4728 matches found
Vastal I-Tech DVD Zone view_mag.php mag_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36487/info DVD Zone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to stea...
Active Web Helpdesk 2 - (CategoryID) Blind SQL Injection Vulnerability
No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...
Microsoft DNS RPC Service extractQuotedChar() Overflow (TCP)
No description provided by source. $Id: ms07029msdnszonename.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Microsoft Outlook Express 5/6 MHTML URL Handler File Rendering Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5473/info Microsoft Outlook Express introduced a URL handler called MHTML MIME Encapsulation of Aggregate HTML. This allows Internet Explorer to pass MHTML files to Outlook Express for rendering. The MHTML URL handler doe...
AlstraSoft AskMe Pro 2.1 (forum_answer.php?que_id) SQL Injection Vulnerability
No description provided by source. ================================================================== Exploit Title: AlstraSoft AskMe Pro SQL Injection Vulnerability Date: 12/09/2010 Author: Amine92 Email: [email protected] Software Link: http://www.alstrasoft.com/askme.htm Version: All Versio...
MS IE 4.0/4.0.1/5.0/5.0.1/5.5 preview Security Zone Settings Lag Vulnerability
No description provided by source. Microsoft Internet Explorer 4.0 for Windows 3.1/Windows 95,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5 preview,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0,Internet Explorer 5.0.1 Security Zone Setting...
Vastal I-Tech Cosmetics Zone 'view_products.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36485/info Cosmetics Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...
Microsoft Internet Explorer 5.0.1 - Cached Content Cross Domain Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35200/info Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access...
GameRoom Script Admin Bypass and File Upload Vulnerability
No description provided by source. |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script nam...
Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability
No description provided by source. Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...
SDP Downloader 2.3.0 - (.ASX) Local Buffer Overflow Exploit (SEH) (2)
No description provided by source. / SDP-BOF.c SDP Downloader Local Buffer overflow exploit SEH Credits : Cyber-Zone Exploit BY : SimO-s0fT [email protected] Shoot to : Stack & r1z & Str0ke / include stdio.h include string.h include stdlib.h define OFFSET 529 define NOP 0x90 char...
Microsoft Internet Explorer 5.0.1 ITS Protocol Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI...
RM Downloader 3.0.2.1 - (.M3U File) Stack Overflow exploit
No description provided by source. !/usr/bin/perl RM Downloader 3.0.2.1.M3U File Stack Overflow exploit Author: Vinod Sharma Download : http://www.rm-to-mp3.net/downloads/RMDownloader.exe Tested : Windows XP SP2 En Thanks to exploit-db,packetstormsecurity and all security folks Originally publish...
TSguestbook 2.1 Message Field HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8520/info It has been reported that TSguestbook may be prone to HTML injection attacks. The problem is said to occur due to insufficient sanitization of user-supplied input within the 'message' field. As a result, an...
Zone Labs Zone Alarm 6.0 Advance Program Control Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/15347/info Zone Labs Zone Alarm is prone to a weakness that permits the bypassing of the Advanced Program Control protection. Reports indicate that applications can create a modal dialog box displaying HTML, which can the...
Microsoft Internet Explorer 6.0 Double Slash Cache Zone Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8980/info A vulnerability has been reported in Internet Explorer that may allow cached Internet content to be rendered in the My Computer zone. It is possible to exploit this issue by including an extra slash when...
Microsoft Windows NT 4.0 / 2000 LPC Zone Memory Depletion DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1745/info LPC Local Procedure Call is a message-passing service that allows threads and processes to communicate with each other on a local machine as opposed to RPC Remote Procedure Call that takes place between differen...
YaPig 0.94.0u - Remote File Inclusion Vulnerability
No description provided by source. |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script nam...
PHP Hosting Directory 2.0 Database Disclosure Exploit (.py)
No description provided by source. !/usr/bin/env python -- coding:cp1254 -- ''' Title : PHP Hosting Directory 2.0 Database Disclosure Exploit .py Author : ZoRLu / http://inj3ct0r.com/author/577 mail-msn : [email protected] Down. Script : - Proof :...
Maxthon3 about:history XCS Trusted Zone Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...