VeryTools VideoSpirit Pro 1.68 - Local Buffer Overflow

Exploit Title: VideoSpirit Pro v1.68 Local BoF Exploit Date: 01/08/2011 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecatx-sploited.com Software Link: http://www.verytools.com/videospirit/download.html Vulnerable version: v1.68 Tested on: Windows XP SP3 Eng Software...

Digital Music Pad 8.2.3.4.8 - '.pls' Local Overflow (SEH)

Digital Music Pad Version 8.2.3.4.8 SEH overflow Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Vulnerable version DJ Studio Pro Version 8.2.3.4.8 Tested on XP SP2 !/usr/bin/python filenam...

Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45600/info Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Habari Blog - Multiple Vulnerabilities

Habari Blog - Multiple Vulnerabilities Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure...

Habari Blog - Multiple Vulnerabilities

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

Solar FTP Server 2.0 - Multiple Denial of Service Vulnerabilities

Solar FTP Server 2.0 - Multiple Denial of Service Vulnerabilities !/usr/bin/python Exploit Title: SolarFTP 2.0 Multiple Commands Denial of Service Vulnerability Date: 12/17/2010 Author: modpr0be Software Link: http://www.solarftp.com/files/solarftps-setup.exe Vulnerable version: 2.0 Tested on:...

Blog:CMS 4.2.1e - Multiple Vulnerabilities

Blog:CMS 4.2.1e - Multiple Vulnerabilities Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010...

BEdita 3.0.1.2550 Cross Site Request Forgery

Vulnerability ID: HTB22729 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinbedita.html Product: BEdita Vendor: Chialab & ChannelWeb http://www.bedita.com/ Vulnerable Version: 3.0.1.2550 "betula" and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

XSS vulnerability in Zimplit CMS

Vulnerability ID: HTB22716 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzimplitcms1.html Product: Zimplit CMS Vendor: Zimplit http://www.zimplit.com/ Vulnerable Version: Current at 22.11.2010 and Probably Prior Versions Vendor Notification: 22 November 2010 Vulnerability Type: XSS...

WonderCMS 'page' Parameter Cross Site Scripting And Information Disclosure Vulnerabilities

WonderCMS is prone to a cross-site scripting vulnerability and an information- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser...

SweetRice CMS 0.6.7 Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================ SweetRice CMS 0.6.7 Multiple Vulnerabilities ============================================ Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor...

SweetRice 0.6.7 - Multiple Vulnerabilities

SweetRice 0.6.7 - Multiple Vulnerabilities Vulnerability ID: HTB22669 Reference: http://www.htbridge.ch/advisory/resetadminpasswordinsweetricecms.html Product: SweetRice CMS Vendor: basic-cms.org http://www.basic-cms.org/ Vulnerable Version: 0.6.7 Vendor Notification: 21 October 2010 Vulnerabilit...

MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ============================================================ MemHT Portal 4.0.1 Stored Cross Site Scripting Vulnerability ============================================================ Product: MemHT Portal Vendor: Miltenovik Manojlo...

digiSHOP 2.0.2 - SQL Injection

----------------------------------- TM | | | Y | | | | |. 1 ||||.| | | | |. | -|. |-' | |: | | |: | | |::.|:. | |::.| | --- ---' ---' | Private Place Of 0days | ----------------------------------- ^Exploit Title : ^Date : 23/7/2010 ^Vendor Site : http://digishop.digisoft77.com/ ^MOD Version :...

phpLiterAdmin v1.0 RC1 Authentication Bypass Vulnerability

Exploit for php platform in category web applications ========================================================== phpLiterAdmin v1.0 RC1 Authentication Bypass Vulnerability ========================================================== Product: phpLiterAdmin Vendor: phpLiterAdmin...

Online Grades Multiple <= 3.2.5 LFi Vulnerabilities

Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive nformation and to execute arbitrary local scripts in the context of the...

DZCP (deV!L_z Clanportal) 1.5.4 - Local File Inclusion

DZCP deV!Lz Clanportal 1.5.4 - Local File Inclusion Vulnerability ID: HTB22656 Reference: http://www.htbridge.ch/advisory/lfiindzcp.html Product: DZCP Vendor: dzcp.de http://www.dzcp.de Vulnerable Version: 1.5.4 Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status:...

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability

OCS Inventory NG Agent is prone to a vulnerability that lets local attackers execute arbitrary Perl code. This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

JVN#48097065: TeraPad may insecurely load dynamic libraries

TeraPad is a text editor. TeraPad loads certain DLL's when TXT files are opened. TeraPad contains an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact An attacker may execute arbitrary code with the privilege of running the application. Solution Update...