MP3-Nator - Local Buffer Overflow (SEH) (DEP Bypass)

Exploit Title: Exploit Buffer Overflow MP3-Nator SEH - DEP BYPASS Date: 18-11-2010 Author: Muhamad Fadzil Ramli - mind1355atgmaildotcom Credit/Bug Found By: C4SS!0 G0M3S Software Link: http://www.brothersoft.com/d.php?softid=16524&url=http://files.brothersoft.com/mp3audio/players/mp3nator.zip...

openEngine 2.0 100226 - Local File Inclusion / Cross-Site Scripting

SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...

openEngine 2.0 Cross Site Scripting / Local File Inclusion

SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...

FCKEditor Core 2.x 2.4.3 - 'FileManager upload.php' Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x input name="NewFile" type="file...

openEngine Local File Include Vulnerability

openEngine is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

shopxp html version 2. 0 CSRF vulnerability-vulnerability warning-the black bar safety net

Program: shopxp html version 2. 0, the 1.0 should also be the same there Vulnerability: direct add administrator Keywords: is not found the keyword was depressed Program download:http://www.codepub.com/software/SHOPXP-7615.html !-- include file="xp. asp" - % dim adminid,action action=request...

phpArticle v 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ phpArticle v 2.0 SQL Injection Vulnerability ============================================ Author:By Forza-Dz http://h4kz.net/forum date:26/09/2010 Dork: oops Description : This version of phpArticle...

TBDev 2.0 - Remote File Inclusion SQL Injection

TBDev 2.0 - Remote File Inclusion SQL Injection source: https://www.securityfocus.com/bid/43004/info TBDev is prone to multiple input-validation vulnerabilities, including a remote file-include issue and an SQL-injection issue. A successful exploit may allow an attacker to execute malicious code...

LM Starmail Paidmail SQLi and RFI Vulnerabilities

LM Starmail Paidmail is prone to SQL injection SQLi and remote file inclusion RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mozilla Products Multiple Vulnerabilitie july-10 (Windows)

The host is installed with Mozilla Firefox/Seamonkey that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwin01jul10.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilitie july-10 Windows Authors: Antu Sanadi Copyright: Copyrig...

IBM AIX 5l FTPd Remote DES Hash Exploit

Exploit for aix platform in category remote exploits ======================================= IBM AIX 5l FTPd Remote DES Hash Exploit ======================================= / IBM AIX 5l FTPd Remote DES Hash Exploit -- Advanced 'Datacenter' Edition : Should work on IBM AIX 5.1,5.2,5.3! probably on...

Eyeland Studio Inc. - SQL Injection

Eyeland Studio Inc. - SQL Injection Title: Eyeland Studio Inc. SQL Injection Vulnerability Version: 2.0 Author: Mr.P3rfekT Software Site:http://www.eyeland.com/ Tested on Lunix CVE : N/A Home :www.realmadridsy.com & www.v4-team.com/cc Founded By Mr.P3rfekT Dork :"Eyeland Studio Inc. All Rights...

Eyeland Studio Inc. - SQL Injection

Title: Eyeland Studio Inc. SQL Injection Vulnerability Version: 2.0 Author: Mr.P3rfekT Software Site:http://www.eyeland.com/ Tested on Lunix CVE : N/A Home :www.realmadridsy.com & www.v4-team.com/cc Founded By Mr.P3rfekT Dork :"Eyeland Studio Inc. All Rights Reserved." Helllo Allz. Exploit :...

Microsoft ASP.NET Cross-Site Scripting vulnerability

The host is running Microsoft ASP .NET and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: gbmsaspdotnetxssvuln.nasl 6519 2017-07-04 14:08:14Z cfischer $ Microsoft ASP.NET Cross-Site Scripting Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Microsoft ASP.NET Cross-Site Scripting vulnerability

Microsoft ASP .NET is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...

Lots XSS of Dvbbs Version 2.0++

No description provided by source. Dvbbs Version 2.0++ is the latest version of dvbbs. it has lots of xss. The Parameters:boardid、action、location、TopicDate、TopicOrder、TopicDA、orders、oper The...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

Exploit for php platform in category web applications =========================================================== Lokomedia CMS sukaCMS Local File Disclosure Vulnerability =========================================================== Software Link: http://bukulokomedia.com Version: 2.0 Tested on: a...

Lokomedia CMS - sukaCMS Local File Disclosure

Lokomedia CMS - sukaCMS Local File Disclosure Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom ...

Lokomedia CMS - 'sukaCMS' Local File Disclosure

Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site : http://vir0e5.blogspot.com + DorK :...