elkagroup Image Gallery 1.0 - Arbitrary File Upload Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: elkagroup Image Gallery Dork: elkagroup - Image Gallery v1.0 - All right reserved Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type:...

Uiga Business Portal <= index.php SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

Ez Album Blind SQL Injection Vulnerability

No description provided by source. Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Archive Searcher .zip Stack Overflow

No description provided by source. !/usr/bin/ruby Software : Archive Searcher 2.1 Author : Lincoln OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : SEH Greetz to : Corelan Security Team http://www.corelan.be:8800/index.php/security/corelan-team-members/ Script provided 'as is', withou...

ZippHo 3.0.6 (.zip) 0day stack buffer overflow PoC exploit

No description provided by source. !/usr/bin/python ZippHo 3.0.6 .zip 0day stack buffer overflow PoC exploit Author: mrme - http://net-ninja.net/ & http://twitter.com/StevenSeeley Download: http://www.brothersoft.com/zippho-71295.html Platform: Windows XP sp3 En Greetz to: Corelan Security Team &...

Zanfi CMS lite 1.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. +Zanfi CMS lite / Jaw Portal free index.php page Multiple Local File Inclusion +Discovered by SirGod +MorTal TeaM +Greetz E.M.I.N.EM,Ras,Puscasmarin,ToxicBlood,HrN,Kemrayz,007m + Dork : Powered by: Zanfi Solutions + Local File Inclusion PoC :...

Stud.IP <= 1.3.0-2 Multiple Remote File Include Vulnerabilities

No description provided by source. /------------------------------------------------ IHS Public advisory -------------------------------------------------/ Stud.IP Remote File Inclusion Stud.IP is a learning and an information management system for universities, educational facilities and...

ASPPortal Free Version (Topic_Id) - Remote SQL Injection Vulnerability

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==--...

Joomla Component com_simplefaq (catid) Blind SQL Injection Vulnerability

No description provided by source. Joomla Component comsimplefaq catid Blind Sql Injection Vulnerability ========================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Team : Sec Attack Team .:. Email : [email protected] .:. Home : www.sec-attack.com/vb .:...

eSmile Script (index.php) SQL Injection Vulnerability

No description provided by source. eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql InjectionMysq...

KwsPHP Module jeuxflash (cat) 1.0 - Remote SQL Injection Vulnerability

No description provided by source. KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

SigPlus Pro 3.74 - ActiveX LCDWriteString() Remote BoF JIT Spray - aslr/dep bypass

No description provided by source. html !-- =================================================================================================== SigPlus Pro v3.74 ActiveX Signature Capture LCDWriteString Remote BoF JIT Spray - aslr/dep bypass Author: mrme - @StevenSeeley Download:...

TlAds 1.0 - Remote Insecure Cookie Handling Vulnerability

No description provided by source. TlAds v 1 = Insecure Cookie Handling Found By : x0r - Evolution Team Download: http://www.easy-script.com/scripts-dl/tlads-1.zip Exploit: javascript:document.cookie = tlAdslogin=admin; path=/ Stupid Admin ! P0wned :P Grazie Al Mio Amore...Ti Amo Da Morire...

Yes Solutions - Webapp SQL Injection

No description provided by source. .:. Author : HackXBack [email protected] Lebanese Hacker .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : YES SOLUTIONS http://www.yessolutions.biz/files/index.php .:. Bug Type : Sql Injection .:. Dork : Powered by: Yes Solutions === Exploit ==...

vCard PRO 3.1 - Cross Site Scripting Vulnerability

No description provided by source. ======================================================================================== | Title : vCard PRO 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeri...

flinx <= 1.3 (category.php id) Remote SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------- H-T Team HouSSaMix + ToXiC350 + RxH -------------------------------------------------------------- Author : Houssamix From H-T Team Script : flinx 1.3 & below Download :...

Linux-HA Heartbeat 1.2.3/2.0.x Insecure Default Permissions on Shared Memory Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, a...

Asterisk 'asterisk-addons' 1.2.7/1.4.3 CDR_ADDON_MYSQL Module SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26095/info Asterisk 'asterisk-addons' package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

sNews CMS Multiple XSS Vulnerabilities

No description provided by source. Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNews Team tp://www.snewscms.com/ Vulnerable Version: 1.7 and probably prior versions Vendor Notification: 05 October 2010 Vulnerability...

Wordpress page-flip-image-gallery plugins Remote File Upload

No description provided by source. Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...