Simple Machines Forum (SMF) 1.1.8 - 'avatar' Remote PHP File Execute

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...

PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities

PHPAuthent 0.2.1 - useradd.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38908/info phpAuthent is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HT...

Cross-Site Scripting vulnerability in extension mm_forum (mm_forum)

It has been discovered that the extension mmforum mmforum is vulnerable to Cross-Site Scripting. Release Date: March 16, 2010 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.8.2 and all versions below Vulnerabilit...

Dojo Toolkit 1.4.1 - dijittests_testCommon.js?theme Cross-Site Scripting

Dojo Toolkit 1.4.1 - dijitteststestCommon.js?theme Cross-Site Scripting source: https://www.securityfocus.com/bid/38739/info Dojo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execut...

Asterisk CIDR Notation in Access Rule Remote Security Bypass Vulnerability (AST-2010-003)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Kojoney 0.0.4.1 - 'urllib.urlopen()' Remote Denial of Service

source: https://www.securityfocus.com/bid/38395/info Kojoney is prone to a remote denial-of-service vulnerability. A remote attacker can exploit this issue to gain unauthorized access to local files and crash the affected application, resulting in a denial-of-service condition. Versions prior to...

Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Xerox WorkCentre 5665/5675/5687 Printers Web Interface Vulnerabilities ======================================================================...

RealNetworks RealPlayer ASM RuleBook BOF Vulnerability - Windows

RealPlayer is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/40024/info Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

PT-2010-2124 · Typo3 · Typo3 Helpdesk (Mg Help) Extension

Name of the Vulnerable Software and Affected Versions: TYPO3 Helpdesk mg help extension version 1.1.6 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions 1.1.6 and earlier, update to a version later than 1.1.6 to...

DEBIAN-CVE-2009-4498

The nodeprocesscommand function in Zabbix Server before 1.8 allows remote attackers to execute arbitrary commands via a crafted request...

Sitecore Staging Module Authentication Bypass

SEC Consult Security Advisory ========================================================================== title: Authentication bypass and file manipulation in Sitecore Staging Module products: Sitecore Staging Module vulnerable version: Sitecore Staging Module = 5.4.0 rev.080625 fixed version:...

Monkey HTTP Daemon 0.9.3 - Denial of Service

Monkey HTTP Daemon 0.9.3 - Denial of Service Monkey HTTP Daemon is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Versions prior to Monkey HTTP Daemon 0.9.3 are vulnerable. !/usr/bin/env...

Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability

The host is running Flashlight Free Edition and is prone to SQL Injection and Directory Traversal Vulnerability. OpenVAS Vulnerability Test $Id: gbflashlightsqlinjndirtravvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Flashlight Free Edition SQL Injection and Directory Traversal Vulnerability...

Polipo 1.0.4 - Remote Memory Corruption (PoC)

Polipo 1.0.4 - Remote Memory Corruption PoC !/usr/bin/perl estranged.pl AKA Polipo 1.0.4 Remote Memory Corruption 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 12.07.2009 Hzzp loves you Polipo! No use reporting this issue to Ubuntu Security unless you feel lik...

Xfig and Transfig 3.2.5 - '.fig' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/37193/info Xfig and Transfig are prone to a buffer-overflow vulnerability because they fail to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed...

Joomla! MojoBlog Remote File Inclusion

Joomla Component MojoBlog Multiple Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 20, 2009 Software Information + Vendor : http://www.joomlify.com/ + Download : http://www.joomlify.com/files/mojoblog/ + version :...

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities (2)

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities 2 source: https://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An...

Novell eDirectory DoS Vulnerability (Nov 2009)

Novell eDirectory is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...