjavaneturlconnectionSOPBypass.pdf CVE...

Pragyan CMS 3.0 Remote File Inclusion

In The Name Of GOD ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Pragyan CMS 3.0 Remote File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Exploit Title: Pragyan CMS 3.0...

acs-blog turkce v1.1.3-(tr) Database Disclosure Exploit

!/usr/bin/perl -w blog turkce v1.1.3-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

DATAC RealWin SCADA Server SCPC_INITIALIZE Buffer Overflow

This module exploits a stack buffer overflow in DATAC Control International RealWin SCADA Server 2.0 Build 6.1.8.10. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

Novell iManager getMultiPartParameters Unauthorized File Upload

Novell iManager is a web-based administration console that provides management of many other Novell products. The iManager service itself is a Java web application running on top of the Tomcat application container. An unauthorized file upload vulnerability has been reported in Novell iManager. T...

xWeblog v2.2 (oku.asp?makale_id) SQL Injection Vulnerability

No description provided by source. =================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software:...

resolveall NSE Script

NOTE: This script has been replaced by the --resolve-all command-line option in Nmap 7.70 Resolves hostnames and adds every address IPv4 or IPv6, depending on Nmap mode to Nmap's target list. This differs from Nmap's normal host resolution process, which only scans the first address A or AAAA...

iSCSI target Multiple Implementations Format String Code Execution (CVE-2010-0743)

iSCSI Internet Small Computer System Interface is an Internet Protocol based storage networking standard for linking data storage facilities. It is used to transfer data over the network using the SCSI protocol. A format string vulnerability has been reported in multiple implementations of iSCSI...

iSCSI target Multiple Implementations iSNS Stack Buffer Overflow (CVE-2010-2221)

A stack buffer overflow vulnerability has been reported in iscsitarget, an open implementation of iSCSI Enterprise Target. The vulnerability is caused by missing boundary checks when handling SCN messages. Remote attacker can exploit this vulnerability by sending a malicious message to an iSCSI...

Apple Safari Webkit Button First-Letter Style Rendering Code Execution (CVE-2010-1392)

Safari is a web browsing application developed by Apple. Safari browsing functionality is built around the set of components called WebKit. WebKit is a development toolkit which allows third party developers to build applications that use Internet technologies such as HTML, HTTP, and others. A...

Joomla Component com_track SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comtrack SQL Injection Vulnerability ====================================================== Exploit Title : Joomla Component comtrack SQL Injection Vulnerability Author :...

MS10-068: Vulnerability in Local Security Authority Subsystem Service Could Allow Elevation of Privilege (983539)

The version of the Local Security Authority Subsystem Service LSASS installed on the remote Windows host does not properly handle malformed packets in LDAP messages when used in conjunction with Microsoft Active Directory / Active Directory Application Mode / Active Directory Lightweight Director...

targets-traceroute NSE Script

Inserts traceroute hops into the Nmap scanning queue. It only functions if Nmap's --traceroute option is used and the newtargets script argument is given. Script Arguments newtargets If specified, adds traceroute hops onto Nmap scanning queue. max-newtargets See the documentation for the target...

ColdUserGroup 1.06 - Blind SQL Injection

ColdUserGroup 1.06 - Blind SQL Injection !/usr/bin/python ColdGen - coldusergroup v1.06 0day Remote Blind SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purpose...

Windows-Movie-Maker

The vulnerable part starts at “IsValidWMToolsStream” function. In this function new is used two times for allocating space. In both cases, values of Size needed for allocating memory is read from .mswmm file. Successfully exploiting this issue allows remote attackers to cause denial-of-service...

SQL injection vulnerability in TCMS

Vulnerability ID: HTB22576 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityintcms2.html Product: TCMS Vendor: Target CMS http://targetcms.com/ Vulnerable Version: 100728 and Probably Prior Versions Vendor Notification: 09 August 2010 Vulnerability Type: SQL Injection Status: N...

Novell Teaming ajaxUploadImageFile Remote Code Execution (CVE-2010-2773)

Novell Teaming is a team workspace and real-time collaboration tool. It enables users to create, share, discuss, and manage information. A remote code execution vulnerability has been reported in Novell Teaming. The flaw is due to an input validation when parsing image uploads. A remote attacker...