phlyLabs phlyMail Lite 4.03.04 Open Redirect

phlyLabs phlyMail Lite 4.03.04 go param Open Redirect Vulnerability Vendor: phlyLabs Product web page: http://www.phlymail.com Affected version: Lite 4.03.04 Summary: phlyMail offers you an interface in the browser to have access to your emails, contacts, appointments, tasks, files and bookmakrs...

Sony PC Companion 2.1 - Load() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - Load Unicode Stack Buffer Overflow Sony PC Companion 2.1 Load Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818...

Nvidia Install Application 2.1002.85.551 - 'NVI2.dll' Unicode Buffer Overflow (PoC)

d eax+40 004142e0 41 00 41 00 41 00 41 00-41 00 41 00 41 00 41 00 A.A.A.A.A.A.A.A. 004142f0 41 00 41 00 41 00 41 00-41 00 41 00 41 00 41 00 A.A.A.A.A.A.A.A. 00414300 41 00 41 00 41 00 41 00-41 00 41 00 41 00 41 00...

backupDB() v1.2.7a (onlyDB) Remote XSS Vulnerability

Exploit for php platform in category web applications backupDB v1.2.7a onlyDB Remote XSS Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.2.7a-201108021626 Summary: backupDB is a PHP script that backs up MySQL tables and databases to a file...

Zend Optimizer 3.3.3 (Windows) Insecure Permissions

Exploit for windows platform in category local exploits Zend Optimizer 3.3.3 Windows Insecure Permissions Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: 3.3.3 and 3.3.0 Note: The patch did not change the version number of the affected product, so the update...

Oreans Themida 2.1.8.0 - .TMD File Handling Buffer Overflow

Oreans Themida 2.1.8.0 - .TMD File Handling Buffer Overflow / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system,...

phpList 2.10.17 - SQL Injection Cross-Site Scripting

phpList 2.10.17 - SQL Injection Cross-Site Scripting phpList 2.10.17 Remote SQL Injection and XSS Vulnerability Vendor: phpList Ltd Product web page: http://www.phplist.com Affected version: 2.10.17 Summary: phplist is the world's most popular open source email campaign manager. phplist is free t...

webgrind 'dataFile' Parameter Cross Site Scripting Vulnerability

webgrind is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to stea...

SopCast 3.4.7 Improper Permissions

SopCast 3.4.7 Diagnose.exe Improper Permissions Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet. Adopting P2PPeer-to-Peer technolog...

SopCast 3.4.7 (Diagnose.exe) Improper Permissions

Exploit for windows platform in category local exploits SopCast 3.4.7 Diagnose.exe Improper Permissions Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video and listen to...

SopCast 3.4.7 - 'Diagnose.exe' Improper Permissions

SopCast 3.4.7 Diagnose.exe Improper Permissions Vendor: SopCast.com Product web page: http://www.sopcast.com Affected version: 3.4.7.45585 Summary: SopCast is a simple, free way to broadcast video and audio or watch the video and listen to radio on the Internet. Adopting P2PPeer-to-Peer technolog...

Hotaru CMS 1.4.2 Cross Site Scripting

Hotaru CMS 1.4.2 SITENAME Parameter Stored XSS Vulnerability function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="SITENAME" val...

iManager Plugin v1.2.8 (d) Remote Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications iManager Plugin v1.2.8 d Remote Arbitrary File Deletion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your...

iManager Plugin v1.2.8 (lang) Local File Inclusion Vulnerability

Exploit for php platform in category web applications iManager Plugin v1.2.8 lang Local File Inclusion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: lang.'.php' ; 70: $this - charset = $langcharset; 71: $this - dir = $langdirection; 72: $this...

Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service

Exploit for windows platform in category dos / poc !/usr/bin/python Mini FTP Server 1.1 Buffer Corruption Remote Denial Of Service Exploit Vendor: webmaster442 Product web page: http://miniftpserver.codeplex.com Affected version: 1.1.1.0 Summary: Minimal FTP server for windows. Uses only managed...

Help And Manual Professional Edition 5.5.1 DLL Hijack

/ Help & Manual Professional Edition 5.5.1 ijl15.dll DLL Hijacking Exploit Vendor: EC Software GmbH Product web page: http://www.helpandmanual.com Affected version: 5.5.1 Build 1296 Summary: Help & Manual 5 is a single-source help authoring and content management system for both single and...

Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions

No description provided by source. Microsoft Source Code Analyzer for SQL Injection 1.3 Improper Permissions Vendor: Microsoft Corp. Product web page: http://www.microsoft.com Affected version: 1.3.30601.30705 summary: Microsoft Source Code Analyzer for SQL Injection is a static code analysis too...

AutoPlay 1.33 (autoplay.ini) - Local Buffer Overflow (SEH)

!/usr/bin/python AutoPlay v1.33 autoplay.ini Local Buffer Overflow Exploit SEH Vendor: Naugher Software Product web page: http://www.naughter.com Affected version: 1.33 Summary: AutoPlay is a shareware application used for making autorun.ini files that can be edited and stored to compact disks...

Appweb Web Server Cross Site Scripting Vulnerability

Appweb is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal...

Zen Cart <= 1.3.9f Multiple Vulnerabilities

Zen Cart is prone to multiple input validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include local file include, SQL injection, and HTML injection issues. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpt...