56796 matches found
eliteCMS 1.0 'page' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30990/info eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit...
Asus RT56U 3.0.0.4.360 - Remote Command Injection
No description provided by source...
Linksys WRT160nv2 - apply.cgi Remote Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require...
DataLife Engine 8.3 engine/inc/help.php config[langs] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
CarLine Forum Russian Board 4.2 IMG Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...
BibORB 1.3.2 Login Module Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/12583/info BibORB is reported prone to multiple vulnerabilities arising from insufficient sanitization of user-supplied input. These issues can be exploited by a remote attacker to carry out cross-site scripting, HTML...
Microsoft Windows Media Player 7 Embedded OCX Control Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook...
Grayscale BandSite CMS 1.1 shows_content.php the_band Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive informatio...
HP eSupportDiagnostics 1.0.11 'hpediag.dll' ActiveX Control Multiple Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26967/info The HP eSupportDiagnostics ActiveX control is prone to multiple information-disclosure vulnerabilities. An attacker can exploit these issues by enticing an unsuspecting victim to visit a malicious HTML page...
Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2013-01-02 Allied Telesis AT-MCF2000M 3.0.2 Gaining Root Shell Access Device: The AT-MCF2000M is t...
Mac OS X mDNSResponder UPnP Location Overflow
No description provided by source. $Id: upnplocation.rb 11515 2011-01-08 01:12:15Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
PHP-Nuke Gallery 1.3 Module - 'artid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27957/info The Gallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
XMB Forum 1.8 member.php member Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/8013/info XMB Forum has been reported prone to multiple cross-site scripting and HTML-injection vulnerabilities because the application fails to sanitize user-supplied data. An attacker may exploit any one of these...
OpenBB 1.0/1.1 Index.PHP Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7401/info It has been reported that OpenBB does not properly check input passed via the 'index.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...
Zabbix Agent < 1.6.7 - Remote Bypass Vulnerability
No description provided by source. Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers...
Schneider Electric Accutech Manager Heap Overflow PoC
No description provided by source. Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd...
osPHPSite SQL Injection Vulnerability
No description provided by source. Exploit Title: osPHPSite SQL Injection Vulnerability Author : vir0e5 Date : 1-12-2011 Vendor : http://www.osphpsite.com Software Link: http://sourceforge.net/projects/osphpsite Version: ALL VERSION Vulnerable File index.php Exploit...
Opera 7.20 Mail Client Policy Circumvention Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8254/info The Opera M2 Mail Client is vulnerable to a policy circumvention issue that could allow information to be disclosed to a remote attacker. It is possible for an attacker to bypass the option to suppress the viewi...
Geeklog 1.3.5 HTML Attribute Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5270/info A cross site scripting vulnerability has been reported for Geeklog. Reportedly, Geeklog does not properly sanitize user supplied input before being included when posting comments or writing stories. Geeklog make...
D-Link Routers - Multiple Vulnerabilities
No description provided by source. The following five D-Link model routers suffer from several vulnerabilities including Clear Text Storage of Passwords, Cross Site Scripting and Sensitive Information Disclosure. DIR-652 D-Link Wireless N Gigabit Home Router DIR-835 D-Link Network DIR-835L Wirele...
VTLS Web Gateway 48.1 Searchtype Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26419/info Web Gateway is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
ajax category dropdown wordpress plugin 0.1.5 - Multiple Vulnerabilities
No description provided by source. ============================= Vulnerability ID: HTB22946 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectioninajaxcategorydropdownwordpressplugin.html Product: Ajax Category Dropdown wordpress plugin Vendor: http://www.dyasonhat.com/...
Piwigo 2.5.2 Cross Site Scripting
No description provided by source. Exploit Title: Piwigo 2.5.2 = Cross Site Scripting Date: 2013 26 September Author: Arsan Software Homepage: http://www.piwigo.org Version : 2.5.2 Tested on: Linux & Windows Category: webapps Google Dork: intext:Powered by Piwigo + Exploit : - About Piwigo : Host...
Joomla Component com_bca-rss-syndicator LFI Vulnerability
No description provided by source...
PHP121 Instant Messenger 2.2 - Local File Inclusion Vulnerability
No description provided by source. +========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit
No description provided by source. !/usr/bin/php -q ?php errorreportingEALL ^ ENOTICE; darkfig@darky:/ ./vhcssploit.php -url http://localhost/vhcs2/ VHCS = 2.4.7.1 vhcs2daemon Remote Root Exploit -------------------------------------------------- About: by DarkFig gmdarkfig at gmail dot com...
Solaris 2.6/7.0/8 snmpXdmid Buffer Overflow Vulnerability (msf)
No description provided by source. source: http://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid...
Konftel 300IP SIP-based Conference Phone <= 2.1.2 - Remote Bypass Reboot
No description provided by source...
skyportal vrc6 Multiple Vulnerabilities
No description provided by source. WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders : Shahin...
dotProject 2.1.3 XSS and Improper Permissions
No description provided by source...
MediaMonkey 3.0.3 URI Handling Multiple Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30251/info MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input. An attacker can exploit these issues to crash the application. Given the nature of these...
Netquery 3.1 nqgeoip2.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...
ASPNuke 0.80 register.asp Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14062/info ASPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...
Netquery 3.1 submit.php portnum Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripting attacks. Netquer...
PunBB <= 1.2.14 Remote Code Execution Exploit
No description provided by source...
Evince PDF Reader - 2.32.0.145 (Windows) and 3.4.0 (Linux) - Denial of Service
No description provided by source. Advisory Information : ====================== Title : Evince 2.32.0.145 - Denial Of Service Product : Evince pdf reader Vendor Homepage: https://projects.gnome.org/evince/ Vulnerable Versions : Windows 2.32.0.145, Linux 3.4.0 and probably prior release Tested...
Xlight FTP Server 1.25/1.41 PASS Command Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents...
WordPress MM Duplicate plugin <= 1.2 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Duplicate plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip Version: 1.2 tested --- PoC ---...
Silc Server 1.0.2 New Channel Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22846/info SILC Server is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected server, effectively denying...
DMXReady Secure Login Manager 1.0 content.asp sent Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could...
GLPI 0.83.9 'unserialize()' Function Remote Code Execution Vulnerability
No description provided by source. Source: http://www.securityfocus.com/bid/60823/info GLPI is prone to a remote PHP code-execution vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromi...
Apple Safari 4.0.4 Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38133/info Apple Safari is prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a denial-of-service condition. Given the nature of this...
Pre Hotel and Resorts 'user_login.asp' Multiple SQL Injection Vulnerabilies
No description provided by source. source: http://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
PHP 4.x Transparent Session ID Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7761/info A cross-site scripting vulnerability has been discovered in PHP. The problem occurs due to insufficient sanitization of the PHPSESSID URI parameter. An attacker may be capable of exploiting this vulnerability by...
Pre ASP Job Board 'emp_login.asp' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32572/info Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the brows...
Wordpress Cart66 Plugin 1.5.1.14 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Wordpress Cart66 Plugin 1.5.1.14 Multiple Vulnerabilities Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: September 29th 2013 Vendor notified: September 29th 2013 Vendor fixed: October 2 2013 Vendor Homepage: http://cart66.co...
International TeleCommunications WebBBS 2.13 login & password Buffer Overflow
No description provided by source. source: http://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and password are not bounds checked and can result...
IBM Tivoli Identity Manager 5.0.5 User Profile HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied...
ABBS Audio Media Player 3.1 - (.lst) Buffer Overflow
No description provided by source. !/usr/bin/python Exploit Title: ABBS Audio Media Player v3.1 .lst Buffer Overflow Version: v3.1 Date: 2013-05-04 Author: Julien Ahrens @MrTuxracer Homepage: http://www.inshell.net Software Link: http://abbs.qsnx.net/ Tested on: Windows XP SP3 DE Windows 7 SP1...