5138 matches found
MS Word Record Parsing Buffer Overflow (MS09-027)
No description provided by source. MS Word Record Parsing Buffer OverflowMS-09-027 Vulnerble application MS office 2003 Tested on XP SP2 - MS Ofice 2003 v. 11.5604.5606 Bug Found By Wushi of team509 !/usr/bin/python import sys import zlib windows/exec - CMD=calc.exe shellcode =...
Easypx41 Multiple Variable Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/14421/info Easypx41 is prone to multiple variable injection vulnerabilities. An attacker can manipulate multiple script input variables and bypass access controls to retrieve sensitive and privileged information...
MP3 Workstation 9.2.1.1.2 - SEH exploit
No description provided by source. MP3 Workstation Version 9.2.1.1.2 SEH exploit Author Sanjeev Gupta san.gupta86atgmail.com Download Vulnerable application from http://www.e-soft.co.uk/MP3%20Workstation.htm Vulnerable version MP3 Workstation Version 9.2.1.1.2 Tested on XP SP2 Greets Puneet Jain ...
Mediacoder 0.7.5.4710 Buffer Overflow Exploit
No description provided by source. media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 !/usr/bin/python to exploit load the crash.m3u file and double click on it filename = crash.m3u junk = \x41 256 eip =...
Audiotran 1.4.2.4 SEH Overflow Exploit
No description provided by source. Audiotran 1.4.2.4 SEH Overflow Exploit 0 day Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Download Vulnerable application from...
csChat-R-Box Script Site Cross-Site Scripting Vulnerability
Exploit for cgi platform in category web applications Exploit Title: "csChat-R-Box Script Site" Cross-Site Scripting XSS Google Dork: csChatRBox.cgi Date: 4/10/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link:...
Android WebView addJavascriptInterface Arbitrary Java Method Access
Added: 02/11/2014 CVE: CVE-2013-4710 OSVDB: 97520 Background Android is a Linux-based operating system used primarily on touchscreen mobile devices such as smartphones and tablet computers. It was originally developed by Android Inc., but is now owned by Google. WebView is a sub-class of the...
Multiple Vulnerabilities in VideoWhisper Live Streaming Integration WP Plugin
High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in VideoWhisper Live Streaming Integration, which can be exploited to execute arbitrary code on the target system, gain access to potentially sensitive data, perform Cross-Site Scripting XSS attacks against users of...
haneWIN DNS Server 1.5.3 - Denial of Service
Exploit Title: haneWIN DNS Server 1.5.3 - Denial of service Author: sajith version: haneWIN DNS Server 1.5.3 Vendor Homepage: http://www.hanewin.net/ vulnerable app link:http://www.hanewin.net/dns-e.htm Tested in windows Xp sp3 POC by sajith shetty import socket target = "127.0.0.1" port = 53 try...
PotPlayer 1.5.42509 Beta Denial Of Service
Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: ------- !/usr/bin/python rawinput"Hit Ente...
Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities
Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-04 Vulnerability Laboratory ID VL-ID: ==================================...
Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities
Document Title: =============== Wireless Transfer App 3.7 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1152 Release Date: ============= 2013-12-03 Vulnerability Laboratory ID VL-ID: ==================================...
FTP Sprite 1.2.1 Script Insertion
Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...
LG Optimus G Command Injection
Device: LG Optimus G E973 Others affected Firmware: Android 4.1.2 JZO54k Others affected Evidence: http://youtu.be/ZfbDIpTY-t4 A vulnerability in LG's "HiddenMenu" allows you to execute shell commands as the system, with a large array of additional permissions Groups. This vulnerability opens up...
Cisco Video Surveillance Operations Manager 6.3.2 XSS / LFI / Bypass
Exploit Title:Cisco Video Surveillance Operations Manager Multiple vulnerabilities Google Dork: intitle:"Video Surveillance Operations Manager Login" Date: 22 Feb 2013 reported to the vendor Exploit Author: Bassem | bassem.co Vendor Homepage: www.cisco.com Version: Version 6.3.2 Tested on: Versio...
PHP-Nuke 8.2.4 - Cross-Site Request Forgery
PHP-Nuke 8.2.4 - Cross-Site Request Forgery Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group CSRF POC PHP nuke 8.2.4 document.getElementById'formid'.submit;...
Amateur Photographers Image Gallery - plist.php?albumid SQL Injection
Amateur Photographers Image Gallery - plist.php?albumid SQL Injection source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability...
Amateur Photographer's Image Gallery - 'plist.php?albumid' SQL Injection
source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied...
WellinTech KingView Multiple Vulnerabilities
WellinTech KingView is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XOOPS Cube PROJECT FileManager - xupload.php Arbitrary File Upload
XOOPS Cube PROJECT FileManager - xupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53945/info FileManager is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An...