14244 matches found
Duhok Forum 1.1 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: DuhokForum = 1.1 index.php SQL Injection Vulnerability Date: 28-05-2011 Author: M.Jock3R Vendor or Software Link: http://www.duhoktimes.com/df/?file=duhokforum-1.1 Version: 1.1 Category:: webapps Google dork: duhokFrm 1.1 ©...
Duhok Forum 1.1 - SQL Injection
=================================================================== DuhokForum = 1.1 index.php SQL Injection Vulnerability =================================================================== Exploit Title: DuhokForum = 1.1 index.php SQL Injection Vulnerability Date: 28-05-2011 Author: M.Jock3R...
Poison Ivy 2.3.2 - Remote Buffer Overflow
Poison Ivy 2.3.2 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/48039/info Poison Ivy is prone to an unspecified buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attemp...
Poison Ivy 2.3.2 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/48039/info Poison Ivy is prone to an unspecified buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service...
Poison Ivy 2.3.2 Remote Buffer Overflow
Exploit for windows platform in category dos / poc Exploit Title: Poison Ivy 2.3.2 Latest version remote buffer overflow Google Dork: No dorks. Date: 27/05/11 Author: Kevin R.V Software Link: http://www.poisonivy-rat.com/dl.php?file=PI232 Version: 2.3.2 Tested on: Windows XP SP2 CVE : No exist. /...
MidiCMS-WB 2011 Shell Upload / Local File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Pligg CMS 1.1.4 Cross Site Request Forgery
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Avaya WinPMD UniteHostRouter Buffer Overflow
This module exploits a stack buffer overflow in Avaya WinPMD. The vulnerability exists in the UniteHostRouter service, due to the insecure usage of memcpy when parsing specially crafted "To:" headers. The module has been tested successfully on Avaya WinPMD 3.8.2 over Windows XP SP3 and Windows 20...
BarCodeWiz ActiveX LoadProperties Buffer Overflow
Added: 05/23/2011 CVE: CVE-2010-2932 BID: 42097 OSVDB: 66882 Background BarCodeWiz Barcode ActiveX Control is a tool for generating barcodes in Microsoft Office documents, and for Visual Basic, Visual C++, VB.NET, C, or Delphi developer looking to include barcodes in programs. Problem The...
BarCodeWiz ActiveX LoadProperties Buffer Overflow
Added: 05/23/2011 CVE: CVE-2010-2932 BID: 42097 OSVDB: 66882 Background BarCodeWiz Barcode ActiveX Control is a tool for generating barcodes in Microsoft Office documents, and for Visual Basic, Visual C++, VB.NET, C, or Delphi developer looking to include barcodes in programs. Problem The...
xtcModified <= 1.05 (FCKeditor) Multiple Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
chillyCMS 1.2.x XSRF / File Disclosure
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Collabtive v065 Multiple (CSRF/XSRF) Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
NucleusCMS 3.64 Cross Site Request Forgery
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Tugux CMS 1.2 XSS / LFI / SQL Injection / URL Redirection
Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Product web page: http://www.tugux.com...
99ko 0.4b Cross Site Request Forgery
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
AVS Ringtone Maker '.au'文件缓冲区溢出漏洞
Bugtraq ID: 47851 AVS Ringtone Maker允许用户定制铃声。 AVS Ringtone Maker不正确处理'.au'文件，攻击者构建恶意文件，诱使用户解析可触发缓冲区溢出，成功利用漏洞可以以应用程序安全上下文执行任意代码。 Online Media Technologies Ltd AVS Ringtone Maker 1.6.1 厂商解决方案 目前没有详细解决方案提供： http://www.avs4you.com/AVS-Ringtone-Maker.aspx !/usr/bin/perl system"cls"; sub logo print q'...
Sonique 1.96 Buffer Overflow
Application: Sonique BOF EIP Overwrite Version: 1.96 Author: Securityxxxpert Date Submitted: May 17, 2011 Download Link: http://www.tucows.com/preview/193562 Tested on: Windows XP SP3 EIP Overwritten: 239 Bytes Pita Bytes: 0x00 0x83 0x88 0x93 Notes: Not universal, find your own offsets if not SP3...
win32/xp sp3 Command Execution exploit/shellcode - 44 Bytes + CMD
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
Media In Spot CMS SQL Injection
Exploit Title: Media In Spot SQL Injection Google Dork: intext:""Powered By Media In Spot" Date: 16/05/2011 Author: Iolo Morganwg Category: Web App Version: PHP Tested on: Windows XP Vendor: http://www.mediainspot.com/ Note: domain parameter is vulnerable to sql injection Vulnerability...