WordPress Plugin PHP Speedy 0.5.2 - admin_container.php Remote Code Execution

WordPress Plugin PHP Speedy 0.5.2 - admincontainer.php Remote Code Execution -d OPTIONS host: target s...

Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting

Icy Phoenix 1.3.0.53a - HTTP Referer Persistent Cross-Site Scripting Exploit Title: Icy Phoenix 1.3.0.53a http referer stored XSS Google Dork: " Powered by Icy Phoenix " Date: 16-2-2011 Author: Saif El-Sherei Software Link: http://www.icyphoenix.com/dload.php?action=file&fileid=171 Version: Icy...

CuteZip 2.1 - Local Buffer Overflow

CuteZip 2.1 - Local Buffer Overflow !/usr/bin/perl +Exploit Title: Exploit Buffer Overflow CuteZip 2.1 +Date: 02\12\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.globalscape.com/files/cutezip20b.exe +Version: 2.1 build 9.24.1 +Tested on: WIN-XP SP3 PORTUGUESE BRAZILIAN +CVE: N/A Comment i...

DMXready Polling Booth Manager - SQL Injection

DMXready Polling Booth Manager - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXready Polling Booth Manager SQLi Vulnerability Vendor url:http://www.dmxready.com Version:1 Price:79$ Published: 2010-09-6 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA120...

Adobe Device Central CS5 - qtcf.dll DLL Hijacking

Adobe Device Central CS5 - qtcf.dll DLL Hijacking / Exploit Title: Adobe Device Central CS5 DLL Hijacking Exploit qtcf.dll Date: August 24, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest CS5 v3.0.0376 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .adcp...

Struts2XWork 2.2.0 - Remote Command Execution

Struts2XWork 2.2.0 - Remote Command Execution Friday, July 9, 2010 CVE-2010-1870: Struts2/XWork remote command execution Update Tue Jul 13 2010: Added proof of concept Apache Struts team has announced uploaded but has not released, due to an unreasonably prolonged voting process, the 2.2.0 releas...

MooreAdvice - productlist.asp SQL Injection

MooreAdvice - productlist.asp SQL Injection Exploit Title: MooreAdvice productlist.asp SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

phpBazar 2.1.1 stable - Remote File Inclusion

phpBazar 2.1.1 stable - Remote File Inclusion Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor: SmartISoft ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888...

FreeBSD 8.0 - ftpd (FreeBSD-SA-10:05) Off-By-One (PoC)

FreeBSD 8.0 - ftpd FreeBSD-SA-10:05 Off-By-One PoC FreeBSD 8.0 ftpd off-by one PoC FreeBSD-SA-10:05 CVE-2010-1938 FreeBSD-SA-10:05 Credit: Maksymilian Arciemowicz and Adam Zabrocki http://securityreason.com/achievementsecurityalert/87 http://security.freebsd.org/advisories/FreeBSD-SA-10:05.opie.a...

Spaw Editor 1.02.0 - Arbitrary File Upload

Spaw Editor 1.02.0 - Arbitrary File Upload Tilte: Spaw Editor v1.0 & 2.0 Remote File Upload . Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Spaw Editor v1 & v2 Impact..................: Remote Site Software...

Lokomedia CMS - sukaCMS Local File Disclosure

Lokomedia CMS - sukaCMS Local File Disclosure Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom ...

Webthaiapp - detail.php?cat Blind SQL Injection

Webthaiapp - detail.php?cat Blind SQL Injection --==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010...

Urgent Backup 3.20 ABC Backup Pro 5.20 ABC Backup 5.50 - .zip File (SEH)

Urgent Backup 3.20 ABC Backup Pro 5.20 ABC Backup 5.50 - .zip File SEH !/usr/bin/ruby Software : Urgent Backup 3.20 / ABC Backup Pro 5.20 / ABC Backup 5.50 Author : Lincoln Date : April 27, 2010 Reference : http://www.corelan.be:8800/advisories.php?id=CORELAN-10-034 OS : Windows Tested on : XP SP...

WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) - SQL Injection

WHMCompleteSolution WHMCS control WHMCompleteSolution - SQL Injection =Info======================================================================= Software: WHMCS control WHMCompleteSolution Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or "...

Avtech Software - ActiveX avc781viewer.dll Multiple Vulnerabilities

Avtech Software - ActiveX avc781viewer.dll Multiple Vulnerabilities Title: AVTECH Software AVC781Viewer.dll ActiveX Multiple Remote Vulnerabilities Vendor: AVTECH Software, Inc. Product Web Page: http://www.avtech.com Summary: AVTECH Software, a private corporation founded in 1988, is a computer...

Easy-Clanpage 2.2 - Multiple SQL Injections

Easy-Clanpage 2.2 - Multiple SQL Injections ----------------------------Information------------------------------------------------ +Name : Easy-Clanpage 2.2 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=18 +Price : for free +Language : PHP +Discovered by Easy Laster +Security...

Asp - comersus7F Shopping Cart Software Backup Dump

Asp - comersus7F Shopping Cart Software Backup Dump ======================================================================================== | Title : Asp - comersus7F Shopping Cart Software Backup Dump Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : Database Disclosure...

GOM Player 2.1.21.4846 - .wav Buffer Overflow

GOM Player 2.1.21.4846 - .wav Buffer Overflow !/usr/bin/perl GOM Player 2.1.21.4846 .wav Buffer Overflow Exploit Homepage: http://www.gomlab.com/ Exploit Coded by: cr4wl3r From: Gorontalo - Indonesia WARNING - WARNING - WARNING - WARNING Disclaimer: The author published the information under the...

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow

Apple iTunes 9.0.1 - .pls Handling Buffer Overflow Exploit Title: iTunes .pls file handling buffer overflow Date: 2009.12.20 Author: S2 Crew Hungary Software Link: - Version: 9.0 Tested on: OSX 10.5.8, Windows XP SP2 /GS flag, DOS CVE: CVE-2009-2817 Code: !/usr/bin/env ruby SETJMP = 0x92F04224...

TinyMCE WYSIWYG Editor - Multiple Vulnerabilities

TinyMCE WYSIWYG Editor - Multiple Vulnerabilities + Vurnerebility: Js tinymce/tinymce WYSIWYGjava script vurnerebility xss--popup & SQl implemented + Language : Java--,Xml + lisences : LGPL + Vendor : Moxiecode Systems AB + support : IE7J0/IE6.0/NS8.1-IE/NS8.1-G/FF2.0/O9.02; + Category : bug repo...

Soft Direct 1.05 - Multiple Vulnerabilities

Soft Direct 1.05 - Multiple Vulnerabilities ======================================================================================== | Title : Soft Direct v1.05 Multti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

CactuShop 6.0 - Database Disclosure

CactuShop 6.0 - Database Disclosure ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== Note : Forever...

ActiveBuyandSell 6.2 - buyersend.asp?catid Blind SQL Injection

ActiveBuyandSell 6.2 - buyersend.asp?catid Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L...

PHP 5.2.11 - htmlspecialCharacters() Malformed Multibyte Character Cross-Site Scripting (1)

PHP 5.2.11 - htmlspecialCharacters Malformed Multibyte Character Cross-Site Scripting 1 source: https://www.securityfocus.com/bid/37389/info PHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

Advanced Comment System 1.0 - Multiple Remote File Inclusions

Advanced Comment System 1.0 - Multiple Remote File Inclusions ====================================================== Advanced comment system1.0 Remote File Inclusion Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org...

SguilPADS - Remote Server Crash

SguilPADS - Remote Server Crash Sguil/PADS Denial of Service exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. More in-depth article available at: http://allmybase.com/?p=72 This more...

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password

elgg - Cross-Site Scripting Cross-Site Request Forgery Change Password + CMS Elgg uploading to a host.Save as cookie.php +Exploit: ------- 1 Register in The SIte 2 add to the Template The victim would be anyone who comes to your blog...

XOOPS 2.3.3 - .htaccess Remote File Disclosure

XOOPS 2.3.3 - .htaccess Remote File Disclosure ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De...

SiteX 0.7.4.418 - THEME_FOLDER Local File Inclusion

SiteX 0.7.4.418 - THEMEFOLDER Local File Inclusion =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script:SiteX074build418.zip ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

GNUBoard 4.31.04 (09.01.30) - Multiple LocalRemote Vulnerabilities

GNUBoard 4.31.04 09.01.30 - Multiple LocalRemote Vulnerabilities GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP...

Emefa Guestbook 3.0 - Remote Database Disclosure

Emefa Guestbook 3.0 - Remote Database Disclosure Title: Emefa Guestbook V 3.0 Remote Database Disclosure Vulnerability Credit: Cyber.Zer0 E-mail: Cyber.Zer04tHotmaildotcom Download: http://www.emefa.dyndns.org/downloads/ Remote: Yes Dork: "Emefa Guestbook V 3.0" --=Database Disclosure=--...

Vinagre 2.24.2 - show_error() Remote Format String (PoC)

Vinagre 2.24.2 - showerror Remote Format String PoC -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Vinagre showerror format string vulnerability 1. Advisory Information Title: Vinagre showerror format string...

MySQL Quick Admin 1.5.5 - Local File Inclusion

MySQL Quick Admin 1.5.5 - Local File Inclusion Author: Vinod Sharma Email: [email protected] Date: 05th Nov, 2008 Note: This information is only for educational purpose, author will not bear responsibility for any damages. Directory traversal vulnerability in MySQL Quick Admin 1.5.5...

6rbScript 3.3 - singerid SQL Injection

6rbScript 3.3 - singerid SQL Injection || | | 6rbScript V3.3 singerid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

BlazeDVD 5.0 - .PLF Playlist File Remote Buffer Overflow

BlazeDVD 5.0 - .PLF Playlist File Remote Buffer Overflow !/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other...

Panda Internet SecurityAntiVirus+Firewall 2008 - CPoint.sys Memory Corruption

Panda Internet SecurityAntiVirus+Firewall 2008 - CPoint.sys Memory Corruption source: https://www.securityfocus.com/bid/28150/info Panda Internet Security/Antivirus+Firewall 2008 is prone to a vulnerability that allows local attackers to corrupt kernel memory. This vulnerability occurs because th...

PHP-Nuke Sections Module - artid SQL Injection

PHP-Nuke Sections Module - artid SQL Injection source: https://www.securityfocus.com/bid/27879/info The PHP-Nuke Sections module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

AuraCMS 1.62 - Multiple SQL Injections

AuraCMS 1.62 - Multiple SQL Injections !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/...

Mambo Component Ricette 1.0 - SQL Injection

Mambo Component Ricette 1.0 - SQL Injection joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: "comricette"id EXPLOIT :...

Joomla! Mambo Component rsgallery 2.0b5 - catid SQL Injection

Joomla! Mambo Component rsgallery 2.0b5 - catid SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery =...

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution

Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution source: https://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to...

TikiWiki 1.9.8 - Remote PHP Injection

TikiWiki 1.9.8 - Remote PHP Injection TikiWiki 1.9.8 Remote PHP Injection Vulnerability Example: http:/server/tikiwiki/tiki-graphformula.php?w=1&h=1&s=1&min=1&max=2&f=x.tan.phpinfo&t=png&title= milw0rm.com 2007-10-10...

phpBB Mod OpenID 0.2.0 - BBStore.php Remote File Inclusion

phpBB Mod OpenID 0.2.0 - BBStore.php Remote File Inclusion ============================================ = = = XORON c 2007 = = = ============================================ = = = phpBB Openid 0.2.0 Remote File Include = = = ============================================ = = Download: =...

NovaSTOR NovaNET 12.0 - Remote Command Execution

NovaSTOR NovaNET 12.0 - Remote Command Execution / source: https://www.securityfocus.com/bid/39693/info NovaStor NovaNET is prone to code-execution, denial-of-service, and information-disclosure vulnerabilities. An attacker can exploit these issues to execute arbitrary code, access sensitive...

helplink 0.1.0 - show.php Remote File Inclusion

helplink 0.1.0 - show.php Remote File Inclusion Helplink 0.1.0 show.php file Remote File Inclusion Vulnerability D.S : http://sourceforge.net/projects/helplink/ V.C ================================show.php================================= 01 :...

WordPress 1.5.1.1 2.2.2 - Multiple Vulnerabilities

WordPress 1.5.1.1 2.2.2 - Multiple Vulnerabilities !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved. . '. .-/|||||||-...

Boa 0.93.15 - Administrator Password Overwrite Authentication Bypass

Boa 0.93.15 - Administrator Password Overwrite Authentication Bypass source: https://www.securityfocus.com/bid/25676/info Boa is prone to an authentication-bypass vulnerability because the application fails to ensure that passwords are not overwritten by specially crafted HTTP Requests. An attack...

ProFTPd 1.x - mod_tls Remote Buffer Overflow

ProFTPd 1.x - modtls Remote Buffer Overflow / Anti-modTLS-0day version 2 ProFTPd .. + modtls remote-root-0day-exploit main advantages of this exploit: 1 No patched modtls versions yet 2 This is a preauthentication bug 3 Bruteforcing option eheheheee main disadvantages: 2 Target mechanism isn't ve...

Beacon 0.2.0 - splash.lang.php Remote File Inclusion

Beacon 0.2.0 - splash.lang.php Remote File Inclusion Beacon = 2.0Remot file inclusion languagePath Download script : http://download.savannah.gnu.org/releases/beacon/beacon020.zip Thanks Str0ke Exploit: http://victime.com/pbeaconpath/beacon/language/1/splash.lang.php?languagePath=shell.txt?...

XOOPS module Articles 1.02 - print.php?id SQL Injection

XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...