Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

CubeCart 3.x - Remote File Upload Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.25 views

Lynx 2.8.x Command Line URL CRLF Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5499/info A CRLF injection vulnerability has been reported for Lynx that may allow an attacker to include extra HTTP headers when viewing web pages. If Lynx is called from the command line, carriage return and line feed...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.10 views

Key Focus Web Server 3.1 Index.WKF Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.92 views

izicontents <= rc6 (rfi/lfi) Multiple Vulnerabilities

No description provided by source. o bug /. . . . .-' -...-'/ o o , . o -...--.\ vuln.: iziContents = RC6 RFI/LFI Multiple Remote Vulnerabilities author: [email protected] download: http://www.izicontents.com/download/iziContents1RC6.zip greetz: cOndemned, kacper ; remote file inclusion:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

JanaServer 2 Multiple Remote Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11780/info JanaServer 2 is a commercially available proxy server designed for the Microsoft Windows platform. It contains support for services such as HTTP, FTP, email, and RealPlayer streaming. Multiple remote denial of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.23 views

System V Derived /bin/login Extraneous Arguments Buffer Overflow

No description provided by source. $Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

SSH Communications Security SSH 1.2.27 Authentication Socket File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the system. SSH has the concept of authentication...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

Shareplex 2.1.3 .9/2.2.2 beta Arbitary Local File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2535/info Shareplex is a database replication tool from Quest Software. Versions of the product contain a vulnerability which can permit local unprivileged users to read arbitrary files. The Qview component of Shareplex...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

Affix Bluetooth Protocol Stack 3.1/3.2 Signed Buffer Index Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may b...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.31 views

elgg (xss/csrf/change password) Multiple Vulnerabilities

No description provided by source. + CMS Elgg 1.00 XSS;CSRF;Cambia PasswordMultiple Remote Vulnerabilities + Discovered By ThE Lorddemon [email protected] + Vendor:http://elgg.org/ + Greetings: Project MEMI-Bolivia, OpTix, RTM security Group http://zonartm.og Change Password Remotely:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

WM-News 0.5 Print.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyin...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.13 views

OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit

No description provided by source. !/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy [email protected] Yes, I really did implement crc-32 in bash. usage: script hostname victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netc...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

mojoportal - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.69 views

RoundCube 0.3.1 XRF/SQL injection

No description provided by source. Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. POST data in http://site.com/roundcube/index.php...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

Magic Winmail Server 4.0 (Build 1112) upload.php Traversal Arbitrary File Upload

No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

HP HP-UX 10.20/11.0,IBM AIX <= 4.3,SCO Unixware 7.0,Sun Solaris <= 2.6

No description provided by source. source: http://www.securityfocus.com/bid/131/info Due to improper checking of ownership, the dtappgather utility shipped with the Common Desktop Environment allows arbitrary users to overwrite any file present on the filesystem, regardless of the owner of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

No description provided by source. $Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit

No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.37 views

Exim 4.63 - Remote Root Exploit

No description provided by source. Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as trojanurl and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print Usage: $...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Joomla Jobprofile Component (com_jobprofile) - SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72384' ssvid version = '1.0' author = 'kikay' vulDate = '2011-12-02' createDate ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.13 views

MusicBox 2.3 Type Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.9 views

myNewsletter 1.1.2 UserName SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

JobHut 1.2 - Remote Password Change/Delete/Activate User Vulnerability

No description provided by source. -------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.26 views

Kerio Personal Firewall <= 4.1.1 - Multiple IP Options DoS Exploit

No description provided by source. / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/research/advisories/AD20041109.html...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

ViArt CMS forum.php forum_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

cPanel 5/6/7/8/9 dir Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

PHP-Fusion Database Backup Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10974/info It is reported that PHP-Fusion is susceptible to a database backup information disclosure vulnerability. An anonymous remote attacker may be able to download a complete database backup from the server...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.10 views

NetWin DBabble 2.5 i Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8637/info A cross-site scripting problem has been reported in NetWin DBabble. This could make it possible for an attacker to potentially execute code in the security context of a site using the vulnerable software. This...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

PHP-Nuke 6.0 Modules.PHP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacke...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

Opera + Mozilla Firefox 3.6 - Long String Crash Exploit (0day)

No description provided by source. ======================================================================= Mozilla Firefox 3.6 plenitude String Crash0day Exploit Opera plenitude String Denial of Service Exploit ======================================================================= by Asheesh Kum...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.290 views

Webfroot Shoutbox 2.32 Expanded.PHP Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php script...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

Joomla Component (com_huruhelpdesk) SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)

No description provided by source. !-- WARNING! This is exploit code from the wild. The original first 2 unicode chars at 'id=sun8' were ub8acu1029. Use, as always, at your own risk. body div style=visibility:hidden;width:0px;height:0px div...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

e107 <= 0.75 - (e107language_e107cookie) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum = 1.0b / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: adnforum $ Version: = 1.0b $ File affected: index.php $ Download:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

Pre Survey Generator 'default.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

Squid Web Proxy 2.2 cachemgr.cgi Unauthorized Connection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2059/info The 'cachemgr.cgi' module is a management interface for the Squid proxy service. It was installed by default in '/cgi-bin' by Red Hat Linux 5.2 and 6.0 installed with Squid. This script prompts for a host and...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.26 views

SGI IRIX <= 6.4 cgi-bin handler Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/380/info A vulnerability exists in the cgi-bin program 'handler', as included by Silicon Graphics in their Irix operating system. This vulnerability will allow a remote attacker to execute arbitrary commands on the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

SGI IRIX 6.5.22 GR_OSView Local Arbitrary File Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13058/info A local file overwrite vulnerability affects SGI IRIX. This issue is due to a failure of the affected utility to drop privileges prior to carrying out critical functionality. An attacker may leverage this issue...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

CodetoSell ViArt Shop Enterprise 2.1.6 reviews.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

D-Link DSL Router Remote Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13679/info Various D-Link DSL routers are susceptible to a remote authentication bypass vulnerability. This issue is due to a failure of the devices to require authentication in certain circumstances. This vulnerability...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

Siteframe 2.2.4 search.php Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7140/info It has been reported that Siteframe does not sufficiently filter user supplied URI parameters on Siteframe pages. As a result of this deficiency, it is possible for a remote attacker to create a malicious link...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.27 views

XnView ECW Image Processing Heap Overflow

No description provided by source. Application: XnView ECW Image Processing Heap Overflow Platforms: Windows Secunia: SA49091 PRL: 2012-13 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter: @ProtekResearch 1 Introduction 2 Report Timeline 3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.26 views

eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities

No description provided by source. !--- Title: eXtreme Message Board 1.9.11 Multiple CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Thu 15 Jul 2010 12:08:07 PM EEST Vendor: http://www.xmbforum.com/ Download: http://www.xmbforum.com/download/XMB-1.9.11.09.zip --- -= CSRF PoC 1 - Change...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Joomla Component Ticketbook Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================ o Joomla Component Ticketbook Local File Inclusion Vulnerability Software : comticketbook version 1.0.1 Vendor : http://www.demo-page.de/ Author :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

cPanel <= 10.8.x (cpwrap via mysqladmin) Local Root Exploit (php)

No description provided by source. !- for use old cpanel exploit http://www.milw0rm.com/exploits/2466 you need have !- bash shell access on victim server but with this new exploit you only need !- to upload php file and run this into browser on victim servers. !- then you have root Access and you...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

DBHcms <= 1.1.4 - Remote File Inclusion exploit

No description provided by source. !/usr/bin/perl DBHcms = 1.1.4 Remote File Inclusion exploit Vendor url: www.drbenhur.com exploit is hard to execute through a browser -possible though- since it's with POST Iron http://www.randombase.com require LWP::UserAgent; Shell: ?php...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

MPlayer SAMI Subtitle File Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

ExpressionEngine 1.6 Avtaar Name HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/34193/info ExpressionEngine is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796