ProSysInfo TFTP Server TFTPDWIN 0.4.2 - Remote Buffer Overflow (2)

!/usr/bin/python ProSysInfo TFTP Server TFTPDWIN 0.4.2 Coded by Wraith import os import sys import struct import socket import time print "\nProSysInfo TFTP Server TFTPDWIN 0.4.2" print "Note: This vuln is sensitive to different buffer length\n" if lensys.argv!=2: print "Usage: tftpdwin.py "...

Inout Adserver SQL Injection

Inout Adserver id Remote SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i die. Im proud to be an ALBANIAN Author :...

censura 1.16.04 - Blind SQL Injection / Cross-Site Scripting

================================================================================================ Title : Blind SQL/XSS Multiple Remote Vulnerabilities Software : Censura v1.16.04 Vendor : http://www.censura.info/ Date : 12 July 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...

Opera Web Script Execution Vulnerabilities - June09 (Linux)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09lin.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Linux Authors: Sharath S Copyright: Copyrigh...

Opera Web Script Execution Vulnerabilities - June09 (Windows)

This host has Opera browser installed and is prone to Web Script Execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoperawebscriptexecvulnjun09win.nasl 5122 2017-01-27 12:16:00Z teissa $ Opera Web Script Execution Vulnerabilities - June09 Windows Authors: Sharath S Copyright:...

MataChat Cross Site Scripting

a bug in MataChat that allows to us to occur a Cross-Site Scripting on a Remote machin. this bug tested with the Vulnerable Software All Ver. -------------------------------------------------- Islamic Republic Of Iran Security Team Www.IrIsT.Ir MataChat == All Version Cross-Site Scripting...

virtuemart 1.1.2 - Multiple Vulnerabilities

Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS called Joomla! and Mambo. Joomla! an...

Bloginator 1a - Cookie Bypass / SQL Injection

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL www.site.com/bloginator/articleCall.php global...

Microsoft IIS MS03-018 Security Check

A Cross-Site ScriptingXSSvulnerability affecting IIS 4.0, 5.0 and 5.1 involving the error message that SPDX-FileCopyrightText: 2009 Christian Eric Edjenguele Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Password Door 8.4 - Local Buffer Overflow

source: https://www.securityfocus.com/bid/33634/info Password Door is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

MKPortal 1.2.1 XSS / SQL Injection / File Upload

waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html Description of vulnerable software...

PHPAuctionSystem - Multiple Remote File Inclusions

PHPAuctionSystem - Multiple Remote File Inclusions »=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o...

WinFTP Server <= 2.3.0 PASV Command DoS Vulnerability

WinFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpMyAdmin 3.1.0 XSRF / SQL Injection

Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side XSRF attacks against XAMPP and Simpl...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Dart Communications PowerTCP FTP module - Remote Buffer Overflow Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in...

Dart Communications PowerTCP FTP module - Remote Buffer Overflow

Author: Intel Discovered by: Intel Software: PowerTCP ActiveX Vulnerable Component: DartFtp.dll Version: 2.0.2.0 Website: www.dart.com Description: "PowerTCP tools from Dart Communications are comprehensive tools you can include in your programs to perform common TCP/IP functions, including FTP,...

HostAdmin Cross-Site Scripting Vulnerabilities

Dear securityfocus moderator, a bug in HostAdmin that allows to us to occur a Cross-Site Scripting on a Remote machin. this bug tested with the Vulnerable Software 3.1.1. bug found in the attached document. Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scriptin...

lansuite-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl lansuite success $stats = new stats; // Boxes if !$IsAboutToInstall and !$GET'contentonly' and $GET'design' != 'base'...

CVE-2008-4096

libraries/databaseinterface.lib.php in phpMyAdmin before 2.11.9.1 allows remote authenticated users to execute arbitrary code via a request to serverdatabases.php with a sortby parameter containing PHP sequences, which are processed by createfunction...