Lucene search
+L
SeebugRecent

56796 matches found

seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

Cisco PIX TCP SYN Packet Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15525/info Cisco PIX is susceptible to a remote denial-of-service vulnerability when handling certain TCP SYN packets. This issue allows attackers to temporarily block network traffic to arbitrarily targeted TCP services...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

CacheFlow CacheOS 3.1.x/4.0.x/4.1 Unresolved Domain Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5305/info CacheOS is the firmware designed and distributed with CacheFlow web cache systems. It is maintained and distributed by CacheFlow. User supplied data is not sanitized before being included in an unresolved host...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

Check Point Software Firewall-1 4.0/1 4.1 Fragmented Packets DoS

No description provided by source. source: http://www.securityfocus.com/bid/1312/info By sending illegally fragmented packets directly to or routed through Check Point FireWall-1, it is possible to force the firewall to use 100% of available processor time logging these packets. The FireWall-1...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

Joomla Component com_caddy - Vulnerability

No description provided by source. Exploit Title: Vulnerability in Joomla Component comcaddy Date: 2010-04-22 Author: SuBz3r0 Software Link: Joomla Component: comcaddy Tested on: CVE : if exists Code : Just use for example the firefox addon tamper data while adding a product to the cart. Then loo...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

CuteNews 1.4.6 index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.13 views

FrontPage 97/98 Server Image Mapper Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in the format http:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

EFileGo 3.0 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16124/info eFileGo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to retrieve...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

DGNews 2.1 Footer.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24200/info DGNews is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.23 views

BigAnt Server 2.2 - Buffer Overflow

No description provided by source. $Id: bigantserver.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

CubeCart 3.x - Remote File Upload Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.25 views

Lynx 2.8.x Command Line URL CRLF Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5499/info A CRLF injection vulnerability has been reported for Lynx that may allow an attacker to include extra HTTP headers when viewing web pages. If Lynx is called from the command line, carriage return and line feed...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.10 views

Key Focus Web Server 3.1 Index.WKF Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24623/info Key Focus Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.92 views

izicontents <= rc6 (rfi/lfi) Multiple Vulnerabilities

No description provided by source. o bug /. . . . .-' -...-'/ o o , . o -...--.\ vuln.: iziContents = RC6 RFI/LFI Multiple Remote Vulnerabilities author: [email protected] download: http://www.izicontents.com/download/iziContents1RC6.zip greetz: cOndemned, kacper ; remote file inclusion:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

JanaServer 2 Multiple Remote Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/11780/info JanaServer 2 is a commercially available proxy server designed for the Microsoft Windows platform. It contains support for services such as HTTP, FTP, email, and RealPlayer streaming. Multiple remote denial of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.1309 views

tiki wiki cms groupware 5.2 - Multiple Vulnerabilities

No description provided by source. Source: http://www.securityfocus.com/bid/43507/info Tiki Wiki CMS Groupware is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local...

6.7AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.23 views

System V Derived /bin/login Extraneous Arguments Buffer Overflow

No description provided by source. $Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

SSH Communications Security SSH 1.2.27 Authentication Socket File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/660/info A vulnerability in SSH's creation of the authentication agent UNIX domain socket allows local users to create a UNIX domain socket with an arbitrary file name in the system. SSH has the concept of authentication...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

Shareplex 2.1.3 .9/2.2.2 beta Arbitary Local File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2535/info Shareplex is a database replication tool from Quest Software. Versions of the product contain a vulnerability which can permit local unprivileged users to read arbitrary files. The Qview component of Shareplex...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.15 views

Affix Bluetooth Protocol Stack 3.1/3.2 Signed Buffer Index Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/13347/info A local signed buffer index vulnerability affects Affix Bluetooth Protocol Stack. This issue is due to a failure of the affected utility to properly handle user-supplied buffer size parameters. This issue may b...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.31 views

elgg (xss/csrf/change password) Multiple Vulnerabilities

No description provided by source. + CMS Elgg 1.00 XSS;CSRF;Cambia PasswordMultiple Remote Vulnerabilities + Discovered By ThE Lorddemon [email protected] + Vendor:http://elgg.org/ + Greetings: Project MEMI-Bolivia, OpTix, RTM security Group http://zonartm.og Change Password Remotely:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

Telekorn Signkorn Guestbook 1.x includes/admin.inc.php dir_path Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and t...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

WM-News 0.5 Print.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19968/info WM-News is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlyin...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.13 views

OpenSSH <= 4.3 p1 (Duplicated Block) Remote Denial of Service Exploit

No description provided by source. !/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy [email protected] Yes, I really did implement crc-32 in bash. usage: script hostname victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netc...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

mojoportal - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.69 views

RoundCube 0.3.1 XRF/SQL injection

No description provided by source. Exploit Title: RoundCube 0.3.1 SQL injection Date: 10/10/2011 Author: Smith Falcon Software Link: http://roundcube.net/download Version: 0.3.1 Tested on: Linux timezone= is vulnerable to SQL Union Injection. POST data in http://site.com/roundcube/index.php...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

Magic Winmail Server 4.0 (Build 1112) upload.php Traversal Arbitrary File Upload

No description provided by source. source: http://www.securityfocus.com/bid/12388/info Magic Winmail Server is reportedly affected by multiple vulnerabilities. There are two distinct directory traversal vulnerabilities in the Webmail interface allowing both arbitrary file downloads and uploads...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.17 views

HP HP-UX 10.20/11.0,IBM AIX <= 4.3,SCO Unixware 7.0,Sun Solaris <= 2.6

No description provided by source. source: http://www.securityfocus.com/bid/131/info Due to improper checking of ownership, the dtappgather utility shipped with the Common Desktop Environment allows arbitrary users to overwrite any file present on the filesystem, regardless of the owner of the...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

Kazaa Altnet Download Manager ActiveX Control Buffer Overflow

No description provided by source. $Id: kazaaaltnetheap.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Linux Kernel <= 2.6.17.4 - (proc) Local Root Exploit

No description provided by source. / Author: h00lyshit Vulnerable: Linux 2.6 ALL Type of Vulnerability: Local Race Tested On : various distros Vendor Status: unknown Disclaimer: In no event shall the author be liable for any damages whatsoever arising out of or in connection with the use or sprea...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.37 views

Exim 4.63 - Remote Root Exploit

No description provided by source. Exim 4.63 RedHat/Centos/Debian Remote Root Exploit by Kingcope Modified perl version of metasploit module =for comment use this connect back shell as trojanurl and be sure to setup a netcat, ---snip--- $system = '/bin/sh'; $ARGC=@ARGV; if $ARGC!=2 print Usage: $...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.35 views

phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin = 4.2.1 Local File Inclusion Vulnerability Script: phpPgAdmin is a web-based administratio...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.28 views

Joomla Jobprofile Component (com_jobprofile) - SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72384' ssvid version = '1.0' author = 'kikay' vulDate = '2011-12-02' createDate ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.13 views

MusicBox 2.3 Type Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.9 views

myNewsletter 1.1.2 UserName SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

JobHut 1.2 - Remote Password Change/Delete/Activate User Vulnerability

No description provided by source. -------------------------------------------------- JobHut = 1.2 manageUsers Remote password change Vulnerability ---------------------------------------------------- founder : ThE g0bL!N Script Download: http://jobhut.spranger.us/ version:= 1.2 thx: to K-159 for...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.26 views

Kerio Personal Firewall <= 4.1.1 - Multiple IP Options DoS Exploit

No description provided by source. / HOD-kerio-firewall-DoS-expl.c: 2004-11-10 Copyright c 2004 houseofdabus Kerio Personal Firewall Multiple IP Options Denial of Service PoC Coded by .:: houseofdabus ::. Bug discoveried by eEye: http://www.eeye.com/html/research/advisories/AD20041109.html...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

Sam Hawker wmcdplay 1.0 beta1-2 Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1047/info wmcdplay is cdplayer generally used with the WindowMaker X11 window-manager on unix systems. While wmcdplay is rarely installed at all by default, when it is installed it is typically set setuid root. wmcdplay i...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.19 views

ViArt CMS forum.php forum_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.23 views

Wordpress Plugin audio gallery playlist <= 0.12 - SQL Injection

No description provided by source. Exploit Title: WordPress wp audio gallery playlist plugin = 0.12 SQL Injection Vulnerability Date: 2011-08-30 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-audio-gallery-playlist.0.12.zip...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

cPanel 5/6/7/8/9 dir Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9853/info It has been reported that cPanel may be prone to a cross-site scripting vulnerability that may allow a remote attacker to execute HTML or script code in a user's browser. The issue presents itself due to...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.21 views

PHP-Fusion Database Backup Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10974/info It is reported that PHP-Fusion is susceptible to a database backup information disclosure vulnerability. An anonymous remote attacker may be able to download a complete database backup from the server...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.10 views

NetWin DBabble 2.5 i Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8637/info A cross-site scripting problem has been reported in NetWin DBabble. This could make it possible for an attacker to potentially execute code in the security context of a site using the vulnerable software. This...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.16 views

PHP-Nuke 6.0 Modules.PHP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacke...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.22 views

Opera + Mozilla Firefox 3.6 - Long String Crash Exploit (0day)

No description provided by source. ======================================================================= Mozilla Firefox 3.6 plenitude String Crash0day Exploit Opera plenitude String Denial of Service Exploit ======================================================================= by Asheesh Kum...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.290 views

Webfroot Shoutbox 2.32 Expanded.PHP Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7772/info Shoutbox is prone to an issue that may result in the execution of attacker-supplied code. The vulnerability exists due to insufficient sanitization of input into the expanded.php script...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.20 views

Joomla Component (com_huruhelpdesk) SQL Injection Vulnerability

No description provided by source...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

Firefox 3.6.8 - 3.6.11 Interleaving document.write and appendChild Exploit (From the Wild)

No description provided by source. !-- WARNING! This is exploit code from the wild. The original first 2 unicode chars at 'id=sun8' were ub8acu1029. Use, as always, at your own risk. body div style=visibility:hidden;width:0px;height:0px div...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.11 views

e107 <= 0.75 - (e107language_e107cookie) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum = 1.0b / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: adnforum $ Version: = 1.0b $ File affected: index.php $ Download:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.18 views

Pre Survey Generator 'default.asp' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30349/info Pre Survey Generator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or...

7.1AI score
SaveExploits0
Total number of security vulnerabilities56796